Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
File: bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft (raw, json)
Hash identifier: N9X+kjiUNp/4ide5Ywj4eQahCAbeJNitlsNym8WvzXw=
Subject key identifier: 7B:75:51:E8:A4:05:06:54:06:4C:8D:C5:82:7C:94:9D:21:C1:26:CB
Authority key identifier: 6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
Certificate issuer: /CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Certificate serial: 01969F080346FACC95754F8FF106A21FD42E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
Manifest number: 0C04
Signing time: Mon 05 May 2025 06:00:24 +0000
Manifest this update: Mon 05 May 2025 06:00:24 +0000
Manifest next update: Tue 06 May 2025 06:00:24 +0000
Files and hashes: 1: CNEWTRKouN1ztdllhCMhjhdKKHg.roa (hash: aqhxq+qj3sPvgTV0jZeMkrVOr4/8ei7UkGfqQsH5Ljo=)
2: bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl (hash: fUqM3P5sLAlLDPFeSP4HBbgyUh9sg/dEJ1v0o/UHS3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:03:46:fa:cc:95:75:4f:8f:f1:06:a2:1f:d4:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Validity
Not Before: May 5 06:00:24 2025 GMT
Not After : May 6 06:00:24 2025 GMT
Subject: CN=7b7551e8a4050654064c8dc5827c949d21c126cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:85:3c:35:1f:27:03:24:38:6e:88:21:a7:92:
2d:17:1c:44:68:b4:2c:4c:29:da:49:f6:10:10:f2:
0f:57:30:5f:f6:e6:64:64:aa:58:4d:4d:20:8f:e7:
df:1d:86:a9:0e:7f:06:46:89:6c:1d:f8:29:f9:7d:
5a:59:a8:82:1d:47:c5:7a:f8:73:29:42:83:2a:33:
c9:1c:49:14:36:2c:3d:e7:18:4f:1c:91:a5:33:7c:
dd:1b:31:97:6b:07:73:1a:42:9c:04:8f:0b:5b:57:
5d:b1:f6:8e:9b:7d:8c:4c:74:c5:a4:92:e0:34:8f:
93:2d:1c:9b:b8:ba:e3:fb:ee:ee:99:30:3b:8d:68:
d2:b6:f8:eb:98:69:61:44:af:01:8b:a7:7b:e4:eb:
7f:36:f6:67:19:25:43:66:15:2c:3e:58:78:a7:3b:
47:f7:b7:e4:1e:5c:e8:55:47:bf:04:b0:19:02:48:
94:1b:cb:44:9d:5e:e0:5c:f3:af:2c:83:ea:e9:8b:
41:b6:4d:4f:0b:dc:4b:44:43:e6:42:06:f4:12:11:
35:fe:67:09:98:3a:85:f8:29:49:c8:34:34:08:65:
ee:f9:22:77:b4:aa:2e:83:72:50:c5:96:48:5e:92:
12:2b:00:c8:d5:64:5f:10:fb:56:2c:03:12:58:ac:
f1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:75:51:E8:A4:05:06:54:06:4C:8D:C5:82:7C:94:9D:21:C1:26:CB
X509v3 Authority Key Identifier:
keyid:6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:00:fb:2c:cf:7e:7c:51:b8:29:35:33:af:cc:d4:b8:9c:95:
00:3d:49:6f:21:1f:a3:01:2c:e1:a1:b9:a9:69:d6:98:54:84:
88:07:0e:99:3e:6e:b3:2b:21:2b:8e:9e:98:f6:30:24:ac:7e:
70:cf:8f:c9:27:20:d3:d8:80:e7:71:26:8c:9c:0b:a2:7e:a9:
07:81:86:8a:f0:db:5b:a2:a6:dc:1e:e3:09:4b:3a:9b:ba:38:
28:4c:0c:8c:42:d6:fa:71:55:2d:25:10:4f:6a:75:72:c0:e0:
5b:ad:0c:8d:94:21:07:40:5c:a0:fd:a8:da:c9:5c:63:39:53:
54:7c:c1:f5:80:7d:0c:10:ed:c3:0d:18:dc:24:f4:8d:72:99:
7c:a8:69:16:1b:b3:f6:68:84:78:df:8e:a5:ac:aa:d4:95:ec:
57:78:2b:59:a3:34:1c:ef:4e:19:84:ac:9d:b4:ae:7c:66:90:
5d:c4:52:59:df:46:84:bc:78:44:50:50:70:f7:aa:f8:df:f9:
69:2e:af:ad:3b:c0:fe:d3:42:31:bf:47:55:16:a8:c5:8d:00:
94:24:ad:04:1f:c5:d9:62:f7:e6:c1:84:27:99:65:1d:03:f7:
85:7e:63:0e:d2:45:a3:64:19:13:64:26:94:c5:4c:da:d4:24:
17:c4:8f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:12:34 2025 by rpki-client