Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
File: bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft (raw, json)
Hash identifier: ZAHGVzpvRtQp1JuWcd6AIjhtpGY29xMHKgsFi/ZXxIM=
Subject key identifier: 2C:5F:B8:4B:51:E2:64:FD:61:A5:76:C8:08:C2:BC:9E:BA:2F:3F:84
Authority key identifier: 6D:BC:20:A7:36:FF:C1:31:9E:FD:E4:DB:63:13:7C:87:83:C6:B3:50
Certificate issuer: /CN=6dbc20a736ffc1319efde4db63137c8783c6b350
Certificate serial: 0197C380C83EFC8F92D7F45ABB785E453525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
Manifest number: 15C0
Signing time: Tue 01 Jul 2025 01:01:26 +0000
Manifest this update: Tue 01 Jul 2025 01:01:26 +0000
Manifest next update: Wed 02 Jul 2025 01:01:26 +0000
Files and hashes: 1: YcO7jD5AOjhycshFGG-dIbqWcW4.roa (hash: BRqKFwkTw48defv1cFItIn/eg55FRfTYZOTRhHFmj2Q=)
2: bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl (hash: dQ1psR6AFplair7s/52L+BIY8EnfAvi6vo7Tx+FNBH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:80:c8:3e:fc:8f:92:d7:f4:5a:bb:78:5e:45:35:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbc20a736ffc1319efde4db63137c8783c6b350
Validity
Not Before: Jul 1 01:01:26 2025 GMT
Not After : Jul 2 01:01:26 2025 GMT
Subject: CN=2c5fb84b51e264fd61a576c808c2bc9eba2f3f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2d:30:43:f9:a3:cf:58:80:e7:75:f1:34:2f:
6d:1f:cd:63:ba:4b:df:b4:9e:bd:72:93:fa:d8:d3:
c1:95:80:c0:e4:b9:ed:d2:b0:59:d4:f2:8c:f7:ed:
01:d3:0c:ee:dd:9f:f1:65:9f:28:1f:8a:c2:a6:71:
a9:5a:54:5a:07:5a:67:d1:97:98:71:ab:27:55:8b:
1b:f5:6c:f0:e3:29:1f:3a:5f:fa:ff:68:91:25:a5:
c5:dc:14:c5:55:7d:58:80:e6:e1:93:82:e5:22:e4:
c4:96:a9:55:e7:0b:b2:af:67:f4:45:a0:bf:ae:a6:
92:b7:ba:28:fe:3c:29:ae:8a:21:47:9e:0d:98:03:
95:d7:ec:ea:45:80:c2:3b:66:e9:53:97:ce:29:68:
3c:94:45:e3:2a:2a:d8:89:4b:dd:ad:81:ac:95:18:
cd:a1:2c:b7:18:a4:14:93:9e:ac:c8:f4:42:57:26:
30:83:61:74:fb:a8:7f:99:68:10:7e:01:f3:1f:a8:
c7:91:6e:69:df:22:46:56:69:12:c7:90:de:12:11:
49:15:7b:d0:f2:ca:ee:06:2c:57:62:31:b4:53:fb:
90:df:27:0c:f1:8d:1f:9c:4c:0d:61:82:c8:c5:e0:
a2:25:71:5e:7c:8d:e7:b7:00:62:c9:0c:65:bf:20:
0a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5F:B8:4B:51:E2:64:FD:61:A5:76:C8:08:C2:BC:9E:BA:2F:3F:84
X509v3 Authority Key Identifier:
keyid:6D:BC:20:A7:36:FF:C1:31:9E:FD:E4:DB:63:13:7C:87:83:C6:B3:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:82:54:d7:45:bc:f6:cd:56:2f:be:ae:60:82:b7:0d:29:55:
c5:2f:c9:a7:6d:78:0d:49:56:9c:af:52:25:aa:a0:0d:56:73:
5a:06:f4:8e:a8:4b:8c:a9:41:a7:7f:b6:8b:84:48:0f:e9:44:
f2:6e:3c:18:cd:84:dd:2f:86:78:a0:cc:eb:ee:71:e2:1a:fb:
8f:63:b4:97:9c:2d:f3:6a:b7:cb:87:7e:6c:ff:ae:37:5a:39:
ad:da:8c:ca:3c:a8:b3:1a:9b:df:2d:71:45:21:d3:9a:31:b8:
52:8a:92:d9:0f:8b:a8:9d:dc:52:f2:8e:76:fc:fa:d2:e3:78:
f3:de:32:66:d2:6a:5a:74:0b:19:40:79:1c:96:63:42:5a:95:
ee:3c:1e:ef:43:6f:ce:59:b7:62:a3:8e:0d:7e:69:68:01:40:
2d:dc:30:af:db:10:51:11:0c:36:5b:27:d6:c9:77:b0:56:49:
c5:14:f7:56:09:44:8e:ea:da:0b:32:70:02:8c:20:28:4c:99:
b4:04:cd:88:89:e8:0f:bd:4e:ed:30:a1:11:30:6b:40:e0:09:
35:4c:3a:65:a9:24:38:6e:ab:87:66:63:90:85:b7:e6:b1:7b:
f3:c5:5d:6f:85:4c:ca:8c:af:ef:43:7b:44:c8:8a:18:87:f1:
b1:e2:49:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:46:19 2025 by rpki-client