Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft
File: bwXPdx2ZkucP9nQOayBiDOUtDYs.mft (raw, json)
Hash identifier: yBxALUnVMCdilc+0cGAeMnOTN5aRGfg7d8qGIzDxHDw=
Subject key identifier: B5:6F:59:56:DF:56:91:61:21:0D:48:F2:39:4B:A4:F5:AD:D3:42:10
Authority key identifier: 6F:05:CF:77:1D:99:92:E7:0F:F6:74:0E:6B:20:62:0C:E5:2D:0D:8B
Certificate issuer: /CN=6f05cf771d9992e70ff6740e6b20620ce52d0d8b
Certificate serial: 0198D47244AFC7B556285F50C5B413305ADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwXPdx2ZkucP9nQOayBiDOUtDYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft
Manifest number: 0BE8
Signing time: Sat 23 Aug 2025 01:01:54 +0000
Manifest this update: Sat 23 Aug 2025 01:01:54 +0000
Manifest next update: Sun 24 Aug 2025 01:01:54 +0000
Files and hashes: 1: bwXPdx2ZkucP9nQOayBiDOUtDYs.crl (hash: frR8xjOpIsEIlxR0/+CgOVhBjczRQqV0G4n8LtV8USg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwXPdx2ZkucP9nQOayBiDOUtDYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:44:af:c7:b5:56:28:5f:50:c5:b4:13:30:5a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f05cf771d9992e70ff6740e6b20620ce52d0d8b
Validity
Not Before: Aug 23 01:01:54 2025 GMT
Not After : Aug 24 01:01:54 2025 GMT
Subject: CN=b56f5956df569161210d48f2394ba4f5add34210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2f:d4:60:4e:f2:15:45:d8:e3:5c:c6:ae:82:
84:a4:c1:23:4b:be:88:21:52:81:22:53:3a:98:77:
08:6a:e6:d5:dc:fa:56:33:49:f3:0c:3f:1a:81:f3:
6b:5c:92:60:86:5e:7b:34:e3:eb:a9:3d:f9:7d:7d:
53:1b:89:f0:fb:e5:45:26:c0:c2:ff:6f:cf:c6:3b:
f9:b6:6c:4f:5f:6a:e6:9d:aa:01:ee:0d:3e:6e:9c:
19:a0:c9:2c:f9:54:ea:ad:45:26:b9:c4:f7:36:15:
f8:56:bb:c2:e6:a7:57:78:7b:6e:9d:55:67:04:f0:
61:2a:f0:de:c3:e2:f3:e6:e5:62:20:40:a1:02:74:
c8:28:8e:8a:ce:1a:c3:9b:77:62:23:37:f6:b1:3d:
85:2d:2a:b1:1b:d6:4b:e1:c7:27:c9:93:ea:e1:03:
34:dc:bb:96:50:32:b1:5c:33:24:cf:f7:8e:44:fb:
af:15:57:62:41:4b:79:8a:38:5f:92:e7:38:f1:7d:
01:d7:b2:a8:bc:bf:7d:c6:bc:f9:a9:01:4a:81:34:
dd:71:59:43:50:4f:71:f1:51:4d:54:21:ec:1d:e8:
b0:6a:89:12:a4:35:ef:d6:3c:71:c0:b4:dd:df:ad:
2d:76:08:77:f1:4c:9c:e4:8c:88:3d:e4:c5:68:13:
00:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6F:59:56:DF:56:91:61:21:0D:48:F2:39:4B:A4:F5:AD:D3:42:10
X509v3 Authority Key Identifier:
keyid:6F:05:CF:77:1D:99:92:E7:0F:F6:74:0E:6B:20:62:0C:E5:2D:0D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwXPdx2ZkucP9nQOayBiDOUtDYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:28:55:e1:21:b9:f2:33:ce:3a:d6:65:fe:f4:10:d6:c2:ea:
2d:17:94:35:eb:3d:2a:b3:a9:cc:f2:2f:fe:97:8f:ab:76:f3:
ca:a1:ac:0a:af:e3:75:fe:d6:0a:70:10:f4:d3:1e:64:f7:2e:
ec:03:ae:35:d2:e9:ff:0d:cf:6a:22:1f:09:b8:28:85:64:5c:
85:6c:d8:72:fa:bb:10:5d:09:d3:83:51:c9:4a:73:b4:68:fd:
6a:cc:f5:ea:23:16:af:7f:79:66:e2:00:3c:82:a5:8e:6a:fa:
91:57:c0:a7:f3:0e:96:b4:5e:35:e7:65:67:63:4a:dd:87:1b:
53:89:a4:d6:e0:c1:1e:bb:c2:c5:bf:80:7b:9c:b1:d6:6c:c0:
a0:f1:e3:76:dc:c2:1a:d8:6c:3b:e9:e1:94:e3:62:84:de:d9:
0c:f9:fd:37:fb:ad:1d:06:a3:31:51:b2:13:46:7b:0c:0f:d5:
5e:8f:06:79:d1:a8:b8:1f:98:7a:02:22:81:d6:e7:18:09:d7:
12:d4:2d:32:d5:bf:29:69:ea:9a:4c:22:e1:dd:35:cb:4e:1b:
28:08:1a:35:78:2d:d8:d7:26:1a:cc:bd:8e:8b:b7:4c:3b:65:
0e:5b:0a:f8:3f:41:2e:6f:72:5d:a4:65:94:79:b8:db:f5:f0:
0e:b8:df:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:44 2025 by rpki-client