
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File: bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier: HE5zVVFvYz/RfyRvw0zMulw/D0n+7w5Ep4OxIOu7Pqw=
Subject key identifier: 57:DC:BC:49:8A:12:2E:DC:4D:C5:CB:28:89:FB:8A:52:20:B8:94:E4
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer: /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial: 019A5187CD6FDC1D74EEEB220A9B95C9DC4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number: 0F3F
Signing time: Wed 05 Nov 2025 01:00:45 +0000
Manifest this update: Wed 05 Nov 2025 01:00:45 +0000
Manifest next update: Thu 06 Nov 2025 01:00:45 +0000
Files and hashes: 1: CJ2ClG_JdfjMlY4Z6z_RGPwGBQA.roa (hash: hDhd3vstthEFV1qbikUvxMAn4J2gEu+fzCJOKi1wsv4=)
2: Q2-iT_0Zjzv9GH02ya8YtILj8aY.roa (hash: w4dI7huh81K1h/L8FZLaE05OH1acBhhl3bfSdimUZDw=)
3: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: UxGE1ysjeSkQ9Zq23sJ+wwGU+SG9Uvfb/+KS1Q2RU4g=)
4: ijeoYWWuQU7RZMBbxRTbMcXGHJ0.roa (hash: EhlVkFVVdh4wazceOuNOkG+gmIkWhBrp+b57IZ5gdpU=)
5: k1igTi7iZQMlav5Y7S_wTES9NGE.roa (hash: reAmBAdhL4k6jWeenp5pL/cImyoZKtn+193ineXgFP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:cd:6f:dc:1d:74:ee:eb:22:0a:9b:95:c9:dc:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Validity
Not Before: Nov 5 01:00:45 2025 GMT
Not After : Nov 6 01:00:45 2025 GMT
Subject: CN=57dcbc498a122edc4dc5cb2889fb8a5220b894e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:13:4a:ad:f7:24:99:93:34:4b:9d:29:82:a4:
43:39:c3:31:9b:96:eb:53:21:93:ca:66:0f:a5:20:
51:11:ce:ff:b4:4d:85:45:d0:4c:b4:17:b9:45:f0:
bf:72:59:11:20:0a:d6:a8:14:93:92:cf:a0:08:f5:
b7:4e:68:3f:02:50:7e:bf:92:82:69:78:ca:2c:4f:
32:1a:06:3e:e5:68:01:bd:21:d8:87:42:eb:f1:8a:
b5:e5:51:99:2f:cb:33:f3:a6:f0:4d:bf:aa:e0:bd:
15:cd:1d:14:4f:5c:67:61:a1:d8:dc:f1:21:f8:42:
3d:18:b5:95:78:14:fe:92:53:6c:9d:41:09:ce:b6:
13:35:28:31:6a:e3:ae:ee:50:82:31:44:e7:7f:ac:
44:1f:8f:ca:97:33:f4:17:94:a6:6f:8f:63:3c:fe:
57:a3:e2:71:84:97:01:71:3d:59:4b:38:b6:0e:c4:
cc:a7:70:a7:d3:f8:dc:91:6f:2b:58:e9:6a:ae:40:
72:aa:c6:68:5f:57:00:a8:e2:3c:66:1c:1e:a3:68:
8d:35:0e:ad:f6:1f:f5:3d:73:a1:9d:e4:9d:c2:36:
c2:1d:d5:f5:bd:78:a2:d5:97:36:03:fb:c5:e5:fd:
c4:c1:e4:bc:f9:84:56:96:80:7b:4b:a7:1d:c2:6d:
46:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DC:BC:49:8A:12:2E:DC:4D:C5:CB:28:89:FB:8A:52:20:B8:94:E4
X509v3 Authority Key Identifier:
keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:f9:24:aa:6b:15:f4:fe:f3:f3:ea:af:59:ea:0d:aa:9a:f6:
a6:6d:95:e8:ee:6b:90:58:7a:91:d4:72:c7:5f:cf:2d:79:f3:
4d:e7:86:88:fc:24:55:63:de:97:4f:8f:59:65:4f:bf:72:7e:
ff:de:b6:0d:78:d9:e4:fc:c4:23:70:3a:dc:f7:af:a8:9d:32:
3d:58:79:04:cd:f1:d0:ff:40:1c:c5:b3:d6:cf:ca:c6:56:40:
18:22:82:d2:24:f5:d9:e0:27:ae:44:f2:e0:5b:86:5d:ab:45:
c5:76:35:a1:07:75:8e:1b:2c:d2:cc:22:e7:a0:f9:09:e2:80:
ab:73:c8:de:d1:1c:56:9c:a1:1e:26:e8:6d:26:af:0b:9d:ce:
e8:8e:d5:7d:12:36:1e:2c:48:2d:0d:d0:50:85:41:7b:b0:64:
8d:13:97:23:92:d0:c0:03:f0:ac:94:90:91:eb:fa:f9:68:13:
42:4f:e8:30:a5:5f:ef:f3:4a:70:0d:81:d4:1d:6e:aa:8a:2b:
68:84:09:40:12:73:65:e2:74:e5:87:5e:0f:a9:74:fe:50:83:
7c:e3:a3:1c:e9:55:e3:8e:8a:ee:1d:dd:08:aa:5a:36:94:32:
40:ea:02:57:6b:0e:6e:73:9d:ef:0d:2a:32:02:84:13:67:d7:
b1:44:95:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:34:57 2025 by rpki-client