Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
File: BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft (raw, json)
Hash identifier: Zj5gDnN8+7k/yRA7SG8RJDmF+BxxDx2w/4QLrXWFvpQ=
Subject key identifier: 0F:AB:AA:F1:0B:CD:67:2C:AE:C1:6F:92:52:B9:82:1C:00:23:FE:A3
Authority key identifier: 05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
Certificate issuer: /CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Certificate serial: 0198D4A79289F997BAABFFC8D971F15DFAF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
Manifest number: 064C
Signing time: Sat 23 Aug 2025 02:00:08 +0000
Manifest this update: Sat 23 Aug 2025 02:00:08 +0000
Manifest next update: Sun 24 Aug 2025 02:00:08 +0000
Files and hashes: 1: B6FxjiJOC6_Birv76wylcyDexTM.roa (hash: eGhXe2MadeqSm3dFdd2yllOqHv5uGkbMvrl6C4hJsTU=)
2: BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl (hash: GRbD4gY6mWQZ7535y+C7CmOHmx5UAO0pVPuYmqrEaEc=)
3: Jkosv2xFFNQ2gORMGJ-Rj1JTgqk.roa (hash: V03sqShQTC3KKVEiSIPpDzr6IAR7BOwlpV6pUG5aI+w=)
4: PU3RtVE8bUTLDau3UULyJxnwYvk.roa (hash: rurDzg32C4cm1zQE6cZCxEDJG3aKAFEXLx56a9lYAvQ=)
5: TPqMfRSK5sIipm7-2Mw_-o6t_pE.roa (hash: DbvKLEpzC4KlaBAFfc8W2Orz87Jz73d6hIvvLvcnSeI=)
6: aFnhQawEO18IQ3GTJ01kkL1iiO8.roa (hash: lmQ4l6Xz/ufxEDRo15j0d1wdcSctSZ/L1+X4hlqiZ0E=)
7: i5Cva7AkVQeMjYySCI1cSGulBFU.roa (hash: OqdQgQr223XTYw+nW6EEK96kWz2kctHBvYApbJ8V5SM=)
8: orwBdnVfFaxWFzZXqCDe7xYVF-0.roa (hash: s5h3MlDKvwqoRseQHdYHw8t3JkEhjpPj+FNdQWzBxyg=)
9: zfGaREwozQlPDznadYm5iZBdTbo.roa (hash: BQ/Qo3WVP+Q/nW3nNfYM3evPzNFHtG1U5B77mp2vN9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:92:89:f9:97:ba:ab:ff:c8:d9:71:f1:5d:fa:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Validity
Not Before: Aug 23 02:00:08 2025 GMT
Not After : Aug 24 02:00:08 2025 GMT
Subject: CN=0fabaaf10bcd672caec16f9252b9821c0023fea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7f:9d:75:fa:1e:17:24:aa:ea:2d:1f:27:41:
22:59:7a:d0:0b:92:b6:42:43:43:36:f1:51:07:8e:
6f:38:b2:f4:cb:d5:d4:21:61:63:26:f3:ba:4a:77:
9d:e0:b9:e9:98:eb:6d:c4:61:10:0e:38:1c:7b:90:
b8:9b:a6:ae:0f:3e:c9:a5:6a:56:c4:5c:71:93:5b:
7f:c0:0b:a1:73:74:25:8c:3b:9b:c5:1f:fc:17:dc:
54:88:69:42:57:06:fe:6a:d4:b0:40:a2:47:0f:ac:
33:f7:cd:cc:4f:2c:11:12:dd:46:3c:76:1a:4e:80:
ff:b1:6f:de:c8:96:e2:31:66:3b:5a:2f:e2:1b:06:
f2:39:e4:bd:fc:78:09:06:ff:1f:c6:bf:23:ad:b7:
bd:31:f7:58:f5:3b:d2:bb:dc:ca:11:d2:48:26:4c:
79:c3:f0:4a:6d:21:59:da:3d:87:29:ff:8f:d6:09:
9a:91:bf:28:84:ce:a0:4d:e1:c2:a0:25:dd:ee:06:
0c:c8:44:bb:83:65:dd:3f:42:a2:f7:5d:75:55:c7:
af:dc:0b:ec:4f:c5:eb:ee:5b:90:40:8a:23:c1:bc:
c4:2c:92:e5:ac:0b:71:be:ff:b4:2d:c6:84:d9:35:
de:0e:28:99:a2:a8:30:04:a2:a4:a6:1a:06:b7:0e:
5c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AB:AA:F1:0B:CD:67:2C:AE:C1:6F:92:52:B9:82:1C:00:23:FE:A3
X509v3 Authority Key Identifier:
keyid:05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:f2:0a:83:f6:22:0a:06:ba:fc:35:b2:c5:66:ee:4f:aa:34:
a1:7e:2f:86:a5:8d:0e:65:c9:45:8b:9f:97:ae:fd:d1:fc:05:
77:da:80:3f:ee:11:f6:f9:e3:cc:65:9e:7f:a0:27:cb:de:d4:
be:e9:20:9c:11:04:3d:ec:d6:74:2f:29:36:4c:a2:a7:ac:66:
af:52:bc:98:45:7a:79:e9:89:31:ce:07:d9:f8:c3:02:cf:88:
30:c6:f7:88:d0:09:7d:c5:84:9d:85:ce:2f:60:72:da:97:85:
11:fa:e0:87:69:38:e4:bf:46:0d:be:8b:3a:5a:62:f8:3a:2b:
28:96:32:6a:89:db:e4:d7:93:a5:ba:0c:38:b1:c0:28:e5:d4:
8c:0b:a9:76:09:ee:3e:35:81:13:9c:30:98:80:66:f0:1d:33:
88:c8:ac:44:95:9d:e8:d7:da:dd:df:c0:7a:c6:a4:f9:49:bf:
aa:b3:25:c5:42:6e:07:c2:2c:e3:3c:4d:5e:88:02:51:16:a7:
f3:d5:6e:8a:7b:58:7c:8c:e2:a0:89:24:a7:3e:f7:d6:e0:a5:
7c:01:52:0a:b3:2c:5c:dd:77:0b:e7:dd:be:56:72:ec:ac:32:
cc:86:fa:0c:5e:b0:6a:3d:9c:f6:60:3e:55:3e:b6:02:a7:27:
ce:ee:cb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:10:46 2025 by rpki-client