Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.mft
File: BswqJrMawkvFKV0kqOEwcfL_DWE.mft (raw, json)
Hash identifier: fDSMRseThBiXwXw9wgKUZ2sEmIQ98iJ+DVuRQuOOTOI=
Subject key identifier: E6:68:23:E6:BE:D7:4A:5F:83:DA:AE:61:84:DF:B1:31:00:1B:08:63
Authority key identifier: 06:CC:2A:26:B3:1A:C2:4B:C5:29:5D:24:A8:E1:30:71:F2:FF:0D:61
Certificate issuer: /CN=06cc2a26b31ac24bc5295d24a8e13071f2ff0d61
Certificate serial: 019A0147C6A97A708CD301D0E9BB462634A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BswqJrMawkvFKV0kqOEwcfL_DWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.mft
Manifest number: 0478
Signing time: Mon 20 Oct 2025 11:01:12 +0000
Manifest this update: Mon 20 Oct 2025 11:01:12 +0000
Manifest next update: Tue 21 Oct 2025 11:01:12 +0000
Files and hashes: 1: 89qLG1K07SoB9KnzvBmCV6QFSkI.roa (hash: +0xILp3yJ9G90xUu2Ml6EPqNrjSk0rDe+FJWrTAlYPw=)
2: ACSoxiVrVB6X7y6ozamLSgqazeo.roa (hash: y8VDA0ULLPWCFXTUghHVruXhGvY9U4iQhON3EqU1Hso=)
3: BswqJrMawkvFKV0kqOEwcfL_DWE.crl (hash: PGJxWz4AXYItDyZRZDrNdG9iJNItqErahGnbUhsMvrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BswqJrMawkvFKV0kqOEwcfL_DWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:47:c6:a9:7a:70:8c:d3:01:d0:e9:bb:46:26:34:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06cc2a26b31ac24bc5295d24a8e13071f2ff0d61
Validity
Not Before: Oct 20 11:01:12 2025 GMT
Not After : Oct 21 11:01:12 2025 GMT
Subject: CN=e66823e6bed74a5f83daae6184dfb131001b0863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4a:7a:b4:60:f3:fd:90:2e:82:c1:f1:cd:c6:
38:27:42:ac:16:bc:b5:43:3b:6c:4f:e9:27:cf:a4:
5d:ed:2d:9a:86:19:3a:0e:88:37:66:14:dd:4b:bf:
93:08:b2:b0:d3:01:f2:fe:4d:c0:d7:31:e7:ee:7a:
8d:90:b9:51:d2:e0:14:09:c0:56:37:91:76:1f:10:
8b:b3:b3:d6:b8:8a:7a:7b:66:2e:3f:c1:94:21:59:
ad:50:a2:58:4b:69:e5:d6:95:f5:fe:a1:ef:9a:cb:
53:1f:cc:f8:db:27:d9:ea:e3:bf:f5:83:9b:ac:27:
cc:05:46:0d:54:ba:04:89:0c:0b:3a:36:ca:33:18:
84:8a:72:4b:32:8f:7e:93:93:43:57:8d:be:47:f3:
a2:6e:63:35:ba:21:25:f9:80:12:7f:84:c8:d6:6b:
09:16:1e:e7:88:82:d6:5b:bf:07:e4:7a:b4:eb:e9:
aa:c1:b6:9a:33:de:f0:04:ea:86:0a:38:9d:5f:33:
cf:f2:c1:90:da:39:23:64:6c:41:25:c7:d3:38:88:
e8:13:30:8e:31:25:62:da:2f:aa:49:b2:ed:76:70:
58:ff:ae:7d:00:43:66:1f:5b:90:c0:1b:2e:92:9e:
87:f9:74:bf:0d:c8:74:b6:a1:a3:86:68:85:ad:bb:
44:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:68:23:E6:BE:D7:4A:5F:83:DA:AE:61:84:DF:B1:31:00:1B:08:63
X509v3 Authority Key Identifier:
keyid:06:CC:2A:26:B3:1A:C2:4B:C5:29:5D:24:A8:E1:30:71:F2:FF:0D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BswqJrMawkvFKV0kqOEwcfL_DWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:92:d2:0d:17:71:b6:56:56:66:20:fd:e7:72:18:0a:ed:3a:
53:6f:b0:cc:08:87:fb:9f:6c:bc:19:6a:a4:5c:13:b7:e9:d4:
ac:d3:21:d6:08:4d:6d:88:8d:a6:55:93:9b:51:90:c7:d2:fc:
80:91:f5:ba:45:0f:3f:1c:53:f9:b7:56:16:90:fb:94:bd:7d:
8f:9e:50:61:2c:93:89:ba:a6:5b:ff:d8:2d:a4:80:5f:4f:6e:
ea:f1:40:36:42:dc:d3:59:c0:67:a3:a5:92:fd:4b:84:b3:de:
6c:a7:64:cd:d9:85:1b:ee:d6:a0:f8:3c:ef:a6:58:74:5c:9d:
a6:9e:15:e4:00:97:ab:79:37:df:a7:b2:d2:7a:aa:e0:7e:c5:
fb:88:43:bb:97:0d:c2:9e:90:dc:43:d4:fd:44:15:30:20:7d:
70:e0:16:73:69:b7:6a:72:b6:04:35:59:9a:9f:a7:91:b8:84:
e8:03:3f:c9:82:50:cd:0d:c2:42:cf:4e:8f:6b:dd:09:d8:e9:
16:c7:34:e2:18:c6:81:8c:ff:2a:06:89:42:dd:8a:39:9b:e1:
8e:44:97:09:4f:f5:14:d9:8f:68:51:e9:4c:18:75:c4:19:cb:
3d:7e:f0:44:44:a8:14:14:70:29:56:c8:f7:68:a1:38:a7:57:
7a:5e:43:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:46:26 2025 by rpki-client