Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
File: BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft (raw, json)
Hash identifier: 2cDNvhfgs0SbV9CHRkGBWev7hmFz07Cs2fnfQ7G5v6s=
Subject key identifier: D6:6E:8E:F2:E2:AF:10:93:0E:AC:49:1C:2A:AA:1A:79:8F:6B:69:C3
Authority key identifier: 05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E
Certificate issuer: /CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
Certificate serial: 0198D4A7A6E8BEF8978AD8DAD0C8BEBDE5B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
Manifest number: 1653
Signing time: Sat 23 Aug 2025 02:00:13 +0000
Manifest this update: Sat 23 Aug 2025 02:00:13 +0000
Manifest next update: Sun 24 Aug 2025 02:00:13 +0000
Files and hashes: 1: 74ie5YhiWCpEdYw1osP6lOLENo8.roa (hash: AISylC4LJSWYY19JWF/C07coR9FQEVOV3zwowa8Jq8A=)
2: BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl (hash: IuLBNfUkUQPYiPk0V8raM4jxTVOeAEV6Z7YQXJ77aYU=)
3: CFOEQzJpDfyIX_oaNWeu5lzrryg.roa (hash: IIn5PGhc9iJknynMgMeEVyICP0S0I656B95iMkmFmVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:a6:e8:be:f8:97:8a:d8:da:d0:c8:be:bd:e5:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
Validity
Not Before: Aug 23 02:00:13 2025 GMT
Not After : Aug 24 02:00:13 2025 GMT
Subject: CN=d66e8ef2e2af10930eac491c2aaa1a798f6b69c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:82:a2:2a:87:12:16:76:7e:e1:d6:c7:c0:7b:
39:77:2f:c2:62:cd:76:b9:7d:24:60:8b:e2:aa:fe:
8b:41:a0:8b:25:0c:03:9d:e4:d8:63:8e:9f:e8:15:
3b:08:b7:68:0c:84:a6:2f:d6:97:59:65:bb:90:35:
80:69:ff:e8:1a:e0:4f:03:a1:3b:14:1a:c4:be:59:
77:5e:07:0a:69:a6:02:6b:21:71:7c:f3:2c:bf:d8:
26:b1:99:43:9f:18:ba:9f:83:13:7b:02:44:21:a0:
c6:10:04:c6:6e:53:f6:b7:9e:ab:1e:18:08:3f:3d:
b5:ff:30:ff:c4:cb:e6:9e:0f:92:72:45:00:b2:e8:
22:51:bc:dc:60:07:65:25:72:13:bd:45:ba:7a:0a:
94:6e:db:49:ab:21:a5:04:33:03:3b:d6:f8:98:3e:
f7:39:0c:27:3b:3f:c1:aa:20:74:12:d3:4a:77:c3:
45:79:1b:e5:c4:ec:8a:73:81:38:08:2d:06:52:11:
97:7a:9a:37:bd:fe:e9:0b:e8:06:69:98:25:d6:09:
25:d8:73:cd:f0:1b:8f:4f:71:55:db:dc:12:06:04:
e2:37:8d:8f:bd:d6:4b:d0:19:49:05:58:33:cc:3c:
11:ea:7c:28:95:71:c0:2e:47:96:dd:f3:8e:7a:bb:
21:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6E:8E:F2:E2:AF:10:93:0E:AC:49:1C:2A:AA:1A:79:8F:6B:69:C3
X509v3 Authority Key Identifier:
keyid:05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b1:33:b1:6d:e3:6f:20:ea:61:a4:94:8a:6e:00:e0:56:b7:
