Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
File: bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft (raw, json)
Hash identifier: W4QeqRcIUqCKpiHVhExEF2JKYOOaGPXoGXW1JUhP6Mg=
Subject key identifier: EA:18:9D:2D:06:BD:61:25:48:9C:5D:8E:6F:38:70:0C:1E:82:DB:0D
Authority key identifier: 6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
Certificate issuer: /CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Certificate serial: 01989F71045BECB580948EFB67C14FBCDEDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
Manifest number: 0D0E
Signing time: Tue 12 Aug 2025 18:00:40 +0000
Manifest this update: Tue 12 Aug 2025 18:00:40 +0000
Manifest next update: Wed 13 Aug 2025 18:00:40 +0000
Files and hashes: 1: CNEWTRKouN1ztdllhCMhjhdKKHg.roa (hash: aqhxq+qj3sPvgTV0jZeMkrVOr4/8ei7UkGfqQsH5Ljo=)
2: Jaj49FDIg9x74-Mgv5pjh9hL3VA.roa (hash: RiqG1dHCuH2e+rEOq+su9EZpKh6AH03adatnHOfLKXM=)
3: bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl (hash: tPVNNKTl66V7fVR+4n8nyy8JR0jljkHU3CLh6ZLb8Vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 18:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:71:04:5b:ec:b5:80:94:8e:fb:67:c1:4f:bc:de:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Validity
Not Before: Aug 12 18:00:40 2025 GMT
Not After : Aug 13 18:00:40 2025 GMT
Subject: CN=ea189d2d06bd6125489c5d8e6f38700c1e82db0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:7e:92:28:23:e8:34:5b:c9:29:da:9a:71:3f:
1a:11:6d:17:cd:91:c9:36:ce:74:71:c6:f7:ad:28:
66:98:d6:dd:44:20:a4:80:5c:98:a7:a2:7f:48:9c:
be:50:15:b5:36:af:18:93:fd:8d:ac:de:3f:d0:3c:
2f:a2:a1:51:38:41:a8:74:78:95:12:94:4e:d7:85:
4a:8b:dc:13:2c:99:2b:ee:b1:49:f8:c4:54:16:52:
5f:77:63:e9:18:2c:6f:f2:43:49:56:91:76:ab:a2:
37:fe:21:ce:3e:d4:ed:74:5a:d3:10:9c:6f:de:e8:
45:83:9d:0e:5e:99:db:a2:1d:b9:b2:18:40:47:8b:
8e:33:85:04:04:f8:2c:cc:fb:da:84:32:d0:3b:ab:
7c:2a:00:e7:ed:79:4b:ee:6a:39:7c:85:9f:8a:df:
a1:05:62:49:a3:bd:3e:6d:71:98:e3:43:48:d5:43:
e0:c5:b1:c6:61:68:9e:d1:b6:5c:ab:48:27:7b:b2:
72:91:4c:4c:64:84:43:9a:cd:8a:f4:77:91:c3:14:
cd:0f:93:78:88:4d:d7:5c:0e:97:69:2f:b4:fe:63:
f3:b7:f9:cc:d5:ea:64:f7:fe:b9:18:62:4c:34:39:
bd:41:89:e5:2e:78:c4:ea:9d:0a:0c:97:d4:70:aa:
c2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:18:9D:2D:06:BD:61:25:48:9C:5D:8E:6F:38:70:0C:1E:82:DB:0D
X509v3 Authority Key Identifier:
keyid:6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:4e:07:b4:5b:58:31:14:c8:24:d5:2e:6a:c2:d1:c9:66:fa:
7b:95:5a:03:4d:78:bd:dc:d2:2b:31:77:0a:84:58:3a:26:a4:
ef:96:b4:d8:19:b5:73:b0:34:8f:5e:7e:03:bb:b1:01:57:12:
29:32:fe:87:81:dc:78:02:ed:3a:3c:37:ca:b8:3e:7c:93:96:
a9:20:63:b3:20:a2:46:b7:e1:41:98:0f:53:c8:6f:77:f4:5b:
1f:3c:f9:ab:2b:08:d5:f4:10:4b:22:d7:b0:af:7b:91:db:65:
ae:9b:83:7b:4c:5b:05:05:1e:89:c7:f6:47:4c:dc:b9:da:22:
8f:7b:3a:cd:bc:66:b9:87:31:4a:c7:e1:b5:ca:b7:2d:2c:7e:
a7:02:85:67:54:2e:55:64:ea:c6:41:40:c9:b7:7d:1d:33:a4:
4a:b0:1b:4d:e4:ff:f1:50:a2:32:7a:7f:9c:2b:fa:73:30:85:
46:40:73:de:f5:dc:f9:a9:b8:1d:9d:7b:88:fc:a1:5a:41:06:
8c:0a:78:21:07:70:4b:75:a6:7e:e7:54:8e:4f:03:ef:c7:80:
79:a5:3b:5a:a3:dd:8a:d6:cc:11:f8:52:54:76:67:78:cc:7b:
7c:83:7e:58:ca:63:73:55:c3:d1:20:a8:49:68:bd:6c:71:72:
e1:29:bc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:11:16 2025 by rpki-client