Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
File: BWAG8qGECQDHU2KBIbP7fsW9iek.mft (raw, json)
Hash identifier: IKsiIkcmhJ50BJFgNgy/CeoDP+ynuEkHSXCkDbArP3o=
Subject key identifier: 1C:4D:24:57:44:AA:81:A2:58:86:9B:25:E9:BB:43:24:3C:C1:B1:F7
Authority key identifier: 05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
Certificate issuer: /CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Certificate serial: 019877C05DFF938D8CB9354E1894628FBDCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
Manifest number: 0857
Signing time: Tue 05 Aug 2025 01:02:32 +0000
Manifest this update: Tue 05 Aug 2025 01:02:32 +0000
Manifest next update: Wed 06 Aug 2025 01:02:32 +0000
Files and hashes: 1: BWAG8qGECQDHU2KBIbP7fsW9iek.crl (hash: NvYhx+yEmPPLwoOQqU3QbcEmQjk/fZOqhNCILrxPIZI=)
2: G7hpWPyXuPCdcjaRbCuAbyP7XNA.roa (hash: CuG2DStYKEKyAlh0IJta5/FjSh93nl0CeskY3cbZDZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 00:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:77:c0:5d:ff:93:8d:8c:b9:35:4e:18:94:62:8f:bd:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Validity
Not Before: Aug 5 01:02:32 2025 GMT
Not After : Aug 6 01:02:32 2025 GMT
Subject: CN=1c4d245744aa81a258869b25e9bb43243cc1b1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:20:80:63:1e:c9:61:64:0a:4b:c2:a6:e4:a4:
29:6c:68:3d:af:08:70:12:e5:5c:0d:6f:76:10:b2:
84:45:de:4a:99:f4:d4:cf:4c:16:9f:52:be:72:79:
82:6f:2f:34:1b:74:26:08:49:73:85:99:52:c2:f5:
83:96:62:68:7f:f3:b7:d5:9c:d9:78:6f:c6:60:68:
d6:6f:c5:63:c8:7d:c0:c5:41:ef:8c:b1:a0:af:1d:
9e:b2:a0:9a:ef:63:57:d0:b6:1d:c0:e2:c7:4f:61:
c4:c7:a4:6f:21:6e:52:f0:4d:bd:95:02:d0:89:1d:
3b:2b:5d:0e:89:58:c6:1a:ca:b5:5a:ac:bc:e6:1c:
8c:c6:9b:a7:a4:d7:d1:ea:e4:60:18:6a:47:9b:4e:
46:57:42:d8:95:9f:4b:5e:23:2b:88:78:40:9f:96:
8e:4c:0c:1a:9c:5a:84:b2:3b:50:98:72:ce:91:b6:
4b:b4:1a:cb:a1:02:db:0b:ea:a4:f1:37:cd:40:24:
d9:60:ae:4b:4c:8b:a3:84:d1:34:b0:24:fa:24:96:
06:43:5b:dc:a6:c8:c6:b7:6d:50:d8:3c:85:1d:f2:
84:bf:4e:29:ad:9a:ab:c1:b7:6e:d5:bc:0a:bc:af:
8f:59:a3:ed:1a:9e:46:71:20:16:71:d7:5f:f7:bb:
42:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4D:24:57:44:AA:81:A2:58:86:9B:25:E9:BB:43:24:3C:C1:B1:F7
X509v3 Authority Key Identifier:
keyid:05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:45:62:c6:c9:29:0e:95:5a:7e:1a:89:99:1b:eb:14:c8:f8:
fa:25:ee:e1:f6:34:04:0c:72:57:3e:cd:e2:a5:8c:ca:ca:4c:
40:3b:10:01:bf:20:6a:cb:59:a2:43:bd:a0:23:a1:11:5b:6b:
02:d8:39:10:04:ed:6b:c0:b4:bf:d2:00:1f:f5:0c:2d:9e:e1:
3d:30:80:ef:40:96:a2:33:fa:39:28:91:ac:af:0c:c3:5c:48:
af:bd:b1:97:f4:bb:85:2e:82:fa:c4:e9:06:c3:be:31:17:02:
d7:f7:7a:9f:f8:0c:06:ad:21:d6:8c:86:53:c1:9f:84:5b:ef:
f0:c1:26:58:9c:d7:a1:8a:b8:f4:b5:7e:c2:eb:d3:74:16:cc:
d0:ca:43:16:53:47:9a:35:bd:bb:0b:f6:12:aa:ac:da:0d:fb:
95:a9:45:c9:d1:98:bd:49:13:74:17:38:1d:ec:56:9e:2a:37:
b5:23:df:37:ed:8a:2e:96:9e:b9:3d:60:02:69:d2:39:60:47:
79:f8:4e:62:f6:e0:45:1a:43:d7:73:95:08:2d:6d:ce:fd:77:
cd:25:0e:42:ef:6e:6f:b3:61:e6:42:40:6d:ef:dc:20:3f:ec:
d2:a1:3a:ac:e0:5e:5c:84:00:ea:2f:13:02:6f:11:cd:5b:45:
b2:01:5c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:11:54 2025 by rpki-client