Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
File: bwyaERer1S7IA2tPN4ZE-nekuKc.mft (raw, json)
Hash identifier: Iyx78JmTApmrWEckSRIF4XogP82VpYKR5ZnlaqCJcR8=
Subject key identifier: DF:D4:8A:C5:00:F7:57:38:78:1A:F7:46:36:35:F8:1A:8D:16:2C:FA
Authority key identifier: 6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7
Certificate issuer: /CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
Certificate serial: 0198D54E789405BCE6C08903E1109B20CDBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
Manifest number: 0730
Signing time: Sat 23 Aug 2025 05:02:26 +0000
Manifest this update: Sat 23 Aug 2025 05:02:26 +0000
Manifest next update: Sun 24 Aug 2025 05:02:26 +0000
Files and hashes: 1: 5YbQ1lEYRu1FDVmUe9WtFEdIQq8.roa (hash: LLdAnT3T14ZMA8Ruwq6pBGBMT1LXc953lNErRWyZvjE=)
2: bwyaERer1S7IA2tPN4ZE-nekuKc.crl (hash: RUzvDApgVo3CycSY4LpHvhdJdCCNOt+zz0mDS3cY6Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:78:94:05:bc:e6:c0:89:03:e1:10:9b:20:cd:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
Validity
Not Before: Aug 23 05:02:26 2025 GMT
Not After : Aug 24 05:02:26 2025 GMT
Subject: CN=dfd48ac500f75738781af7463635f81a8d162cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:59:a5:92:17:8b:b8:8b:f4:b0:a4:95:49:af:
f2:6c:20:87:13:6e:7c:67:8f:9c:ea:f1:cc:03:26:
30:9e:17:66:1d:c9:a6:b2:86:ee:b3:f0:fb:0b:0d:
73:39:bc:bb:8c:09:8b:1e:b4:0d:d4:ba:88:f2:06:
b5:aa:be:01:ed:06:39:55:c1:6d:de:71:d0:9c:72:
ef:cc:e4:c5:5b:0b:d8:99:25:64:14:bf:ea:08:ab:
dd:82:03:37:7b:a5:eb:a1:2a:0b:1f:5b:c7:65:72:
43:48:9d:36:8e:ad:71:9c:e9:b7:9b:4d:54:de:31:
3a:5c:ba:d3:81:c0:37:97:93:33:64:6b:de:9b:9d:
da:de:d0:ab:94:7d:98:79:ed:b3:64:4c:ed:67:b1:
42:25:0e:d7:31:d3:85:a5:28:b3:54:48:77:ad:76:
44:3e:13:ce:9d:62:28:43:5e:d6:9c:6f:1d:dd:64:
1d:68:78:d4:79:e9:69:1f:5b:5c:d1:d7:92:15:b6:
69:7a:e3:42:0f:0e:f4:fd:8e:cb:88:09:31:56:4c:
68:57:59:91:c5:da:35:ec:e9:e9:47:a5:19:91:3f:
d7:bc:19:e3:4f:32:84:c9:20:14:51:c0:a3:f5:dc:
54:c6:37:34:3e:49:05:5b:ef:fb:cf:cd:9a:7c:85:
29:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D4:8A:C5:00:F7:57:38:78:1A:F7:46:36:35:F8:1A:8D:16:2C:FA
X509v3 Authority Key Identifier:
keyid:6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:9a:60:5f:a4:89:d1:b2:aa:ed:7a:6b:11:9e:ae:e1:69:cc:
3a:3d:0c:97:31:ba:1d:26:5a:f7:87:b8:5e:1d:95:23:93:b0:
aa:61:fb:11:b2:0d:9c:67:70:b1:db:66:7e:55:3e:06:44:c3:
c1:5e:03:b6:f2:ac:d7:ca:73:fe:3f:cf:6b:90:a0:10:b3:bf:
fb:ab:cd:93:fe:53:f0:9e:90:2e:bb:2a:f8:42:6b:98:c0:e8:
43:21:d9:30:83:1b:0c:63:65:72:55:c5:c9:43:a0:83:3d:1f:
86:5f:4d:d0:df:d6:58:ab:e9:0f:1d:0c:10:6f:d4:83:d2:af:
d4:57:be:dc:21:12:05:f2:72:55:e0:a2:db:0a:a9:0e:ea:c0:
da:e8:b1:d8:a5:d5:4c:c5:59:9f:69:d1:cf:00:fd:36:ad:4f:
98:46:68:2e:ef:86:45:d4:58:f9:12:8f:ac:46:25:21:40:58:
13:1b:85:42:3a:bb:1d:52:10:c9:38:1e:89:2d:b2:2d:66:76:
7d:cd:5d:7d:b2:b2:0c:7c:3c:98:84:98:25:38:53:65:83:1a:
0d:19:51:dc:2c:59:f7:b2:f0:39:b4:55:d1:a5:f7:55:25:07:
df:05:36:2e:9a:86:4b:9e:5d:b9:ab:d6:54:57:f8:41:00:ec:
29:62:47:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:05:09 2025 by rpki-client