Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft
File: bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft (raw, json)
Hash identifier: +sJ6WXOXCX15drGgD08pDzsRvhlbvNP0YlMAscdIcqQ=
Subject key identifier: 1E:E2:51:AB:79:7D:F5:ED:A6:BB:75:D4:82:C4:C6:92:2C:51:17:31
Authority key identifier: 6F:06:04:74:08:86:06:EC:4E:E8:EE:D7:C4:1B:69:43:F8:9A:09:BD
Certificate issuer: /CN=6f060474088606ec4ee8eed7c41b6943f89a09bd
Certificate serial: 019883552A487940EA102F1FE0AD0CA9C6EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft
Manifest number: 0963
Signing time: Thu 07 Aug 2025 07:00:53 +0000
Manifest this update: Thu 07 Aug 2025 07:00:53 +0000
Manifest next update: Fri 08 Aug 2025 07:00:53 +0000
Files and hashes: 1: bwYEdAiGBuxO6O7XxBtpQ_iaCb0.crl (hash: 6xG8kLD92anoX0v1IXwbVeO+CFvFVBN9l6zTD0SrLy8=)
2: xfilALq9xVm7LJX_uaRRDqm1ZX0.roa (hash: o3xsXXS0G1bR6xk5CmXK470ksv+YeZHYJ06DDMgu6J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:55:2a:48:79:40:ea:10:2f:1f:e0:ad:0c:a9:c6:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f060474088606ec4ee8eed7c41b6943f89a09bd
Validity
Not Before: Aug 7 07:00:53 2025 GMT
Not After : Aug 8 07:00:53 2025 GMT
Subject: CN=1ee251ab797df5eda6bb75d482c4c6922c511731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:63:29:ff:72:97:13:7e:62:d3:eb:99:46:3b:
47:29:ef:7b:23:6d:52:ed:9b:c1:ef:73:15:30:c4:
e3:81:78:d9:b0:ff:d9:93:75:a8:50:fb:dc:a7:93:
35:ce:20:0b:58:4f:b6:39:cc:ea:8c:70:73:8b:99:
fc:c0:c7:9d:4e:53:c5:d8:d5:7d:ef:bb:08:8f:aa:
13:45:0d:df:1e:7e:19:36:55:91:d3:c6:db:9c:82:
b6:a3:17:60:52:55:07:59:ba:ff:48:c5:68:8b:82:
44:f7:36:d3:58:a1:01:1a:1b:61:b5:c4:c7:fd:72:
9b:e3:35:e2:d0:d8:22:5d:bb:95:05:89:f5:c6:da:
44:19:04:b1:a3:30:42:6d:58:95:54:34:66:6c:df:
ca:14:f7:ee:a7:74:54:b9:37:82:e4:9f:5e:32:e4:
14:07:0d:08:ed:59:8c:a8:2b:4c:51:70:d4:11:5f:
09:b9:4f:51:c0:42:80:6d:c7:bc:3d:54:f1:ff:c6:
04:cf:76:87:1d:67:6e:64:ea:19:23:2b:c2:7b:09:
87:4b:51:42:d1:0f:7c:3d:8f:5a:4b:d1:f4:cc:fb:
0c:c1:97:a6:89:8a:7c:63:ba:8c:7a:38:ef:87:6a:
72:ac:cd:60:79:73:f9:b9:a5:de:d7:9d:6f:98:50:
77:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E2:51:AB:79:7D:F5:ED:A6:BB:75:D4:82:C4:C6:92:2C:51:17:31
X509v3 Authority Key Identifier:
keyid:6F:06:04:74:08:86:06:EC:4E:E8:EE:D7:C4:1B:69:43:F8:9A:09:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:7c:3e:bd:08:cd:cd:01:01:51:c0:8b:b4:88:aa:6e:c8:ea:
4d:fb:d9:09:8d:e9:ee:15:a0:37:6f:32:87:66:e4:d6:33:cf:
4b:c4:a4:3a:e9:6e:2d:c7:f7:af:7d:e3:09:c4:fa:6d:ba:04:
cb:2a:02:6f:1a:d4:0a:dd:51:09:bb:3f:9f:76:d2:ab:2c:23:
c3:4c:6c:18:3a:c4:b1:5b:86:94:47:fe:24:6c:42:7a:43:a7:
58:10:02:9d:0a:6a:6d:44:11:07:8f:80:91:ed:ff:70:74:0b:
2e:97:1c:bd:b2:a5:b6:c9:7b:a6:0e:01:27:cd:ab:96:15:32:
45:1b:7f:c8:70:7b:37:2c:de:de:e0:bf:f9:4a:b5:8e:56:95:
a7:59:43:02:0d:66:bd:0d:f2:93:36:3b:44:ed:d4:84:aa:e4:
e3:ac:96:79:44:a6:c5:62:db:13:2c:27:ca:c3:cd:7d:29:2d:
16:83:9b:55:46:ea:87:52:9d:e8:0f:76:e5:d7:cf:fa:93:ee:
50:2b:09:45:5d:8f:77:ff:71:fd:3b:57:8a:94:bf:d5:05:a9:
33:5d:1a:f9:33:18:8b:91:70:33:a1:c2:53:7c:34:72:3f:30:
db:e5:88:72:64:d3:7c:27:e5:78:39:e1:ec:82:f4:65:52:d4:
d2:d3:fa:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:41:17 2025 by rpki-client