Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
File: BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft (raw, json)
Hash identifier: 30ROZCtYjldM0VCFJA4n7H6AOMfo6AZgemYcwh9B09E=
Subject key identifier: F1:41:64:73:03:2F:2D:54:06:B0:B4:97:25:C2:BF:B3:C9:68:96:29
Authority key identifier: 05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E
Certificate issuer: /CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
Certificate serial: 0199FC21BAABF16D82767362F1228FD51F99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
Manifest number: 16EC
Signing time: Sun 19 Oct 2025 11:01:32 +0000
Manifest this update: Sun 19 Oct 2025 11:01:32 +0000
Manifest next update: Mon 20 Oct 2025 11:01:32 +0000
Files and hashes: 1: 74ie5YhiWCpEdYw1osP6lOLENo8.roa (hash: AISylC4LJSWYY19JWF/C07coR9FQEVOV3zwowa8Jq8A=)
2: BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl (hash: BMYTLBfiGkTfNQP1RlFaJyc3zxrghiuKWi05m0Xmxko=)
3: CFOEQzJpDfyIX_oaNWeu5lzrryg.roa (hash: IIn5PGhc9iJknynMgMeEVyICP0S0I656B95iMkmFmVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:ba:ab:f1:6d:82:76:73:62:f1:22:8f:d5:1f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
Validity
Not Before: Oct 19 11:01:32 2025 GMT
Not After : Oct 20 11:01:32 2025 GMT
Subject: CN=f1416473032f2d5406b0b49725c2bfb3c9689629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:eb:f4:10:d7:8f:ae:c1:f2:39:98:8a:05:89:
95:bb:85:af:e9:68:b7:9d:e5:11:bf:cf:7f:76:5d:
28:49:8d:1b:92:a2:05:e3:ea:c1:0a:4a:2e:43:df:
a9:92:aa:06:63:24:88:a6:9c:49:a6:fa:8c:e9:55:
d5:60:47:90:fd:06:76:51:1e:cc:54:c1:8e:fb:86:
b6:e1:95:f7:1d:e4:f1:7a:dd:b6:88:db:90:8d:b7:
34:16:b0:f1:91:cc:c3:9c:1b:6c:30:29:0f:9e:d1:
26:f0:0b:19:6a:42:59:2b:56:e0:8e:fe:8b:29:0e:
c4:d3:b7:26:fb:93:14:c6:b9:1a:10:da:c0:96:d5:
f8:43:42:c6:ed:06:a0:b7:14:0d:bc:f7:fd:e4:67:
84:34:e8:fc:9e:0e:57:61:09:eb:51:d1:75:0b:de:
39:0c:dc:fb:a5:37:e4:40:05:5a:46:07:9c:e6:59:
ca:0c:84:04:b1:4e:0c:27:3e:4c:e4:ac:8c:99:d5:
93:21:55:48:35:69:7f:26:6e:b5:16:5c:aa:95:ca:
89:de:1f:b6:b1:cf:34:84:79:72:39:a8:61:ef:8d:
92:a3:14:60:0b:93:1d:ce:e8:e5:89:51:e5:34:87:
1c:28:65:41:82:4f:8a:51:b4:1e:34:43:60:48:24:
4b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:41:64:73:03:2F:2D:54:06:B0:B4:97:25:C2:BF:B3:C9:68:96:29
X509v3 Authority Key Identifier:
keyid:05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f3:c7:4e:31:45:55:57:45:aa:74:44:91:f2:87:38:7d:9a:
55:e7:1c:18:37:18:dc:56:8f:d5:30:82:9e:59:b8:d5:de:ce:
65:0c:2f:ad:ca:b0:b0:9a:de:4f:99:0e:62:42:54:e0:3d:b5:
5e:a5:87:37:4e:d8:7d:eb:35:f3:7b:ea:8e:f1:27:38:27:a7:
3c:c7:33:fb:a3:67:f5:3b:02:f9:f9:da:b1:f9:ce:6d:3c:d6:
28:6d:3b:96:fc:f7:8a:0b:db:2f:5a:02:36:c8:e6:3b:a8:67:
4d:e8:ad:56:74:f2:ea:cb:49:56:d3:8a:cd:f0:4a:2c:8a:48:
cf:38:8b:bf:fc:7a:69:8b:67:48:43:ae:c2:aa:f5:0f:cf:84:
1a:1b:c4:ad:22:69:5e:d9:b9:63:e6:91:80:7f:8b:00:61:95:
2f:07:d9:22:c3:fd:d4:47:1c:d2:fb:25:46:03:86:2e:76:2c:
76:55:3f:f1:69:0e:ae:60:3f:96:42:41:33:11:c7:b3:e6:5e:
66:f3:1e:90:ab:68:d3:dc:65:31:fe:00:d8:3b:56:b1:2a:55:
79:63:cf:25:23:6f:56:e3:61:82:7d:65:4d:97:72:13:74:82:
0f:35:08:4a:85:c4:89:f2:af:c9:22:0b:a0:62:78:ab:f1:f6:
cd:97:00:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:35:21 2025 by rpki-client