Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.mft
File: BMWTwzo9oilIzOIyis8F2YoB8aU.mft (raw, json)
Hash identifier: w6kV9vZj1D/mSLgTseYkrISnK0M6wHpo4g2y7GVlLmU=
Subject key identifier: BF:3E:F3:E7:0D:20:60:BB:E7:3E:78:DD:42:A2:BD:AF:02:E3:6C:46
Authority key identifier: 04:C5:93:C3:3A:3D:A2:29:48:CC:E2:32:8A:CF:05:D9:8A:01:F1:A5
Certificate issuer: /CN=04c593c33a3da22948cce2328acf05d98a01f1a5
Certificate serial: 0198A04D0A92093176A38141188ADD332FC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMWTwzo9oilIzOIyis8F2YoB8aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.mft
Manifest number: 075F
Signing time: Tue 12 Aug 2025 22:01:00 +0000
Manifest this update: Tue 12 Aug 2025 22:01:00 +0000
Manifest next update: Wed 13 Aug 2025 22:01:00 +0000
Files and hashes: 1: BMWTwzo9oilIzOIyis8F2YoB8aU.crl (hash: ZjYIi8aoWCVye5lLYiXUe7EDU0I2B0YIpeytfUY1hj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMWTwzo9oilIzOIyis8F2YoB8aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:0a:92:09:31:76:a3:81:41:18:8a:dd:33:2f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04c593c33a3da22948cce2328acf05d98a01f1a5
Validity
Not Before: Aug 12 22:01:00 2025 GMT
Not After : Aug 13 22:01:00 2025 GMT
Subject: CN=bf3ef3e70d2060bbe73e78dd42a2bdaf02e36c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:19:b9:55:0a:69:ca:fc:19:ae:50:8c:92:4d:
36:ab:4d:e3:85:ee:db:c6:59:c9:c0:34:70:aa:46:
fc:e0:f4:a3:1e:2b:5b:29:68:1b:7c:ba:4b:58:ca:
90:08:b9:c5:bd:b9:39:49:51:a5:9f:90:e1:ee:1b:
3a:5f:7d:3a:30:35:c9:7a:1f:53:ed:3d:84:81:33:
b3:f4:61:16:4e:51:96:3f:5e:bf:97:43:c3:e1:38:
65:8a:e9:6c:6a:3b:40:a8:bf:10:3b:d4:0e:e8:f7:
c8:43:a3:68:ff:18:d5:a1:6e:88:0e:bc:0b:43:41:
0f:a6:7a:3b:e6:db:82:1d:ef:5a:bc:60:57:3e:b3:
de:1f:96:80:9f:51:ba:3c:2e:e4:d6:c4:73:9e:69:
34:80:f0:c2:40:e6:4f:37:06:e2:0b:8f:6c:cc:d6:
20:d4:4d:e9:73:a9:e0:6b:3c:b7:7c:9b:eb:8d:c2:
55:33:37:ae:8c:17:38:fc:21:36:1a:7e:ab:5e:ef:
96:97:af:99:2e:66:40:b8:0e:74:f4:81:a2:ee:c9:
21:e9:4d:05:3c:96:d5:9b:6d:f1:73:db:93:40:d7:
ab:ee:2d:e8:f9:c0:be:21:3d:07:38:53:7e:43:86:
77:aa:ac:d6:c2:ad:01:c7:06:28:51:e9:a7:d4:2a:
01:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3E:F3:E7:0D:20:60:BB:E7:3E:78:DD:42:A2:BD:AF:02:E3:6C:46
X509v3 Authority Key Identifier:
keyid:04:C5:93:C3:3A:3D:A2:29:48:CC:E2:32:8A:CF:05:D9:8A:01:F1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMWTwzo9oilIzOIyis8F2YoB8aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ee:b7:c7:24:f1:c6:72:d7:18:e8:16:d7:e2:07:dc:c0:2c:
4f:db:a3:26:0a:26:17:6d:fa:f2:ad:33:10:07:04:51:a9:c3:
b0:6b:07:79:db:9f:3f:a7:ed:7b:f1:ed:2e:1f:cb:98:a2:75:
53:ca:41:6b:17:b3:1d:6a:d0:ad:35:9d:87:8c:2e:41:98:ac:
57:8f:b0:b6:7a:df:58:99:42:a7:dd:79:cd:4c:45:9e:a6:ad:
4d:9a:76:38:e4:d6:83:24:94:d7:e9:be:39:a1:9d:a4:6c:57:
98:c5:97:7c:05:4b:b0:86:85:2a:d3:74:b1:2a:83:c7:a6:f3:
6b:49:06:16:a2:1a:bc:09:23:f2:d3:8b:7c:81:1e:4c:ed:52:
a5:c5:d5:de:e1:44:ba:3b:43:34:d0:84:11:13:36:c9:e6:96:
57:d6:d2:ac:67:51:cd:5c:7f:11:19:2a:32:9b:82:45:59:a9:
28:02:79:58:1b:e0:e4:23:05:30:a1:d4:4f:1e:49:cc:13:cf:
dc:07:60:09:f8:4f:56:bd:3f:17:5d:ed:13:d1:10:68:e2:6f:
29:15:99:2a:78:61:70:ab:65:5b:3a:e2:79:40:d7:4b:fa:e0:
31:86:cf:67:e2:27:e4:07:0a:dd:81:0f:cb:dc:05:61:d8:bc:
0a:23:c9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:29:57 2025 by rpki-client