Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft
File: bwXPdx2ZkucP9nQOayBiDOUtDYs.mft (raw, json)
Hash identifier: CCy4stp23XuWnxuIg0caadU0jPcGZ07LrjFZGxIa+gQ=
Subject key identifier: 95:B6:0F:6E:35:1C:69:A0:03:6A:39:52:0D:76:9E:06:DC:CE:C7:01
Authority key identifier: 6F:05:CF:77:1D:99:92:E7:0F:F6:74:0E:6B:20:62:0C:E5:2D:0D:8B
Certificate issuer: /CN=6f05cf771d9992e70ff6740e6b20620ce52d0d8b
Certificate serial: 01987B9BD50F7509C1857C7DC222DDC22822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwXPdx2ZkucP9nQOayBiDOUtDYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft
Manifest number: 0BBA
Signing time: Tue 05 Aug 2025 19:01:06 +0000
Manifest this update: Tue 05 Aug 2025 19:01:06 +0000
Manifest next update: Wed 06 Aug 2025 19:01:06 +0000
Files and hashes: 1: bwXPdx2ZkucP9nQOayBiDOUtDYs.crl (hash: rwUa1VQK3vGz62kOcllGE/qYRKi2jKHQacPqdPFt8OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwXPdx2ZkucP9nQOayBiDOUtDYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9b:d5:0f:75:09:c1:85:7c:7d:c2:22:dd:c2:28:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f05cf771d9992e70ff6740e6b20620ce52d0d8b
Validity
Not Before: Aug 5 19:01:06 2025 GMT
Not After : Aug 6 19:01:06 2025 GMT
Subject: CN=95b60f6e351c69a0036a39520d769e06dccec701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:40:5c:d0:2e:62:ed:0b:36:f8:8d:21:ce:f0:
e8:96:c9:e3:7b:66:37:b1:65:01:02:0b:fc:7c:b3:
4a:ea:d9:52:94:20:4d:9c:7b:46:28:9f:07:eb:59:
21:71:60:10:bb:07:ed:74:c0:71:08:73:7d:e1:96:
9a:2c:49:da:2e:2f:02:af:ca:8a:15:a0:6f:6a:1c:
76:69:19:dc:e4:50:89:1c:0f:76:a5:13:08:26:6d:
17:8d:f7:87:56:dd:7a:61:46:5c:99:08:64:57:89:
20:f6:88:31:d6:e5:5a:27:b7:e9:78:99:b2:0f:44:
dd:cf:a2:e0:31:56:b8:f9:a7:8b:e7:65:d9:05:a2:
22:b8:3b:43:cf:53:e4:46:24:2e:b0:b1:ae:a7:71:
9d:97:26:00:65:a2:2d:ee:a0:18:b4:32:87:33:56:
f2:81:54:59:02:32:77:2b:9e:f9:c9:49:2d:5d:62:
87:eb:be:4c:c4:30:4a:99:ab:9e:4b:d0:6a:ce:d5:
39:20:d4:23:19:70:05:6f:16:64:39:6c:62:83:89:
e8:c7:72:a8:d6:e4:2f:a2:a2:0b:3d:85:f4:fe:da:
97:6e:7f:8e:c3:92:3c:10:c7:f8:1d:f7:9b:02:13:
a1:11:58:cf:67:6c:1a:5f:4d:c6:6e:44:50:01:e7:
d1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B6:0F:6E:35:1C:69:A0:03:6A:39:52:0D:76:9E:06:DC:CE:C7:01
X509v3 Authority Key Identifier:
keyid:6F:05:CF:77:1D:99:92:E7:0F:F6:74:0E:6B:20:62:0C:E5:2D:0D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwXPdx2ZkucP9nQOayBiDOUtDYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:44:d1:d2:e4:85:e7:6a:b2:0a:15:b9:5a:30:47:4e:bd:06:
