Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
File: BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft (raw, json)
Hash identifier: r98FLkHKIdxNo3MLIvYEaEEyH38pf+acgoqTYJ4NlT0=
Subject key identifier: E5:4D:67:7F:8C:11:0C:47:9A:9D:75:A3:08:19:0B:56:F7:4A:02:50
Authority key identifier: 07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA
Certificate issuer: /CN=0701b929fd9edbabae35dd44adc161d7d470b1fa
Certificate serial: 0197B70F3B42CC4371630EF615D3049B5576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:58 +0000
Manifest this update: Sat 28 Jun 2025 15:01:58 +0000
Manifest next update: Sun 29 Jun 2025 15:01:58 +0000
Files and hashes: 1: BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl (hash: eAya0HzJrQuJZA11qD90pMz8BL9UD4lpJB0B9YtWbN8=)
2: ytt6NDRPw01MpgKIPHZI-KhTqFM.roa (hash: Qz/7LnFWYN8eKNmOmwVT183VYftTGjaTvg3yJfBkJTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:3b:42:cc:43:71:63:0e:f6:15:d3:04:9b:55:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0701b929fd9edbabae35dd44adc161d7d470b1fa
Validity
Not Before: Jun 28 15:01:58 2025 GMT
Not After : Jun 29 15:01:58 2025 GMT
Subject: CN=e54d677f8c110c479a9d75a308190b56f74a0250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6e:09:8b:ee:70:6b:30:b1:42:d6:0e:d9:d5:
79:e5:cf:7b:0e:f9:e5:99:1a:33:bd:2f:31:e7:06:
68:1f:9b:66:c7:00:9c:17:0a:d1:73:c6:e1:7a:0b:
dc:9c:f1:09:84:38:97:5b:b4:a9:1b:c6:8a:c8:5d:
dc:de:db:ab:38:20:af:44:cf:b5:29:2c:79:9f:53:
ac:e1:eb:ae:92:3b:65:87:9d:eb:e1:3d:5c:d7:0c:
57:b0:0a:35:04:b6:cc:a0:89:08:63:be:91:e7:a7:
57:eb:5d:fc:ed:c1:d4:24:55:b8:09:7f:ca:89:30:
68:cf:6d:37:92:21:ef:08:6f:0a:2f:cf:76:89:ae:
c9:e0:6c:12:fe:cf:ae:73:0d:c2:45:4a:02:db:3b:
1a:61:48:09:bb:52:f1:82:f0:1d:b0:05:38:76:a5:
fd:5a:9f:b1:47:8d:db:33:74:42:65:16:53:5a:5e:
11:be:05:25:97:8b:fd:b0:8b:55:38:74:d1:3d:9d:
42:31:df:0a:16:c7:5d:27:50:a2:51:27:4f:b8:3b:
63:c1:c5:e8:7b:c3:cd:83:04:97:db:27:d7:2b:df:
f5:32:43:dd:25:27:ae:63:58:2e:ff:f5:21:de:d4:
4c:b1:80:41:64:f1:47:7a:5e:e3:76:f5:7b:e4:2a:
a5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4D:67:7F:8C:11:0C:47:9A:9D:75:A3:08:19:0B:56:F7:4A:02:50
X509v3 Authority Key Identifier:
keyid:07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:77:25:8e:4d:7d:95:bf:6c:81:a7:fb:63:88:1d:2b:6d:03:
bf:22:0e:95:7a:aa:5e:86:7b:8e:55:b6:fc:86:59:d1:1a:33:
16:33:27:a6:98:c0:71:01:51:82:5a:cc:0e:21:de:c9:b4:66:
03:2f:2b:e2:5e:77:bd:9a:ab:ac:f4:aa:84:9b:40:92:84:1b:
7d:9e:4b:db:ce:d0:8f:8d:e4:4e:f6:51:1d:10:bb:e7:48:d5:
69:21:2a:26:2b:90:87:81:b8:26:40:cb:8a:55:29:b0:2a:d1:
98:ef:7a:cb:71:a2:ea:31:bd:27:92:1b:f3:09:fb:03:4d:2b:
1d:e2:e1:eb:93:0d:70:20:99:8a:0c:e8:c9:94:6d:a3:2c:36:
08:b9:08:a5:a2:ec:36:36:0f:6b:89:8c:35:68:75:28:51:e1:
c0:30:f5:7c:3a:04:0e:8a:4e:44:da:e8:33:aa:35:59:7d:0f:
78:f7:a1:4a:9a:38:64:21:4b:31:e8:50:b8:d7:ad:4e:be:8c:
24:af:06:a0:fc:f1:3c:80:e9:27:f2:7f:71:eb:6c:12:b7:0e:
16:fd:19:cf:4c:35:a7:16:9d:a4:e9:49:9d:62:8d:52:85:d0:
bb:b6:c3:c5:af:b9:2b:5f:69:97:57:48:e0:53:ae:9a:0a:e8:
7b:ff:2b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:42 2025 by rpki-client