Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
File: bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft (raw, json)
Hash identifier: ywrYAO/C9sZmfbM/RsijbB9A8pHm+7uW5HYNAXzCmBA=
Subject key identifier: B9:98:C4:81:64:5B:3B:B9:0C:5F:8C:2D:1D:1C:F7:97:3A:F9:32:A6
Authority key identifier: 6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
Certificate issuer: /CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Certificate serial: 0196C9849612C17E284A60021D860A2681DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
Manifest number: 0C1A
Signing time: Tue 13 May 2025 12:00:31 +0000
Manifest this update: Tue 13 May 2025 12:00:31 +0000
Manifest next update: Wed 14 May 2025 12:00:31 +0000
Files and hashes: 1: CNEWTRKouN1ztdllhCMhjhdKKHg.roa (hash: aqhxq+qj3sPvgTV0jZeMkrVOr4/8ei7UkGfqQsH5Ljo=)
2: bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl (hash: b2LzwUCqjuD1XVflqDRvUgM523oVqWzlqAxjI5rmyRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:84:96:12:c1:7e:28:4a:60:02:1d:86:0a:26:81:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Validity
Not Before: May 13 12:00:31 2025 GMT
Not After : May 14 12:00:31 2025 GMT
Subject: CN=b998c481645b3bb90c5f8c2d1d1cf7973af932a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9f:f4:b1:1e:bc:e7:89:ef:23:93:39:af:b3:
ce:e7:88:64:3c:e1:0f:63:80:d5:54:79:69:33:18:
e5:c2:0b:9b:bf:eb:af:c7:eb:70:d3:91:1e:5d:0d:
70:26:3b:36:9e:8b:1e:a0:51:33:4e:12:8b:90:a6:
d3:91:de:78:89:ef:ce:01:f1:26:14:bf:e9:50:0f:
5a:bd:13:5e:5a:95:2d:09:f6:b4:e6:fc:14:06:e7:
55:34:8e:14:73:47:73:3a:04:b4:37:2f:85:6c:28:
88:d3:b8:1e:78:7f:20:1b:37:4f:d3:66:c2:09:4f:
9f:ab:50:c8:1d:4b:02:9a:1b:dd:7c:03:4f:30:2a:
3c:e0:7d:2d:d8:e3:47:63:ff:c4:2e:67:11:74:00:
af:49:0c:89:16:6e:de:68:73:de:64:d4:59:bd:83:
81:95:e0:d5:f7:90:69:cf:a1:4e:e6:08:9b:dd:33:
78:76:2f:ef:a0:f1:d7:81:bc:bf:57:7a:17:21:d8:
14:d2:d1:c4:f6:9f:23:8b:d2:08:f2:32:ce:36:a8:
b9:b0:4b:75:53:e2:cb:e2:dd:da:2b:cf:13:61:a5:
4c:e6:f8:2f:ae:d7:9c:0f:2b:9a:07:f2:c5:88:42:
a8:f6:ff:b7:e2:2b:dc:27:1a:f9:65:4e:af:a4:53:
62:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:98:C4:81:64:5B:3B:B9:0C:5F:8C:2D:1D:1C:F7:97:3A:F9:32:A6
X509v3 Authority Key Identifier:
keyid:6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:91:28:7d:e6:32:1f:56:c4:06:c9:97:68:03:5e:cf:a7:1f:
f9:14:b1:a5:c0:6a:9b:6e:f4:d3:9f:75:88:e5:31:d7:2e:a5:
e3:4c:a7:ed:93:a8:f2:3c:02:1f:e5:a9:2f:1a:7e:4d:b2:97:
a2:6c:33:76:a4:3a:f6:3e:92:bb:98:5b:54:1c:a3:74:27:30:
40:32:95:6d:7a:2c:f9:e2:16:74:d3:5c:e7:69:1a:dc:d8:07:
9f:5b:97:a3:75:b9:1a:9e:89:ea:cb:39:07:ff:4b:16:ce:88:
a2:7a:02:e8:66:6c:94:4e:2f:8a:b4:dd:90:35:90:31:e7:9d:
b8:63:15:83:0b:00:93:0f:2d:81:d5:4b:84:13:19:63:4e:e1:
95:96:fc:d9:45:d5:27:31:da:d0:6b:04:ca:0c:ca:94:ca:ae:
51:cf:ba:04:e0:af:44:4c:fb:20:71:dc:f1:d5:e6:f4:6a:4e:
aa:32:95:8f:f2:4f:8a:ab:f5:0d:22:83:2e:56:ea:ec:8e:06:
42:b6:7c:8e:2a:1c:3c:b0:19:b4:12:72:00:cb:de:3d:fb:e2:
7c:03:e3:86:da:5c:ef:82:b5:35:fd:d0:79:d1:b8:87:bf:1a:
11:6f:40:c9:e0:4f:b7:92:bd:83:64:e0:a3:8a:70:89:92:d8:
0c:b1:ef:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 15:56:43 2025 by rpki-client