95:cb:97:83:33:d5:ae:4b:32:d1:e8:6d:cb:b5:dc:00:86:ed:
31:2f:4e:dc:06:63:d4:15:f9:be:98:b4:49:c5:d6:45:7b:e8:
9d:52:51:37:cf:ad:60:8b:26:aa:83:02:c5:b9:5c:2b:8b:33:
f8:09:19:79:26:28:33:ef:de:42:1f:e1:8c:09:8f:c0:6b:b6:
99:28:57:75:9d:97:dd:30:4b:ef:91:ed:48:9f:77:a3:cb:fb:
de:81:77:db:81:62:cd:da:eb:92:ba:51:e2:d3:22:85:f5:21:
a0:79:8d:d6:c0:5a:8c:5e:ed:9d:1a:57:ba:34:35:ca:a5:e8:
13:4a:3d:f9:85:63:fc:47:d0:f4:d5:bc:de:3d:c0:32:6e:5c:
d5:57:cf:8e:62:de:da:05:b6:9b:00:8f:db:0f:df:da:81:db:
75:0c:3a:df:a3:b1:70:5b:2c:33:06:85:e1:11:9f:8e:13:a1:
d4:df:7b:fd:95:47:d9:34:e0:ee:1c:f1:7a:8d:cc:7f:e1:89:
74:b4:9e:17:c7:cd:24:6b:ff:00:8b:5a:7a:9d:e1:83:5d:9d:
c5:d2:4a:15:87:a7:26:27:dc:a0:d4:fc:82:df:5f:05:68:b9:
80:02:6a:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh7m9UPdQnBhXx9wiLdwigiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMDVjZjc3MWQ5OTkyZTcwZmY2NzQwZTZiMjA2MjBjZTUy
ZDBkOGIwHhcNMjUwODA1MTkwMTA2WhcNMjUwODA2MTkwMTA2WjAzMTEwLwYDVQQD
Eyg5NWI2MGY2ZTM1MWM2OWEwMDM2YTM5NTIwZDc2OWUwNmRjY2VjNzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkBc0C5i7Qs2+I0hzvDolsnje2Y3
sWUBAgv8fLNK6tlSlCBNnHtGKJ8H61khcWAQuwftdMBxCHN94ZaaLEnaLi8Cr8qK
FaBvahx2aRnc5FCJHA92pRMIJm0XjfeHVt16YUZcmQhkV4kg9ogx1uVaJ7fpeJmy
D0Tdz6LgMVa4+aeL52XZBaIiuDtDz1PkRiQusLGup3GdlyYAZaIt7qAYtDKHM1by
gVRZAjJ3K575yUktXWKH675MxDBKmaueS9BqztU5INQjGXAFbxZkOWxig4nox3Ko
1uQvoqILPYX0/tqXbn+Ow5I8EMf4HfebAhOhEVjPZ2waX03GbkRQAefRiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJW2D241HGmgA2o5Ug12ngbczscBMB8GA1UdIwQY
MBaAFG8Fz3cdmZLnD/Z0DmsgYgzlLQ2LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYndYUGR4MlprdWNQOW5RT2F5QmlET1V0RFlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9hMjM0MDQtZjIxOS00OWY1LWJmMzMt
MjQ1NjUwZjg0MmQ1LzEvYndYUGR4MlprdWNQOW5RT2F5QmlET1V0RFlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9hMjM0MDQtZjIxOS00OWY1LWJmMzMtMjQ1NjUwZjg0MmQ1
LzEvYndYUGR4MlprdWNQOW5RT2F5QmlET1V0RFlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApETR0uSF
52qyChW5WjBHTr0GlcuXgzPVrksy0ehty7XcAIbtMS9O3AZj1BX5vpi0ScXWRXvo
nVJRN8+tYIsmqoMCxblcK4sz+AkZeSYoM+/eQh/hjAmPwGu2mShXdZ2X3TBL75Ht
SJ93o8v73oF324FizdrrkrpR4tMihfUhoHmN1sBajF7tnRpXujQ1yqXoE0o9+YVj
/EfQ9NW83j3AMm5c1VfPjmLe2gW2mwCP2w/f2oHbdQw636OxcFssMwaF4RGfjhOh
1N97/ZVH2TTg7hzxeo3Mf+GJdLSeF8fNJGv/AItaep3hg12dxdJKFYenJifcoNT8
gt9fBWi5gAJqIw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:20:57 2025 by rpki-client