Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.mft
File: BswqJrMawkvFKV0kqOEwcfL_DWE.mft (raw, json)
Hash identifier: j7WXLibv2GauHhtwPqfASpb/Q42AGTRisa2WppACM9U=
Subject key identifier: C2:6B:73:03:BC:CF:97:64:78:4B:5B:1A:90:76:2A:5B:FA:C1:14:1F
Authority key identifier: 06:CC:2A:26:B3:1A:C2:4B:C5:29:5D:24:A8:E1:30:71:F2:FF:0D:61
Certificate issuer: /CN=06cc2a26b31ac24bc5295d24a8e13071f2ff0d61
Certificate serial: 0198D40443B121E308729294379F77B6DB85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BswqJrMawkvFKV0kqOEwcfL_DWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.mft
Manifest number: 03DC
Signing time: Fri 22 Aug 2025 23:01:45 +0000
Manifest this update: Fri 22 Aug 2025 23:01:45 +0000
Manifest next update: Sat 23 Aug 2025 23:01:45 +0000
Files and hashes: 1: 89qLG1K07SoB9KnzvBmCV6QFSkI.roa (hash: +0xILp3yJ9G90xUu2Ml6EPqNrjSk0rDe+FJWrTAlYPw=)
2: ACSoxiVrVB6X7y6ozamLSgqazeo.roa (hash: y8VDA0ULLPWCFXTUghHVruXhGvY9U4iQhON3EqU1Hso=)
3: BswqJrMawkvFKV0kqOEwcfL_DWE.crl (hash: sYgsSxlObYAMtMHDmZJ4lTuwzRiexvI2Td+wz+WFoDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BswqJrMawkvFKV0kqOEwcfL_DWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:43:b1:21:e3:08:72:92:94:37:9f:77:b6:db:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06cc2a26b31ac24bc5295d24a8e13071f2ff0d61
Validity
Not Before: Aug 22 23:01:45 2025 GMT
Not After : Aug 23 23:01:45 2025 GMT
Subject: CN=c26b7303bccf9764784b5b1a90762a5bfac1141f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:74:aa:01:1c:10:ef:90:3d:c9:70:ca:6e:29:
4c:1d:9b:1e:d1:d6:c7:10:6a:81:b4:43:42:53:fd:
29:5d:59:91:53:65:e2:b1:ef:86:01:08:ab:c3:8c:
1b:ab:f1:9b:17:70:5f:49:0a:69:9f:ce:ff:b7:a6:
af:bd:bf:d3:d1:ff:72:e9:58:1f:ff:f7:b0:72:2a:
c6:7e:4b:50:10:5a:59:51:50:d5:b0:4d:1b:a2:28:
b0:6b:23:a7:3a:ff:6c:e6:82:34:31:a2:fe:8f:61:
85:44:f2:33:43:db:f5:56:e0:92:36:7c:cd:09:57:
45:af:b5:97:d3:5f:bf:a8:98:a6:96:68:ac:f4:20:
38:ef:98:40:20:a2:ba:37:1c:90:88:6a:98:9e:9e:
a1:f8:24:b9:4c:a4:7c:b0:f0:0f:92:d0:80:36:ee:
53:80:21:a0:41:7b:78:3e:4d:38:48:c6:92:49:a2:
73:fe:1d:2c:d0:5e:11:48:76:cc:10:3b:f1:13:e3:
62:11:24:07:17:e8:81:bd:97:a8:24:38:a5:87:cb:
c3:bf:16:76:c6:bd:a9:ca:00:c7:17:e1:4e:15:e0:
69:99:6d:0b:3d:94:d2:94:a5:dc:44:5b:b7:9e:b9:
71:4a:80:ca:56:4c:03:21:dd:df:47:f3:42:57:ab:
e9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6B:73:03:BC:CF:97:64:78:4B:5B:1A:90:76:2A:5B:FA:C1:14:1F
X509v3 Authority Key Identifier:
keyid:06:CC:2A:26:B3:1A:C2:4B:C5:29:5D:24:A8:E1:30:71:F2:FF:0D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BswqJrMawkvFKV0kqOEwcfL_DWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:46:01:8d:59:ee:6c:e0:64:27:3c:84:78:b3:67:6a:f8:82:
ec:0f:d1:87:8b:fe:c1:d3:02:96:74:5b:80:4d:3b:09:a4:24:
9f:85:2f:d7:00:4e:aa:dd:ea:3a:72:93:e3:8e:ea:1d:78:8d:
c2:23:c6:5a:e6:58:8a:5e:a7:3a:7b:4c:2f:b3:01:a8:49:30:
06:a7:77:94:ee:c5:e7:0a:f3:bc:31:d4:47:c7:fe:50:9c:ac:
84:8d:d7:87:c4:d0:bf:28:8b:d9:20:15:5c:cc:26:91:ca:02:
4a:65:db:84:03:39:9a:66:ab:f5:a4:2f:ae:2b:83:2c:1c:28:
48:55:14:0c:2b:ec:30:be:a1:31:3a:25:74:d0:47:35:a6:a5:
96:ff:4a:1f:03:de:44:14:a6:77:51:07:e3:e1:49:c0:fa:aa:
57:fb:fe:24:86:5c:d6:26:bd:89:f0:10:42:9b:5c:5c:59:6a:
15:f9:77:e4:cc:24:d2:f7:74:da:ff:ee:11:e7:d2:d0:15:c9:
6f:f3:8a:66:91:32:ea:2a:b3:05:60:b3:04:b8:c2:ab:f0:a6:
69:ac:47:1d:1f:57:7a:0f:4e:d5:9e:cf:e7:06:e0:0b:52:ef:
f5:c7:11:f3:05:c8:95:e9:53:c4:52:a3:da:76:35:60:6d:87:
79:0a:b1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:40 2025 by rpki-client