Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
File: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft (raw, json)
Hash identifier: VSYCxBK2WnKCVJt2NxacI5peaQaZvDmws4nqVPS/IRY=
Subject key identifier: 95:B9:87:AF:53:C2:A1:0F:C6:77:EF:18:1C:A4:EA:1C:56:2F:6E:2A
Authority key identifier: 05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
Certificate issuer: /CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Certificate serial: 019788EB66047B33922485DA8AAC338372DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
Manifest number: 085C
Signing time: Thu 19 Jun 2025 16:00:17 +0000
Manifest this update: Thu 19 Jun 2025 16:00:17 +0000
Manifest next update: Fri 20 Jun 2025 16:00:17 +0000
Files and hashes: 1: 8wFv-nR7He4By0-yWjzDqasqWiA.roa (hash: Tegeoj66rXi91zg3veSuF/d35ix15E2u1G/QxmxwwNg=)
2: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl (hash: DQ/hMz4jEYe6+lYItTvphVyP89xZayz/R0uraaclM9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:eb:66:04:7b:33:92:24:85:da:8a:ac:33:83:72:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Validity
Not Before: Jun 19 16:00:17 2025 GMT
Not After : Jun 20 16:00:17 2025 GMT
Subject: CN=95b987af53c2a10fc677ef181ca4ea1c562f6e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a8:19:39:34:6c:70:b3:01:2d:de:9d:57:c5:
b1:33:32:f9:67:29:8c:a9:05:f2:af:e7:e7:f8:51:
8b:28:68:ac:0a:d4:b7:6e:50:32:df:03:f6:44:c1:
45:67:24:14:00:d1:39:0a:62:b6:1d:4d:ae:0b:74:
c3:9c:65:93:a2:db:af:24:cb:c0:d5:7d:8f:f7:96:
c9:bf:4c:43:e1:e2:f2:67:90:b2:4a:df:07:87:d7:
07:c0:ec:72:aa:e0:40:f9:85:87:68:04:57:ec:f9:
8b:d1:2b:f9:3d:71:82:aa:68:f4:fd:28:8a:62:63:
92:23:24:98:95:8f:94:93:c0:af:86:67:aa:c5:ce:
69:df:44:6e:97:6c:34:3f:24:8b:27:8b:00:c1:15:
65:80:9f:0f:3e:ab:1d:4f:29:60:41:67:6f:2d:25:
c5:08:87:fe:0f:81:37:ce:f6:c3:a9:bc:27:ee:14:
df:85:0d:46:c4:e3:22:b4:f0:7e:93:8d:bb:48:32:
18:ce:f0:1c:67:b9:a0:ce:a0:ad:cc:51:b6:9d:e5:
c8:26:51:a8:4b:9c:7c:d2:2b:c8:3b:2c:6c:f2:78:
5c:33:01:3c:46:09:d1:bb:4f:c1:f5:21:87:43:df:
eb:38:2c:e6:40:f8:99:d5:f9:d9:30:49:4e:fe:c3:
01:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B9:87:AF:53:C2:A1:0F:C6:77:EF:18:1C:A4:EA:1C:56:2F:6E:2A
X509v3 Authority Key Identifier:
keyid:05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:dc:1d:2b:56:24:82:93:19:5c:0b:d6:8f:b7:10:3c:a3:86:
be:4d:53:de:5c:bb:4d:54:f2:7e:21:8d:c9:51:2c:a6:88:b6:
