Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft
File: bwXPdx2ZkucP9nQOayBiDOUtDYs.mft (raw, json)
Hash identifier: iZbZsca8W/sqomper9JQxTLag9tU2f6Z86KO7RzJ0gc=
Subject key identifier: 52:D3:1F:DD:1F:49:03:17:C0:57:B4:6F:70:47:83:86:F7:51:9B:E0
Authority key identifier: 6F:05:CF:77:1D:99:92:E7:0F:F6:74:0E:6B:20:62:0C:E5:2D:0D:8B
Certificate issuer: /CN=6f05cf771d9992e70ff6740e6b20620ce52d0d8b
Certificate serial: 0197B6A07BBBB783ED00FD35ACC5C42DC6F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwXPdx2ZkucP9nQOayBiDOUtDYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft
Manifest number: 0B54
Signing time: Sat 28 Jun 2025 13:01:00 +0000
Manifest this update: Sat 28 Jun 2025 13:01:00 +0000
Manifest next update: Sun 29 Jun 2025 13:01:00 +0000
Files and hashes: 1: bwXPdx2ZkucP9nQOayBiDOUtDYs.crl (hash: HTQOmgUpI8/+A31DtAHGAqUyF/HL3mcEehQothF6uPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwXPdx2ZkucP9nQOayBiDOUtDYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:7b:bb:b7:83:ed:00:fd:35:ac:c5:c4:2d:c6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f05cf771d9992e70ff6740e6b20620ce52d0d8b
Validity
Not Before: Jun 28 13:01:00 2025 GMT
Not After : Jun 29 13:01:00 2025 GMT
Subject: CN=52d31fdd1f490317c057b46f70478386f7519be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:13:a0:9f:02:76:29:45:de:aa:13:91:b0:25:
a3:7a:63:c9:65:08:2d:36:75:4f:db:24:8d:b5:3b:
4f:0d:3b:4a:12:3d:3b:7d:b6:7b:2f:60:8d:74:12:
0a:e0:19:14:0c:e3:50:dc:6e:6a:9d:13:d8:32:dd:
8b:12:26:78:dc:aa:03:ac:7f:df:58:c1:83:ca:8e:
32:17:63:26:6d:30:e9:51:ff:bc:b1:c0:25:12:f7:
32:3c:61:f0:87:7d:d4:c8:b6:60:62:93:40:d8:57:
4c:92:ef:07:53:e5:1c:2f:7f:11:1e:5e:12:48:f2:
a8:5a:d3:77:a1:51:e6:ca:05:0e:55:72:52:82:4e:
af:af:64:15:94:29:97:86:28:63:c6:5b:e7:0f:f2:
eb:bc:bc:40:c1:2f:82:78:46:6c:d6:4d:4f:be:e4:
ae:21:39:63:aa:33:6e:43:31:32:46:c9:c9:ba:f5:
87:45:24:8b:14:29:ff:ca:f5:1f:39:df:b4:0a:22:
df:e1:73:7b:87:41:6e:43:6b:f8:6d:05:50:24:1e:
8d:70:a3:05:e2:e7:2e:10:ce:bd:36:bc:a1:5b:f4:
6a:5f:a7:44:05:14:0d:1e:8b:9c:08:19:83:94:00:
d8:67:1e:73:6c:30:06:2c:21:97:ec:cf:91:6b:e7:
7c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D3:1F:DD:1F:49:03:17:C0:57:B4:6F:70:47:83:86:F7:51:9B:E0
X509v3 Authority Key Identifier:
keyid:6F:05:CF:77:1D:99:92:E7:0F:F6:74:0E:6B:20:62:0C:E5:2D:0D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwXPdx2ZkucP9nQOayBiDOUtDYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:92:13:6d:d1:a8:3a:78:8a:28:6d:a8:45:9d:51:a8:69:f2:
