Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
File: bws2ahNvj8xd9SPI1G95B5HBs7s.mft (raw, json)
Hash identifier: QLU5K/vhI9O55xH6sa0vkLBFg5JrXrbRbRJX9IvXwrw=
Subject key identifier: 66:E5:9B:DD:E6:E0:1B:FB:47:1D:2F:A0:C7:DC:AB:8C:64:77:4E:BB
Authority key identifier: 6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB
Certificate issuer: /CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb
Certificate serial: 019A51F5AE1A146897E391E1AD117FB87BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
Manifest number: 0F82
Signing time: Wed 05 Nov 2025 03:00:46 +0000
Manifest this update: Wed 05 Nov 2025 03:00:46 +0000
Manifest next update: Thu 06 Nov 2025 03:00:46 +0000
Files and hashes: 1: 6DyFjxNuZaydS9bKmS0-lDimCWA.roa (hash: w+hli8OO0LCrT1s2As2YzA6/he3KpN8v/KtHkMIY6+4=)
2: bws2ahNvj8xd9SPI1G95B5HBs7s.crl (hash: zZpaz2UbMDgzILCRgAngXVgxhBe+lDP47vyDhj+FgiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:ae:1a:14:68:97:e3:91:e1:ad:11:7f:b8:7b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb
Validity
Not Before: Nov 5 03:00:46 2025 GMT
Not After : Nov 6 03:00:46 2025 GMT
Subject: CN=66e59bdde6e01bfb471d2fa0c7dcab8c64774ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a9:b5:4f:12:b6:8b:4f:e8:b8:a4:4c:9b:57:
a2:81:18:dc:60:ac:7b:0c:0c:56:33:a7:2c:ab:f8:
63:57:16:52:6b:cd:8c:32:e4:24:b8:87:8e:3e:f9:
1b:c4:b6:47:e0:38:90:7d:37:63:9d:c4:58:bc:a1:
0d:30:63:b1:c9:80:cd:03:63:30:8a:50:41:ab:81:
9b:16:61:16:3a:e3:04:a4:80:c4:00:30:8a:4b:15:
f0:2a:ad:31:81:07:f3:a2:43:bd:b7:ad:fc:b0:33:
ea:8c:38:c3:b5:45:31:59:10:bc:37:b7:c0:e1:ce:
20:88:a5:b2:c7:ac:81:c4:fb:3d:71:e0:72:31:ae:
8d:8e:6f:e9:d5:fd:38:e5:b3:2f:f8:aa:d0:91:0b:
69:25:1d:78:37:97:1d:98:1a:92:73:ef:e2:81:84:
ef:86:3e:a1:b7:4b:3e:20:63:81:03:aa:9a:29:d7:
c3:97:43:b2:bd:94:23:4c:6f:62:74:37:19:a7:53:
25:17:e9:ae:44:a0:93:d6:52:5d:06:3d:d7:74:74:
ab:c1:8f:d7:52:59:50:7d:5d:03:ad:4d:dd:ac:7b:
93:65:48:f8:c5:3d:f0:98:5e:5a:d4:32:21:6a:69:
85:a2:15:10:14:a2:7e:3f:b7:a0:d6:03:f3:49:05:
60:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E5:9B:DD:E6:E0:1B:FB:47:1D:2F:A0:C7:DC:AB:8C:64:77:4E:BB
X509v3 Authority Key Identifier:
keyid:6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:a5:0f:01:97:79:c2:c8:39:50:67:97:78:84:0c:b7:6f:dd:
80:fb:3e:a6:05:f7:a3:5d:65:f8:f8:94:b5:c9:16:73:1b:9e:
b9:86:c0:93:1d:51:c8:0b:41:c1:ba:e4:aa:6e:57:4b:f6:f5:
7f:c8:39:1c:4e:b2:fa:66:1e:a8:f4:5a:93:00:c6:83:9b:05:
ce:f4:bc:9e:b8:dc:79:cd:02:b1:34:20:b5:30:d2:b6:c5:e3:
7c:b1:d5:7b:25:fd:fe:4a:67:c2:a3:f7:94:a7:41:b1:9a:b4:
a4:da:95:8f:cd:4a:8c:d4:62:5b:12:8c:d1:b9:df:f0:5e:41:
81:83:91:72:04:52:60:0f:07:68:9d:16:3c:6f:4d:a8:fd:bf:
42:56:03:01:be:71:20:4a:2f:ef:e4:e6:40:fc:76:b0:63:c2:
77:05:f9:1c:86:b7:b1:c4:05:99:07:f9:df:16:4f:eb:9f:96:
e2:c4:19:30:d9:ae:76:bf:2f:b7:35:fc:c4:a2:fb:e0:31:60:
28:69:47:95:b5:ab:6c:2a:c9:51:02:4e:9d:3c:c2:e4:39:24:
dc:91:ca:64:e0:63:e8:fc:c3:3f:7a:f8:88:4f:1b:06:06:11:
d5:a6:c7:27:c1:0b:2e:a5:85:4b:5c:34:52:92:67:4e:33:e8:
7f:f0:33:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:21:43 2025 by rpki-client