Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
File: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft (raw, json)
Hash identifier: rrtme4F2bHxuultJeO53vF4wwm9hwIxRfvco6eH8P/Q=
Subject key identifier: 13:7F:28:24:DE:AB:38:6F:6D:6E:67:A2:22:A2:2C:E0:E0:C0:82:29
Authority key identifier: 05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
Certificate issuer: /CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Certificate serial: 019A4F994B4B7C42B9D01DDB0C12BEBE8F2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
Manifest number: 09CC
Signing time: Tue 04 Nov 2025 16:00:37 +0000
Manifest this update: Tue 04 Nov 2025 16:00:37 +0000
Manifest next update: Wed 05 Nov 2025 16:00:37 +0000
Files and hashes: 1: 8wFv-nR7He4By0-yWjzDqasqWiA.roa (hash: Tegeoj66rXi91zg3veSuF/d35ix15E2u1G/QxmxwwNg=)
2: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl (hash: PVwsd55WixjiXWwnjgBaE2ouPH7ydqVh/ZIMBPtrpIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:4b:4b:7c:42:b9:d0:1d:db:0c:12:be:be:8f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Validity
Not Before: Nov 4 16:00:37 2025 GMT
Not After : Nov 5 16:00:37 2025 GMT
Subject: CN=137f2824deab386f6d6e67a222a22ce0e0c08229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3f:e5:89:62:cd:15:50:d4:1b:ce:42:5c:5e:
f6:ef:e7:6a:8c:71:d3:18:aa:d5:ad:90:4a:f7:46:
7d:a4:02:65:7e:24:b8:83:80:c8:9a:98:8b:ef:47:
ed:2e:21:ab:65:2f:10:97:3b:f2:07:92:04:05:d7:
82:56:5c:73:d3:e5:33:7d:fb:d0:20:b5:94:50:5a:
78:65:62:8a:cf:34:0b:21:0c:3e:8b:3d:4a:96:23:
81:21:7a:75:15:78:aa:54:e0:18:5d:06:51:23:83:
2f:60:e1:7b:48:3f:7a:1a:ff:62:37:e6:36:fc:94:
e7:61:73:b8:47:91:0e:f5:1c:74:80:2b:08:17:1e:
75:e7:67:c9:2d:c9:88:46:d5:33:7d:b3:b3:45:90:
d0:32:fa:6b:a8:86:e8:cb:64:37:df:f3:d0:c0:cf:
87:c2:8d:3d:3d:88:83:8a:79:bb:d3:94:f1:1a:9f:
38:62:21:fb:21:2a:04:54:10:6b:6f:c6:4b:65:b6:
57:78:03:fb:80:2a:f6:1f:c3:72:bd:d9:d2:02:f4:
c2:3f:ae:79:1b:6b:98:0f:e2:0d:df:28:64:a1:7a:
2a:ac:b5:a8:d5:55:0b:ef:8b:cc:66:4b:f1:da:f5:
28:0a:04:df:2c:27:5f:7b:58:58:05:e4:f6:71:94:
d5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7F:28:24:DE:AB:38:6F:6D:6E:67:A2:22:A2:2C:E0:E0:C0:82:29
X509v3 Authority Key Identifier:
keyid:05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:bd:22:69:61:cd:2f:63:40:5e:16:92:14:f7:e7:0f:72:3c:
c8:e4:b6:73:39:b8:96:43:93:f8:f1:13:47:81:c4:b2:b9:ef:
09:d1:ee:dd:4e:71:dc:47:70:98:cd:6f:8a:d6:24:ee:c5:f5:
77:6f:a7:74:71:24:f5:58:15:22:d5:95:7f:5a:47:e3:e7:1e:
2c:11:a5:79:3d:f8:17:6b:4e:d8:4d:e0:e4:cb:a8:9f:a7:76:
6d:0e:52:ea:8c:5b:25:fc:3d:38:5f:53:78:f9:31:c7:a9:d0:
04:d5:bb:fb:e2:6d:67:11:e7:e1:9d:42:da:aa:69:13:40:dd:
eb:ce:80:65:a4:cc:30:f1:2c:1b:df:75:3e:b4:6f:57:7e:78:
0c:9b:42:7d:7e:ea:5a:ae:ba:2b:d7:8c:3a:6e:e9:83:73:9c:
5d:a1:a7:c9:c5:21:2a:e0:7a:29:06:d8:93:b0:ef:fa:f6:4f:
25:cd:98:64:ba:83:eb:1b:66:6d:eb:e0:40:8c:55:de:be:df:
59:ae:d7:b9:2a:25:d6:c9:71:24:a0:7d:a7:c0:92:a9:c4:ee:
c8:99:8e:48:99:cb:06:a7:97:2b:b0:81:cd:fa:5a:fe:aa:c0:
1d:2c:3f:5e:73:80:29:f6:49:3f:f5:8b:e7:26:51:89:d4:8f:
28:91:a5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:45:14 2025 by rpki-client