Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
File: Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft (raw, json)
Hash identifier: 9Tex0osYPDBg1PXr7Lc9JTax+1JOsGGaLXlLMND25r4=
Subject key identifier: E9:5C:49:AF:57:32:97:A2:5D:B3:19:33:E0:05:1A:5A:9E:7B:A7:1D
Authority key identifier: 07:07:79:69:A8:B6:A5:5C:46:1A:DD:E1:06:C0:06:48:6A:26:35:9F
Certificate issuer: /CN=07077969a8b6a55c461adde106c006486a26359f
Certificate serial: 01988A32DF7D41555A003CB726974AD45C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
Manifest number: 05D9
Signing time: Fri 08 Aug 2025 15:00:46 +0000
Manifest this update: Fri 08 Aug 2025 15:00:46 +0000
Manifest next update: Sat 09 Aug 2025 15:00:46 +0000
Files and hashes: 1: 45JkWDxR5fUqLNSe5lQL_9cedVE.roa (hash: 9POiY5D1z/tZud9uWBNIH5N9GB3K31py8YZ3lDPWtyQ=)
2: Bwd5aai2pVxGGt3hBsAGSGomNZ8.crl (hash: HAfHiOiidXcDuuS+vZLVMplAmmmKXxF45Y8+n2m6sGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:32:df:7d:41:55:5a:00:3c:b7:26:97:4a:d4:5c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07077969a8b6a55c461adde106c006486a26359f
Validity
Not Before: Aug 8 15:00:46 2025 GMT
Not After : Aug 9 15:00:46 2025 GMT
Subject: CN=e95c49af573297a25db31933e0051a5a9e7ba71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:01:b4:42:0c:1b:fa:95:76:50:f2:86:a2:42:
bd:43:95:98:bf:1c:86:d4:46:b0:a2:af:c4:ab:c7:
d6:2d:fa:d8:13:81:5c:82:fe:b6:a1:19:d3:eb:00:
85:0f:26:87:5f:de:dd:66:8f:af:10:1f:34:e9:32:
b3:b7:56:5f:b0:fa:db:23:7a:5e:39:da:9e:25:3d:
72:9f:85:12:bc:d8:68:6e:70:f1:4a:a4:97:8c:bf:
0a:82:72:85:34:12:3f:99:cc:35:f6:58:73:78:ee:
66:e6:09:60:e1:eb:86:ac:74:0c:59:03:e8:ab:01:
32:91:88:a2:ee:34:92:ad:d0:f8:53:a3:64:99:99:
40:26:af:ee:59:d6:1c:59:43:fe:28:8c:09:93:96:
85:fc:84:55:e7:15:9a:72:13:fe:3d:e9:91:01:40:
e4:e0:95:82:63:1f:77:97:18:6d:f4:0d:d6:03:0a:
62:c0:55:71:04:7b:2c:0e:ca:6c:d4:64:4e:8d:b9:
c1:5b:06:4f:ce:22:a2:11:19:a7:0a:88:37:13:c1:
79:1e:7e:2c:15:cc:a3:52:cf:11:64:5b:6f:aa:bd:
02:83:8e:8e:3c:4a:53:f6:e2:ae:0c:7a:fc:b9:3b:
17:b7:45:56:c0:0b:90:15:76:0d:d8:8b:15:b8:29:
6a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:5C:49:AF:57:32:97:A2:5D:B3:19:33:E0:05:1A:5A:9E:7B:A7:1D
X509v3 Authority Key Identifier:
keyid:07:07:79:69:A8:B6:A5:5C:46:1A:DD:E1:06:C0:06:48:6A:26:35:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b7:03:e6:51:16:b4:16:bc:bb:39:c6:be:dd:00:32:49:c1:
88:e2:bb:4f:61:9e:8e:df:89:27:6d:97:49:77:88:a4:6b:8b:
d6:8c:e6:8d:f3:71:4a:58:97:e0:23:45:05:f5:8f:c1:b4:c6:
63:3f:63:8a:9d:4c:07:98:d6:32:f8:90:99:c1:b0:9e:4e:7b:
de:09:f8:8f:08:d0:21:70:4a:7b:84:66:f7:c1:a8:73:87:e2:
70:47:e0:88:c4:36:28:c8:8a:f4:bd:bf:06:e4:18:cd:f9:85:
55:a2:39:38:a2:98:28:39:57:01:d3:b1:8a:a5:4e:30:a2:09:
dc:8d:f7:6e:b0:32:7f:71:b7:68:c6:37:a6:1b:cd:08:65:ad:
ca:92:f4:8a:18:22:58:89:1e:67:1b:f3:51:1a:87:17:00:83:
f8:45:2d:46:af:d0:ad:96:dd:ea:ac:fe:27:de:1e:65:2a:94:
b2:d4:54:e2:e3:2a:cb:d2:b2:e7:89:32:1f:cc:e9:65:3a:e0:
53:b7:a8:0f:7a:3b:a7:dd:07:e5:85:24:be:73:c2:f3:88:f3:
12:47:b3:9c:c5:c0:49:c5:34:35:60:93:02:c9:36:a1:32:71:
e2:c7:8c:a0:a7:d1:03:c0:1d:a1:78:b7:52:3b:0e:9d:b7:be:
34:eb:d8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:46:53 2025 by rpki-client