5d:f4:fb:cf:fd:6e:73:d7:c3:0f:36:26:e9:42:d9:d7:42:25:
a1:3d:a3:a5:16:64:dc:e7:8a:bf:35:59:13:7c:1c:39:6c:37:
0f:2b:9b:fe:5c:13:5f:9b:2f:bf:d6:6c:73:d1:fb:2f:74:42:
40:0d:97:1d:97:ea:32:31:31:3f:41:51:1a:d9:ee:9c:f0:ff:
27:02:da:b0:2d:82:eb:a1:22:cb:bd:75:68:dc:1f:f8:0a:66:
ea:aa:70:89:c7:31:e8:e1:27:3f:db:4d:4c:27:09:27:9f:b8:
d4:92:ed:42:2f:4b:42:eb:b5:56:d9:69:89:3c:10:50:f1:7e:
de:95:86:be:70:0b:5a:d7:6f:7c:7c:e0:0e:2a:a8:88:25:29:
89:dc:51:2b:ad:9e:e5:78:2e:a5:cb:71:a7:4c:57:55:1c:ce:
6f:c2:bd:80:d0:2f:ed:30:a2:62:e2:e6:d9:7c:7b:be:e6:85:
b2:9f:93:30:5f:35:e8:59:03:df:f2:0d:5c:77:9b:a9:f9:b5:
be:09:18:7f:e6:8c:95:ff:27:fd:1e:42:3e:b1:c8:0f:51:00:
88:5c:3a:64:88:2c:18:1f:41:b6:ac:b5:74:53:c2:e2:9c:37:
7a:39:87:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oHu7t4PtAP01rMXELcbzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMDVjZjc3MWQ5OTkyZTcwZmY2NzQwZTZiMjA2MjBjZTUy
ZDBkOGIwHhcNMjUwNjI4MTMwMTAwWhcNMjUwNjI5MTMwMTAwWjAzMTEwLwYDVQQD
Eyg1MmQzMWZkZDFmNDkwMzE3YzA1N2I0NmY3MDQ3ODM4NmY3NTE5YmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BOgnwJ2KUXeqhORsCWjemPJZQgt
NnVP2ySNtTtPDTtKEj07fbZ7L2CNdBIK4BkUDONQ3G5qnRPYMt2LEiZ43KoDrH/f
WMGDyo4yF2MmbTDpUf+8scAlEvcyPGHwh33UyLZgYpNA2FdMku8HU+UcL38RHl4S
SPKoWtN3oVHmygUOVXJSgk6vr2QVlCmXhihjxlvnD/LrvLxAwS+CeEZs1k1PvuSu
ITljqjNuQzEyRsnJuvWHRSSLFCn/yvUfOd+0CiLf4XN7h0FuQ2v4bQVQJB6NcKMF
4ucuEM69NryhW/RqX6dEBRQNHoucCBmDlADYZx5zbDAGLCGX7M+Ra+d8YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLTH90fSQMXwFe0b3BHg4b3UZvgMB8GA1UdIwQY
MBaAFG8Fz3cdmZLnD/Z0DmsgYgzlLQ2LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYndYUGR4MlprdWNQOW5RT2F5QmlET1V0RFlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9hMjM0MDQtZjIxOS00OWY1LWJmMzMt
MjQ1NjUwZjg0MmQ1LzEvYndYUGR4MlprdWNQOW5RT2F5QmlET1V0RFlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9hMjM0MDQtZjIxOS00OWY1LWJmMzMtMjQ1NjUwZjg0MmQ1
LzEvYndYUGR4MlprdWNQOW5RT2F5QmlET1V0RFlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwpITbdGo
OniKKG2oRZ1RqGnyXfT7z/1uc9fDDzYm6ULZ10IloT2jpRZk3OeKvzVZE3wcOWw3
Dyub/lwTX5svv9Zsc9H7L3RCQA2XHZfqMjExP0FRGtnunPD/JwLasC2C66Eiy711
aNwf+Apm6qpwiccx6OEnP9tNTCcJJ5+41JLtQi9LQuu1VtlpiTwQUPF+3pWGvnAL
WtdvfHzgDiqoiCUpidxRK62e5Xgupctxp0xXVRzOb8K9gNAv7TCiYuLm2Xx7vuaF
sp+TMF816FkD3/INXHebqfm1vgkYf+aMlf8n/R5CPrHID1EAiFw6ZIgsGB9Btqy1
dFPC4pw3ejmHaw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:27 2025 by rpki-client