Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
File: bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft (raw, json)
Hash identifier: NuhtoDabc2PoLJ3ckBwc1cF/tbrBaSms75JKmjwAb+Y=
Subject key identifier: E6:51:04:C2:C2:1D:AF:81:CC:44:A6:0D:23:87:5A:8C:AE:97:BD:BA
Authority key identifier: 6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
Certificate issuer: /CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Certificate serial: 019A5007225B9C4834C567C6BBC1707D96EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
Manifest number: 0DEE
Signing time: Tue 04 Nov 2025 18:00:35 +0000
Manifest this update: Tue 04 Nov 2025 18:00:35 +0000
Manifest next update: Wed 05 Nov 2025 18:00:35 +0000
Files and hashes: 1: CNEWTRKouN1ztdllhCMhjhdKKHg.roa (hash: aqhxq+qj3sPvgTV0jZeMkrVOr4/8ei7UkGfqQsH5Ljo=)
2: Jaj49FDIg9x74-Mgv5pjh9hL3VA.roa (hash: RiqG1dHCuH2e+rEOq+su9EZpKh6AH03adatnHOfLKXM=)
3: bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl (hash: XR5aRgKi8sgUvvGaqAu4CX7X2gIlq1PazBW4Egdd77Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:22:5b:9c:48:34:c5:67:c6:bb:c1:70:7d:96:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Validity
Not Before: Nov 4 18:00:35 2025 GMT
Not After : Nov 5 18:00:35 2025 GMT
Subject: CN=e65104c2c21daf81cc44a60d23875a8cae97bdba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:50:b6:6c:89:9b:23:78:38:86:7c:67:cc:fb:
9a:7c:5f:3c:e7:68:06:cd:3d:c4:03:36:84:0f:ae:
91:9a:3f:dc:39:22:d8:83:81:38:cf:fc:d0:da:db:
92:ff:43:02:c4:96:82:1b:c0:27:14:47:32:e2:ad:
9c:60:05:f3:b3:32:a4:b2:5f:23:cc:cc:b9:a3:75:
d0:2b:e2:9d:26:0f:7b:a0:2b:8b:85:82:96:c1:a0:
14:c3:d9:4a:ce:62:69:84:5b:8c:b8:85:b6:d9:cf:
96:b0:a4:d3:a7:3d:be:d8:2c:80:0c:bf:58:c7:7f:
59:6e:b2:33:be:69:a6:07:d3:41:a5:4f:a3:84:c3:
66:28:e9:88:89:07:a8:35:51:d1:79:68:a1:ab:18:
ba:35:47:fa:4b:71:33:67:aa:79:48:4c:35:a6:5e:
20:11:3b:75:80:8b:b8:bf:2b:82:eb:37:5c:31:4a:
64:7b:4b:da:17:c1:7e:b8:ea:49:9b:b8:a7:af:da:
86:8a:f8:c6:51:a7:27:18:3b:d4:e6:8c:f6:4b:14:
04:1e:5b:c2:8e:21:71:41:98:1c:d1:8b:8c:96:78:
84:ab:93:f9:47:30:40:4b:bd:ac:56:4f:47:25:aa:
4c:1e:be:5c:d5:1c:55:69:84:b3:46:ce:b3:79:d4:
2a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:51:04:C2:C2:1D:AF:81:CC:44:A6:0D:23:87:5A:8C:AE:97:BD:BA
X509v3 Authority Key Identifier:
keyid:6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a0:7e:fb:00:d9:ea:6d:0f:b1:82:b4:35:d9:8e:16:57:85:
a7:90:49:c1:89:54:53:bc:8d:c8:3b:e4:ae:22:24:d1:8f:1e:
b8:b8:9a:a6:b9:a3:54:7c:1a:6f:4e:ea:5f:d6:87:34:22:81:
25:3a:06:1f:3c:99:f3:61:32:c2:13:f2:13:6c:23:17:e7:17:
8f:ae:47:d8:dc:9d:19:d8:64:16:4d:f8:4c:45:f1:0b:e4:4b:
0b:b6:b9:ad:82:a6:20:e5:7c:3a:79:d4:cf:4d:64:7d:ff:89:
77:6e:fb:82:d7:35:0f:0f:f2:25:a5:cf:0a:d4:9d:2b:a1:1e:
14:35:b0:e1:42:d7:6a:37:bf:34:bd:9c:8f:13:f6:4e:1c:40:
5f:3f:9e:3d:ac:87:11:87:8b:04:19:2e:4e:23:aa:43:d0:2d:
4f:21:c8:57:93:d6:29:55:96:16:b3:34:7b:66:99:20:3a:22:
7d:0b:68:02:c2:3c:62:68:d0:d8:1d:98:9a:8e:44:5b:02:61:
e5:dd:28:67:cd:42:97:a1:8c:6f:e4:be:7e:a5:55:0a:1d:c8:
9e:a7:9e:4a:53:2d:54:8a:80:01:97:e1:0b:2a:73:6c:6a:29:
67:b6:58:d2:6d:34:0b:9a:d4:68:7f:4a:89:a6:6a:57:84:24:
a5:9e:37:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:22:57 2025 by rpki-client