Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
File: Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft (raw, json)
Hash identifier: NO9kYqlb66R0y673tKrovWmdE8W/XjtZHq7Vtkk7o8g=
Subject key identifier: 18:3A:38:63:3C:5A:FD:E1:E5:EC:8A:F7:CA:B4:80:1F:FA:E3:5A:5C
Authority key identifier: 07:07:79:69:A8:B6:A5:5C:46:1A:DD:E1:06:C0:06:48:6A:26:35:9F
Certificate issuer: /CN=07077969a8b6a55c461adde106c006486a26359f
Certificate serial: 0199FCFD8048F39CC3FACF110C18A27E2FF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
Manifest number: 0699
Signing time: Sun 19 Oct 2025 15:01:35 +0000
Manifest this update: Sun 19 Oct 2025 15:01:35 +0000
Manifest next update: Mon 20 Oct 2025 15:01:35 +0000
Files and hashes: 1: 45JkWDxR5fUqLNSe5lQL_9cedVE.roa (hash: 9POiY5D1z/tZud9uWBNIH5N9GB3K31py8YZ3lDPWtyQ=)
2: Bwd5aai2pVxGGt3hBsAGSGomNZ8.crl (hash: MdZfLXZBPIJnWoiR95++yBMa8AU7bAJeB/O5dZdGxns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:80:48:f3:9c:c3:fa:cf:11:0c:18:a2:7e:2f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07077969a8b6a55c461adde106c006486a26359f
Validity
Not Before: Oct 19 15:01:35 2025 GMT
Not After : Oct 20 15:01:35 2025 GMT
Subject: CN=183a38633c5afde1e5ec8af7cab4801ffae35a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:79:8f:2c:ff:1e:41:1e:79:a6:8c:a0:4c:d1:
2e:f4:6a:45:d1:4a:c6:98:fb:d8:a2:bf:d7:8f:ed:
7c:c4:61:c0:b8:a1:e7:6d:08:0f:5b:42:27:d4:5c:
6a:e5:b0:b7:f6:f8:0e:e1:15:50:da:20:5e:c5:87:
d8:ed:5d:c9:92:68:55:2a:44:5a:0c:bd:43:7c:f9:
ed:24:85:5b:ef:25:3c:92:b2:40:a7:a2:25:2b:27:
c0:d4:00:45:1b:1b:ba:52:89:6f:e1:bd:3c:65:48:
f9:7a:ac:4a:d4:c2:54:3c:39:68:01:c9:50:c0:90:
3f:f3:5f:d1:a0:b2:d0:01:cb:9d:5c:d5:ef:48:e9:
14:91:3e:63:29:5e:bd:51:e6:e3:85:f6:f2:6e:dc:
32:95:35:0f:77:9c:f4:fa:3f:19:97:30:85:04:0a:
7d:3c:6e:a6:da:15:32:a6:8d:7c:48:9e:2f:f3:d3:
21:b2:42:6f:2a:54:a2:b4:56:47:a1:42:7b:24:65:
62:1c:a6:5d:f5:aa:48:cb:04:0e:2e:8b:43:f6:59:
51:88:a1:70:4f:2c:50:67:eb:45:f0:f6:57:a4:06:
4b:ef:1f:ca:c4:4b:82:da:6c:fd:8c:4b:1c:6a:4f:
18:c8:4a:c6:7b:ec:5b:5d:62:29:fb:0e:5e:34:e2:
f6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3A:38:63:3C:5A:FD:E1:E5:EC:8A:F7:CA:B4:80:1F:FA:E3:5A:5C
X509v3 Authority Key Identifier:
keyid:07:07:79:69:A8:B6:A5:5C:46:1A:DD:E1:06:C0:06:48:6A:26:35:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b4:62:44:4c:31:63:5b:e1:bb:5c:69:93:24:67:86:c7:cd:
1b:8c:df:56:22:3c:09:59:1f:2f:ed:f0:22:2d:13:b7:de:f2:
43:37:c5:e5:69:2d:b3:e1:3e:0d:88:88:14:74:a3:f3:c7:d5:
da:1d:db:da:71:c8:0d:38:69:dc:b1:6c:dc:54:ad:85:70:9e:
1b:6f:f7:81:ce:c3:72:80:da:03:fe:2b:9f:f0:1d:db:d6:6e:
91:e1:fa:58:b6:fb:c7:5a:c6:cc:5e:9e:76:dc:df:2a:43:d7:
7c:ef:f8:a2:36:c3:e0:20:f3:12:7e:b0:dd:42:dd:ea:64:78:
d1:35:2b:b1:74:40:d6:f0:ff:9a:85:af:23:4b:36:f7:76:19:
68:26:a1:fe:90:ee:78:c5:d8:c1:b2:1d:3a:ce:3c:23:15:e9:
82:b5:54:fe:e8:65:b5:87:06:6b:f0:bb:04:e9:ef:05:80:97:
06:0d:e3:32:09:bb:2d:12:11:a1:de:eb:ff:5c:7e:4f:1e:57:
92:9c:57:c4:70:95:90:fd:01:48:2c:71:f3:66:ff:82:11:29:
5a:0e:2a:b5:63:84:73:e7:73:8d:11:04:27:38:4d:0a:e1:43:
3f:57:22:db:01:b1:b8:27:6a:ad:c5:85:4e:16:0b:e0:4f:32:
31:8c:29:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:00:37 2025 by rpki-client