d6:a9:13:c4:02:04:88:89:5c:62:24:d1:02:97:e2:78:bb:33:
e6:1c:41:bd:cb:55:48:69:ff:07:79:ef:79:13:9d:3b:47:42:
06:b3:ff:5d:22:a6:60:e6:a1:0e:5a:83:02:a0:d3:5a:8a:d1:
98:a9:3f:3e:c2:74:cf:03:c9:d6:3b:c6:ff:ce:ec:be:6b:cb:
15:b2:cc:c0:70:8d:9f:7e:63:cf:55:fa:be:0e:9a:ea:b9:d2:
12:6f:84:c3:d4:b8:77:57:72:96:f1:0f:21:b3:2e:b2:e8:8c:
95:a6:03:8e:90:bb:71:28:32:37:09:7a:62:fa:14:00:8b:da:
d5:3a:8d:85:f8:a8:f2:72:37:d5:7a:11:5b:66:19:75:e4:97:
af:be:a8:fe:de:b1:a7:08:e0:cd:f5:16:e3:c5:aa:1b:a6:98:
7c:7d:fb:4d:b8:cc:69:6e:b1:6b:2e:e4:46:80:3f:fa:ae:08:
e0:c0:c5:c4:e5:8c:17:fa:4c:d1:40:73:3c:26:38:b3:44:f7:
d1:80:6b:e3:7e:3b:e7:02:30:76:00:56:bd:c9:81:05:c0:d3:
2f:78:4c:0c:69:64:45:d5:48:05:81:32:9f:e7:7f:19:fb:43:
aa:80:87:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp6bovviXitja0Mi+veW1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NmFkMmY0ZmZjNTg3MmUzNWE0MjllNTNlZjE3OTkyNWZm
NDIxNWUwHhcNMjUwODIzMDIwMDEzWhcNMjUwODI0MDIwMDEzWjAzMTEwLwYDVQQD
EyhkNjZlOGVmMmUyYWYxMDkzMGVhYzQ5MWMyYWFhMWE3OThmNmI2OWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYKiKocSFnZ+4dbHwHs5dy/CYs12
uX0kYIviqv6LQaCLJQwDneTYY46f6BU7CLdoDISmL9aXWWW7kDWAaf/oGuBPA6E7
FBrEvll3XgcKaaYCayFxfPMsv9gmsZlDnxi6n4MTewJEIaDGEATGblP2t56rHhgI
Pz21/zD/xMvmng+SckUAsugiUbzcYAdlJXITvUW6egqUbttJqyGlBDMDO9b4mD73
OQwnOz/BqiB0EtNKd8NFeRvlxOyKc4E4CC0GUhGXepo3vf7pC+gGaZgl1gkl2HPN
8BuPT3FV29wSBgTiN42PvdZL0BlJBVgzzDwR6nwolXHALkeW3fOOersh9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZujvLirxCTDqxJHCqqGnmPa2nDMB8GA1UdIwQY
MBaAFAVq0vT/xYcuNaQp5T7xeZJf9CFeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQldyUzlQX0ZoeTQxcENubFB2RjVrbF8wSVY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC80MzMwZmUtZGJmYy00ODFmLThmZDkt
MWU0ZmNiMWM2MGNiLzEvQldyUzlQX0ZoeTQxcENubFB2RjVrbF8wSVY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC80MzMwZmUtZGJmYy00ODFmLThmZDktMWU0ZmNiMWM2MGNi
LzEvQldyUzlQX0ZoeTQxcENubFB2RjVrbF8wSVY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbEzsW3j
byDqYaSUim4A4Fa31qkTxAIEiIlcYiTRApfieLsz5hxBvctVSGn/B3nveROdO0dC
BrP/XSKmYOahDlqDAqDTWorRmKk/PsJ0zwPJ1jvG/87svmvLFbLMwHCNn35jz1X6
vg6a6rnSEm+Ew9S4d1dylvEPIbMusuiMlaYDjpC7cSgyNwl6YvoUAIva1TqNhfio
8nI31XoRW2YZdeSXr76o/t6xpwjgzfUW48WqG6aYfH37TbjMaW6xay7kRoA/+q4I
4MDFxOWMF/pM0UBzPCY4s0T30YBr43475wIwdgBWvcmBBcDTL3hMDGlkRdVIBYEy
n+d/GftDqoCHXQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:08:10 2025 by rpki-client