Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
File: bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft (raw, json)
Hash identifier: gNZcjErJo/cAu6czpG8owNo8a5MOJE2v2NhVPLGgZE0=
Subject key identifier: AF:E9:D1:7A:67:71:9B:6C:DA:CD:DD:05:2F:78:50:75:91:A3:56:6D
Authority key identifier: 6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
Certificate issuer: /CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Certificate serial: 0197CEDF905ACD7AE7F21F53C6DE50332DB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
Manifest number: 0CA2
Signing time: Thu 03 Jul 2025 06:00:47 +0000
Manifest this update: Thu 03 Jul 2025 06:00:47 +0000
Manifest next update: Fri 04 Jul 2025 06:00:47 +0000
Files and hashes: 1: CNEWTRKouN1ztdllhCMhjhdKKHg.roa (hash: aqhxq+qj3sPvgTV0jZeMkrVOr4/8ei7UkGfqQsH5Ljo=)
2: Jaj49FDIg9x74-Mgv5pjh9hL3VA.roa (hash: RiqG1dHCuH2e+rEOq+su9EZpKh6AH03adatnHOfLKXM=)
3: bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl (hash: pcBffYmULldLHcTX8JGvUEFKEigR9bijiALnElwCjMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:df:90:5a:cd:7a:e7:f2:1f:53:c6:de:50:33:2d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Validity
Not Before: Jul 3 06:00:47 2025 GMT
Not After : Jul 4 06:00:47 2025 GMT
Subject: CN=afe9d17a67719b6cdacddd052f78507591a3566d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f6:f6:7d:68:c7:d0:7a:b4:f1:be:40:aa:8a:
de:8b:9b:7a:92:e8:3c:77:80:4a:ee:43:21:3e:b0:
f5:da:bd:62:33:23:f4:83:bf:f5:96:04:e3:21:76:
61:de:85:e8:81:80:44:13:c3:c4:70:1d:98:40:c1:
c0:cc:31:a1:96:60:55:36:c3:c8:13:0b:48:99:8b:
49:dd:50:37:36:e0:7b:d1:2b:ce:ef:fc:8c:ac:21:
bb:9a:41:47:ad:74:57:9f:5a:d2:51:b6:24:05:47:
8f:d7:aa:65:e3:eb:4b:6d:e7:1f:39:9f:b3:5b:78:
8c:2f:c0:1e:7f:40:4a:f1:1f:bd:a9:23:72:9b:43:
83:9e:22:ef:79:0d:85:2e:97:d3:f4:78:65:4b:dc:
f3:12:be:3b:b9:7d:51:e3:98:d8:f5:0b:2b:e0:31:
b9:82:7d:e5:69:ea:d1:69:af:e4:37:17:ad:68:bc:
39:20:a9:23:8a:4e:93:45:8e:39:5f:e1:44:81:63:
f5:ac:49:d4:c6:e1:4a:9c:56:7b:7d:2f:66:52:b7:
0c:0d:64:1b:59:1b:d3:52:b0:c7:73:45:f3:a5:55:
47:03:79:12:8d:ff:4e:aa:35:63:48:88:ba:b7:71:
1f:bb:84:64:92:72:13:5e:ce:0f:3c:bd:39:5f:aa:
16:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E9:D1:7A:67:71:9B:6C:DA:CD:DD:05:2F:78:50:75:91:A3:56:6D
X509v3 Authority Key Identifier:
keyid:6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ee:81:22:aa:b4:55:e5:63:5b:ea:00:a6:5e:1d:4f:d6:60:
3e:9a:95:ad:4e:e3:1b:e5:a0:1b:0c:0d:df:ee:9f:62:6f:29:
2d:7b:5e:f8:03:d1:99:ee:c2:a3:3b:ad:40:c8:e3:44:56:e5:
f3:5d:61:4c:0e:fc:81:1d:af:7b:ae:f5:f0:38:75:57:f2:4a:
ff:9e:c6:e2:0b:0c:ed:4b:ee:f4:d1:75:f8:0d:9f:8c:1f:7f:
27:50:e7:e5:13:0e:e1:64:34:6b:05:5b:28:31:07:37:2f:d8:
d9:3a:13:ef:08:51:a4:5a:70:1f:c0:bd:6e:2f:08:ee:42:55:
ad:6c:a6:45:8f:19:54:e4:fe:79:c6:1f:53:84:9c:8f:82:5f:
01:9c:ab:94:6f:d8:5f:15:5c:a1:b7:9f:14:0a:9b:77:8d:4e:
ac:5b:d7:5b:7d:b2:4d:5b:98:45:d1:f9:9d:bd:a8:b3:65:6b:
25:01:3a:ae:2a:84:89:9f:c1:12:2f:ef:55:a2:6b:0c:cd:0f:
58:53:33:f3:72:87:8c:8d:2f:c5:a6:7e:18:b2:64:c7:7b:7c:
2e:fd:51:a1:c0:63:3b:a5:1b:c2:23:82:14:41:90:41:97:7a:
7c:10:90:f3:fa:6b:6f:ad:2b:5e:9e:5e:b3:6d:58:8b:3c:2b:
d0:31:7e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:26:52 2025 by rpki-client