Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
File: BWAG8qGECQDHU2KBIbP7fsW9iek.mft (raw, json)
Hash identifier: LsGUg9U+/TuBls/tqdqxQb+oLQlaf1EK3dgU9ys/zaw=
Subject key identifier: 9A:D3:F9:2A:0F:71:C8:06:54:0E:CC:9C:86:75:64:CF:87:6D:79:FE
Authority key identifier: 05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
Certificate issuer: /CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Certificate serial: 019A503DE94A9969858104CD9C518DFA7822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
Manifest number: 094C
Signing time: Tue 04 Nov 2025 19:00:25 +0000
Manifest this update: Tue 04 Nov 2025 19:00:25 +0000
Manifest next update: Wed 05 Nov 2025 19:00:25 +0000
Files and hashes: 1: BWAG8qGECQDHU2KBIbP7fsW9iek.crl (hash: m3jUfG0a7NemBcFN3E39zuhxY2fslagEROaF6iOgmoo=)
2: vUBtInQXQnp6aIJZLEu8LFVUcuw.roa (hash: XecZfooeE59vNEPEzFn7DI60osYJ07EPCzVg5HN86l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:e9:4a:99:69:85:81:04:cd:9c:51:8d:fa:78:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Validity
Not Before: Nov 4 19:00:25 2025 GMT
Not After : Nov 5 19:00:25 2025 GMT
Subject: CN=9ad3f92a0f71c806540ecc9c867564cf876d79fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:53:bd:f7:6c:2a:a1:c9:53:c5:2b:b9:05:c7:
6d:0c:a6:b1:a4:88:4a:55:55:d6:57:47:8b:01:15:
cb:7a:53:07:9b:2f:37:a4:e2:1b:2e:09:9a:f8:a7:
73:ee:11:32:41:2d:73:b8:80:b7:c2:83:0f:7c:58:
b7:2f:e3:72:d1:9b:61:a4:10:86:7a:93:23:86:3f:
a7:2d:79:01:72:ed:db:d3:1a:04:65:a7:8e:d7:9c:
5b:70:65:26:d1:0e:a9:a5:70:36:a7:97:cb:0c:6b:
55:a9:64:48:ad:11:6f:38:68:5a:e0:b4:af:88:a0:
fc:72:15:39:a4:88:73:88:b5:47:15:79:ce:c8:b2:
d0:d5:05:9d:06:11:4e:36:39:2a:cb:74:b4:25:7b:
f1:21:d7:be:f8:63:98:b9:cc:99:b2:67:94:35:7c:
09:b1:86:d1:c1:e5:f4:09:38:2c:55:36:b8:dd:1d:
6c:10:4d:b5:d7:64:d3:25:1b:a3:fd:45:7c:3f:1e:
67:9a:b7:27:ef:da:0d:27:83:c3:a0:dd:e4:85:e2:
5b:fa:94:3e:79:77:7c:1e:54:44:57:c9:0a:83:7a:
8f:70:26:43:10:6b:d9:6c:21:fb:13:cc:eb:07:00:
51:91:1a:28:88:46:91:a7:aa:69:71:9c:a1:4c:dd:
cf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D3:F9:2A:0F:71:C8:06:54:0E:CC:9C:86:75:64:CF:87:6D:79:FE
X509v3 Authority Key Identifier:
keyid:05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:2b:37:a5:20:a8:6a:01:d7:ae:6d:db:0c:3b:8f:f9:8c:0a:
fd:5f:d9:ea:58:64:26:ac:59:ce:71:f5:83:9d:c0:4a:0c:8a:
3c:fe:a7:0b:d7:a1:90:d2:28:4c:d3:46:9a:c4:15:39:1b:4d:
8a:15:e1:3c:86:71:15:5c:46:5a:e0:1d:23:51:32:bd:7d:c4:
2e:11:0c:db:4f:99:ec:de:c2:08:5b:bc:66:73:23:5d:2e:36:
f9:b2:c2:4a:c3:5a:3b:4f:09:c1:d8:9d:7e:d7:f1:4b:95:88:
23:cc:86:d5:fe:2c:96:5b:5d:52:57:f2:63:82:e1:02:ef:7e:
d3:ad:52:e1:a8:68:cf:0b:d4:74:fe:7a:11:af:6f:4d:b1:6e:
5f:34:56:3a:52:e4:bd:e7:00:66:9b:da:53:8e:b7:e8:fd:43:
b2:9d:37:d6:af:65:00:2f:91:2b:eb:12:65:64:c9:50:ac:a3:
26:7a:fc:10:27:c5:99:6a:1e:44:24:5f:3d:6d:52:c3:ad:c4:
68:c8:3b:50:77:75:8c:d7:1a:09:cc:e3:bc:76:6d:d5:da:2b:
3a:2d:1a:5d:74:92:51:67:45:de:1a:12:a1:65:56:f5:ad:03:
ce:37:b7:ce:ac:93:6f:d6:e4:b0:6a:d1:04:7d:e8:b3:56:2f:
12:95:f0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:53:27 2025 by rpki-client