Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/b55ef1-ca63-4ca1-a659-f9720285e797/1/bwdNLvtfPh01wpH4oRwLwL5-wbg.mft
File: bwdNLvtfPh01wpH4oRwLwL5-wbg.mft (raw, json)
Hash identifier: pYO2E0oij5QipbmLkU/fixXSZaNwwFMbeVYSRzNy1T4=
Subject key identifier: 5F:95:56:C4:15:4A:00:B0:A6:95:AD:A3:14:14:26:BF:34:3F:E9:3C
Authority key identifier: 6F:07:4D:2E:FB:5F:3E:1D:35:C2:91:F8:A1:1C:0B:C0:BE:7E:C1:B8
Certificate issuer: /CN=6f074d2efb5f3e1d35c291f8a11c0bc0be7ec1b8
Certificate serial: 0199FAD868E3F4F86119D3A06ED9A17DC9B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwdNLvtfPh01wpH4oRwLwL5-wbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/b55ef1-ca63-4ca1-a659-f9720285e797/1/bwdNLvtfPh01wpH4oRwLwL5-wbg.mft
Manifest number: 0C03
Signing time: Sun 19 Oct 2025 05:01:50 +0000
Manifest this update: Sun 19 Oct 2025 05:01:50 +0000
Manifest next update: Mon 20 Oct 2025 05:01:50 +0000
Files and hashes: 1: Xm-ngS_MnUdhXjLf6p90jOWUmEw.roa (hash: 9Gf1m1xe/g6A5DBxtP2ns4dstk3fjoEba5kQQxWmoRM=)
2: bwdNLvtfPh01wpH4oRwLwL5-wbg.crl (hash: HKpejfpX7SBceTi7+/1eHv8/h0ywsfa9CQTD4qyTTmo=)
3: q7HJcy0sw4LMamMsrbQZ9rl4cVI.roa (hash: F/OMkAbTzMuRC01PoKqTK5BDI1LCPjMGC3GeJkdGUbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/b55ef1-ca63-4ca1-a659-f9720285e797/1/bwdNLvtfPh01wpH4oRwLwL5-wbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/b55ef1-ca63-4ca1-a659-f9720285e797/1/bwdNLvtfPh01wpH4oRwLwL5-wbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwdNLvtfPh01wpH4oRwLwL5-wbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:68:e3:f4:f8:61:19:d3:a0:6e:d9:a1:7d:c9:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f074d2efb5f3e1d35c291f8a11c0bc0be7ec1b8
Validity
Not Before: Oct 19 05:01:50 2025 GMT
Not After : Oct 20 05:01:50 2025 GMT
Subject: CN=5f9556c4154a00b0a695ada3141426bf343fe93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:52:a2:d5:c2:e0:39:c5:78:e8:15:8d:d5:06:
82:09:45:4c:2a:1b:71:e2:4e:41:7a:14:f0:c4:15:
99:33:be:36:63:fc:71:a3:53:5a:e1:f5:c2:93:11:
50:de:c9:c4:6b:d8:62:b4:b6:65:83:2e:c3:40:a5:
30:b0:0c:dd:d2:59:07:61:94:ce:15:be:04:43:ec:
2e:1c:40:99:00:a1:ab:e7:a5:1b:d1:e8:79:e6:30:
3b:b6:55:30:ce:2f:7e:76:55:62:dd:ce:43:fb:fd:
12:ed:33:4c:ac:ae:d7:73:63:eb:84:cd:f5:33:3c:
dd:7a:16:b5:a2:07:03:54:60:df:1f:63:d6:27:bd:
4a:e7:ac:50:f2:e3:40:1f:75:af:75:9d:89:7f:b1:
30:89:f8:e9:76:7a:7b:55:de:76:d9:94:c0:90:ea:
22:a9:2d:5e:7f:f5:ec:39:7e:4a:e8:14:0f:5a:33:
5e:5b:e9:e7:fc:4d:38:7b:c3:95:44:df:7a:0d:1b:
54:c6:16:11:5f:a6:cf:67:44:fd:63:97:e1:ff:82:
ce:6d:2c:fa:17:5d:4a:56:27:4d:89:98:5c:88:63:
fb:7b:5b:3d:12:05:06:13:0e:9f:14:62:5e:05:15:
8d:2e:74:51:45:3c:89:c4:52:1e:bf:ae:c1:00:bf:
50:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:95:56:C4:15:4A:00:B0:A6:95:AD:A3:14:14:26:BF:34:3F:E9:3C
X509v3 Authority Key Identifier:
keyid:6F:07:4D:2E:FB:5F:3E:1D:35:C2:91:F8:A1:1C:0B:C0:BE:7E:C1:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwdNLvtfPh01wpH4oRwLwL5-wbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b55ef1-ca63-4ca1-a659-f9720285e797/1/bwdNLvtfPh01wpH4oRwLwL5-wbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b55ef1-ca63-4ca1-a659-f9720285e797/1/bwdNLvtfPh01wpH4oRwLwL5-wbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:58:6e:dd:66:05:8c:37:5d:08:98:c9:13:ae:76:80:b2:27:
c6:53:16:33:d8:50:d3:2b:2d:4f:c6:6e:4f:6b:3e:c4:37:e8:
cb:21:3a:d3:6e:5c:54:6b:c8:93:1e:59:80:dd:63:84:c3:67:
6f:91:06:ae:25:83:73:1b:6d:6b:e3:0b:74:0e:5f:e1:fe:86:
a3:1f:e3:a6:05:af:d7:a1:28:9c:9d:19:3e:a2:0e:56:8b:03:
e1:ef:fc:a9:66:d7:86:62:a8:2c:4e:7c:3c:d6:b2:79:f9:2a:
ac:45:e4:53:f6:ba:77:e7:84:80:d5:3c:6a:7e:ba:b2:03:e3:
31:44:eb:21:ec:04:f9:34:08:69:f8:1d:e5:97:45:de:c9:9b:
24:21:84:a4:4c:42:ae:f0:6f:10:be:43:4d:e7:27:23:d5:8e:
b1:31:fd:d6:ad:52:02:a7:a7:45:9b:3c:e2:ad:2f:f7:c6:81:
70:7d:47:e2:3f:95:01:a0:a1:92:b2:2d:17:6e:b6:7a:79:d1:
6c:f2:20:85:db:9c:4b:7a:f7:13:1c:7f:1c:c0:80:33:9e:77:
9a:a5:8c:a4:47:92:91:17:8f:44:23:47:e3:1c:ed:89:4a:6a:
da:ec:ad:87:0b:53:27:c7:c9:c9:b1:ca:0b:c1:2a:07:86:bc:
34:e9:97:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:23 2025 by rpki-client