Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.mft
File: biw-HNO4VNZu9GxWd-9y0sWjZpc.mft (raw, json)
Hash identifier: LXjKYvCMdbCiVF4ViQF9Y0HhnC17v6m3bMD6/jybF60=
Subject key identifier: 06:C1:02:D7:1F:75:B9:CB:FF:4F:7F:89:94:59:AB:B2:57:B5:EF:7F
Authority key identifier: 6E:2C:3E:1C:D3:B8:54:D6:6E:F4:6C:56:77:EF:72:D2:C5:A3:66:97
Certificate issuer: /CN=6e2c3e1cd3b854d66ef46c5677ef72d2c5a36697
Certificate serial: 0199FCFD9F1848CF572E8C618F177065EAD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/biw-HNO4VNZu9GxWd-9y0sWjZpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.mft
Manifest number: 089C
Signing time: Sun 19 Oct 2025 15:01:43 +0000
Manifest this update: Sun 19 Oct 2025 15:01:43 +0000
Manifest next update: Mon 20 Oct 2025 15:01:43 +0000
Files and hashes: 1: biw-HNO4VNZu9GxWd-9y0sWjZpc.crl (hash: oMoOrYzf2+MJ4UcafkJn2i8j+jEzth6py0ifmunXYbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/biw-HNO4VNZu9GxWd-9y0sWjZpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:9f:18:48:cf:57:2e:8c:61:8f:17:70:65:ea:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e2c3e1cd3b854d66ef46c5677ef72d2c5a36697
Validity
Not Before: Oct 19 15:01:43 2025 GMT
Not After : Oct 20 15:01:43 2025 GMT
Subject: CN=06c102d71f75b9cbff4f7f899459abb257b5ef7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ba:86:47:91:6f:f6:1a:55:62:ee:ce:b7:42:
f5:c6:17:fc:6d:57:da:ac:19:a7:15:96:22:32:1a:
87:f2:18:98:73:ca:30:c8:d4:93:17:45:a9:2c:cb:
2d:53:a0:b7:22:ad:91:e3:34:f0:6e:b7:3a:27:14:
b8:54:c2:98:2f:00:ef:c8:3d:fd:ff:be:e4:35:a8:
25:79:ad:6d:6f:c2:09:dd:88:19:9f:cd:f1:a9:e2:
d1:22:4d:3c:53:5e:76:73:69:90:8c:43:34:94:d1:
d1:22:b7:34:b6:96:7f:b3:7f:d7:ea:ca:c8:c6:4e:
97:7d:32:bb:58:91:5a:02:d0:8c:b5:a8:2b:01:92:
b6:e5:5e:f4:1d:d9:c5:d1:30:9f:8a:16:89:3b:db:
1a:ee:5b:6d:60:61:49:c6:44:f5:4a:6f:7b:2c:ce:
ae:c6:46:83:bc:6c:46:0c:45:b7:f9:f3:a3:d6:17:
9c:f7:92:4a:1a:e1:5a:de:ca:17:25:2b:90:bc:a2:
95:df:8f:63:90:be:1d:11:78:fb:c1:6e:95:20:dc:
3f:30:7e:3c:52:72:4b:71:7d:6f:8c:a9:52:47:de:
51:02:03:88:7b:88:b4:78:1f:96:a3:50:04:41:81:
72:b9:ec:32:4b:bf:e0:44:e7:a5:6a:92:d2:5a:5b:
3b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C1:02:D7:1F:75:B9:CB:FF:4F:7F:89:94:59:AB:B2:57:B5:EF:7F
X509v3 Authority Key Identifier:
keyid:6E:2C:3E:1C:D3:B8:54:D6:6E:F4:6C:56:77:EF:72:D2:C5:A3:66:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/biw-HNO4VNZu9GxWd-9y0sWjZpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d6:c4:b2:e8:12:b1:bf:e5:41:6e:61:1c:24:58:ce:f4:f1:
b2:c7:5f:42:ff:52:3d:87:a0:b2:62:54:a0:87:66:23:e4:c6:
40:84:7e:9b:a1:8c:35:17:b0:66:6e:c4:a1:25:8a:23:a7:8c:
0f:8b:79:82:bc:8d:fb:4e:56:97:dd:56:a2:bd:38:28:4b:26:
e5:f6:6b:b1:50:3e:fa:37:71:0a:73:eb:f7:f3:67:20:f8:1f:
32:b2:a6:28:7f:2b:b3:da:c6:d0:56:6a:1b:ca:fa:c3:5b:85:
f9:4e:08:60:06:ca:f3:19:f4:c5:1b:5d:29:01:4e:8b:86:55:
cc:e4:d7:33:82:47:9c:73:ee:2b:b6:e7:eb:b0:51:61:ff:2e:
5a:63:b0:42:24:5c:b9:e2:55:16:56:f4:67:5c:33:a5:1e:4a:
8d:f4:00:2c:f0:d6:1e:46:4b:2e:99:d2:29:c9:f6:ca:eb:9e:
0d:41:5e:18:9a:46:c2:56:c3:7f:cf:89:8c:39:34:36:67:47:
4f:94:e9:00:60:84:1e:84:a9:60:17:79:76:a6:cd:6e:ed:7d:
d8:47:73:fb:83:7f:c6:01:20:f2:27:8e:e7:9f:cb:41:3a:4d:
24:ab:ec:71:c3:65:b1:e9:90:87:f3:b5:e6:15:d3:02:8c:7b:
a0:a5:b4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:06:37 2025 by rpki-client