Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft
File: bwXPdx2ZkucP9nQOayBiDOUtDYs.mft (raw, json)
Hash identifier: zZGoJjWx8M0FTbBXxuUy05e8WIdkDMd08yG52TpVe68=
Subject key identifier: 8F:67:61:65:8F:61:0B:51:28:2F:C5:16:35:4C:71:B7:FE:0A:BC:2D
Authority key identifier: 6F:05:CF:77:1D:99:92:E7:0F:F6:74:0E:6B:20:62:0C:E5:2D:0D:8B
Certificate issuer: /CN=6f05cf771d9992e70ff6740e6b20620ce52d0d8b
Certificate serial: 0199FBEAD60DCEBD4874AA0B06DE4A7EE6B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwXPdx2ZkucP9nQOayBiDOUtDYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft
Manifest number: 0C81
Signing time: Sun 19 Oct 2025 10:01:35 +0000
Manifest this update: Sun 19 Oct 2025 10:01:35 +0000
Manifest next update: Mon 20 Oct 2025 10:01:35 +0000
Files and hashes: 1: bwXPdx2ZkucP9nQOayBiDOUtDYs.crl (hash: PdtO3T4KWoRCk41xuHsQb/FnSjRwhgSH8uO/v9Ik6GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwXPdx2ZkucP9nQOayBiDOUtDYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:d6:0d:ce:bd:48:74:aa:0b:06:de:4a:7e:e6:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f05cf771d9992e70ff6740e6b20620ce52d0d8b
Validity
Not Before: Oct 19 10:01:35 2025 GMT
Not After : Oct 20 10:01:35 2025 GMT
Subject: CN=8f6761658f610b51282fc516354c71b7fe0abc2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ca:40:b3:1a:60:ae:0c:cd:be:b0:60:7f:3a:
a2:5d:e4:91:48:9e:2e:d7:5f:7b:18:ef:1e:60:1d:
42:78:7f:4f:b1:2d:0b:61:af:eb:cb:2b:3e:6d:c6:
a8:f1:31:0f:2c:36:5e:27:a3:2f:0e:be:d9:2f:c5:
3d:60:66:ee:15:85:b3:3e:37:2b:d9:24:5c:34:64:
8e:39:d6:2c:d9:67:d1:88:50:2b:23:3f:c2:8c:cf:
5f:fd:51:ff:7c:45:f4:a3:66:64:fe:34:60:8b:29:
7f:1f:b3:c8:b1:19:d8:1c:cc:24:f7:b2:8f:48:2b:
22:6d:e4:3a:e2:d4:ed:25:2c:af:c2:8d:05:9e:82:
b3:71:77:2e:aa:9c:33:8d:dc:54:5b:3c:3d:fa:dc:
72:28:9f:5f:f9:80:b7:02:62:44:05:88:ef:20:ac:
bd:8d:76:1f:b9:e6:ac:6f:73:9d:4f:0e:3c:58:19:
81:fc:f4:75:67:58:23:91:94:27:be:0b:2d:2f:c5:
61:51:8a:7e:7b:0c:35:2b:d4:a0:a5:33:89:e0:be:
dd:cd:29:26:1c:92:8d:38:c4:ed:8e:8b:9e:dd:11:
69:47:ab:95:89:8f:eb:85:93:e1:8f:65:3d:d0:2f:
6f:38:dd:0e:0e:83:f9:5e:97:20:cd:6d:1f:e8:3d:
a1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:67:61:65:8F:61:0B:51:28:2F:C5:16:35:4C:71:B7:FE:0A:BC:2D
X509v3 Authority Key Identifier:
keyid:6F:05:CF:77:1D:99:92:E7:0F:F6:74:0E:6B:20:62:0C:E5:2D:0D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwXPdx2ZkucP9nQOayBiDOUtDYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:cc:89:7a:b2:9a:55:1d:a8:4e:e5:01:d2:a9:11:33:50:bb:
85:77:69:d8:3b:89:24:38:cc:e6:4a:30:ca:50:5a:31:25:0e:
76:9c:6b:51:e6:f8:82:de:a0:40:95:af:b4:6f:59:d7:71:f1:
0e:e3:84:99:1a:a0:cb:94:70:14:5a:ea:43:c6:35:0b:1a:0a:
9a:29:cf:5a:02:79:70:c9:f7:74:b0:60:ef:29:6e:e7:d2:1e:
05:b2:bb:73:44:c9:3a:0c:ad:5d:62:30:7c:b4:7e:55:42:e3:
03:da:ce:b6:9e:37:a7:4f:f2:9e:31:18:97:9a:77:7b:2a:1b:
0f:33:f7:aa:2e:ea:b4:ac:91:bb:c5:cb:64:81:d2:f1:ae:e9:
c7:f5:2d:69:ba:5f:d5:a7:1c:14:03:bb:d0:58:c3:35:50:2b:
3f:24:58:3d:b0:8a:66:4e:34:19:af:99:ea:fa:67:1a:fc:53:
c1:8c:5e:8c:d8:b7:6f:b7:5a:e7:73:81:ca:eb:6d:ae:33:ed:
4e:b4:94:01:48:ff:c5:5e:24:06:e0:bd:4c:e9:78:e2:46:04:
d9:4e:6f:3c:f7:32:c0:1f:43:b4:f3:fa:a2:ce:9d:fb:96:45:
c9:47:9f:b4:e3:96:20:be:04:29:5c:b3:e1:0a:2b:39:e4:cc:
09:96:52:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:35 2025 by rpki-client