a5:46:c8:d0:c9:db:56:79:00:db:cf:b8:67:f1:85:50:0c:2a:
d1:62:68:4b:39:44:14:8a:ff:8b:29:e2:63:9f:97:b2:03:21:
74:d8:03:15:26:0a:29:04:f3:cd:be:36:cc:0b:bf:23:d4:0c:
45:9b:7a:af:91:a4:81:41:41:dc:8b:dc:4c:b4:18:37:3d:fd:
88:ab:f6:b7:6a:62:b2:c6:c9:d1:f6:98:93:ec:c8:82:0c:44:
7f:25:d3:94:2f:b4:49:00:c3:9d:e3:c0:b5:b4:e8:00:c0:b1:
2d:8f:83:09:b7:f0:4f:a5:a3:75:71:cc:67:0a:68:c8:51:da:
1d:14:af:d0:74:e9:77:fb:3a:05:80:f0:d0:6d:35:27:c4:bb:
0b:ad:0a:75:32:c2:e3:59:5c:9b:d8:de:67:34:5a:b3:cd:e4:
16:08:a8:56:f0:1e:07:38:ce:23:51:6b:f5:b1:16:c9:e5:4d:
43:b5:07:5c:b7:ef:9f:0f:b4:83:9f:97:87:07:e1:0a:49:d1:
5f:c6:22:e2:dc:14:de:35:bd:98:ab:ff:e7:6b:89:0b:a4:05:
4f:13:e3:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeI62YEezOSJIXaiqwzg3LaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NmY0YTQzZTBiMDY1MTI0N2ZjMzYyOWM2MjdiOWMzODVm
MGMzNzYwHhcNMjUwNjE5MTYwMDE3WhcNMjUwNjIwMTYwMDE3WjAzMTEwLwYDVQQD
Eyg5NWI5ODdhZjUzYzJhMTBmYzY3N2VmMTgxY2E0ZWExYzU2MmY2ZTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6gZOTRscLMBLd6dV8WxMzL5ZymM
qQXyr+fn+FGLKGisCtS3blAy3wP2RMFFZyQUANE5CmK2HU2uC3TDnGWTotuvJMvA
1X2P95bJv0xD4eLyZ5CySt8Hh9cHwOxyquBA+YWHaARX7PmL0Sv5PXGCqmj0/SiK
YmOSIySYlY+Uk8Cvhmeqxc5p30Rul2w0PySLJ4sAwRVlgJ8PPqsdTylgQWdvLSXF
CIf+D4E3zvbDqbwn7hTfhQ1GxOMitPB+k427SDIYzvAcZ7mgzqCtzFG2neXIJlGo
S5x80ivIOyxs8nhcMwE8RgnRu0/B9SGHQ9/rOCzmQPiZ1fnZMElO/sMBLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJW5h69TwqEPxnfvGByk6hxWL24qMB8GA1UdIwQY
MBaAFAVvSkPgsGUSR/w2KcYnucOF8MN2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlc5S1EtQ3daUkpIX0RZcHhpZTV3NFh3dzNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yNWI2Y2UtYzIxMS00NjY4LTlhNDct
ZmU1OGY4NGRkM2ZkLzEvQlc5S1EtQ3daUkpIX0RZcHhpZTV3NFh3dzNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yNWI2Y2UtYzIxMS00NjY4LTlhNDctZmU1OGY4NGRkM2Zk
LzEvQlc5S1EtQ3daUkpIX0RZcHhpZTV3NFh3dzNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAidwdK1Yk
gpMZXAvWj7cQPKOGvk1T3ly7TVTyfiGNyVEspoi2pUbI0MnbVnkA28+4Z/GFUAwq
0WJoSzlEFIr/iyniY5+XsgMhdNgDFSYKKQTzzb42zAu/I9QMRZt6r5GkgUFB3Ivc
TLQYNz39iKv2t2pissbJ0faYk+zIggxEfyXTlC+0SQDDnePAtbToAMCxLY+DCbfw
T6WjdXHMZwpoyFHaHRSv0HTpd/s6BYDw0G01J8S7C60KdTLC41lcm9jeZzRas83k
FgioVvAeBzjOI1Fr9bEWyeVNQ7UHXLfvnw+0g5+XhwfhCknRX8Yi4twU3jW9mKv/
52uJC6QFTxPjZg==
-----END CERTIFICATE-----
Generated at Fri Jun 20 00:46:16 2025 by rpki-client