Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
File: BWRw2Bso3FKOXyjbC7X20pRhGmU.mft (raw, json)
Hash identifier: 9KcgKQE7u+gvT8oFV3BF+yykggRVk859opnB2wkEj5Y=
Subject key identifier: D1:AE:91:A5:A5:8E:18:B1:A1:6B:9A:F8:B5:04:3C:14:52:91:32:79
Authority key identifier: 05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65
Certificate issuer: /CN=056470d81b28dc528e5f28db0bb5f6d294611a65
Certificate serial: 019A4F993511B2B1CA740E61C7614F9DE2F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
Manifest number: 1426
Signing time: Tue 04 Nov 2025 16:00:31 +0000
Manifest this update: Tue 04 Nov 2025 16:00:31 +0000
Manifest next update: Wed 05 Nov 2025 16:00:31 +0000
Files and hashes: 1: BWRw2Bso3FKOXyjbC7X20pRhGmU.crl (hash: LTXb5kDFfqRHsFg9vIQuKHVoEb725Fa8JnRgpcJDEWU=)
2: kqmUwVdGk1LkjvL-upU9QhBrTk8.roa (hash: ljaTHQhywA3lYtK1TIsMdme1hiJbfaCWwfGaCBoPJAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:35:11:b2:b1:ca:74:0e:61:c7:61:4f:9d:e2:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056470d81b28dc528e5f28db0bb5f6d294611a65
Validity
Not Before: Nov 4 16:00:31 2025 GMT
Not After : Nov 5 16:00:31 2025 GMT
Subject: CN=d1ae91a5a58e18b1a16b9af8b5043c1452913279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:92:98:d2:af:11:a4:e0:4c:76:fc:11:48:7f:
ca:9a:85:1b:01:da:b0:25:fd:ce:47:bf:0d:e4:e4:
b4:fd:d6:65:f0:26:63:7f:83:19:a3:70:c5:c1:a0:
1e:e1:67:e6:ad:a6:56:b9:a9:59:a7:ff:e3:84:e5:
7f:7c:8b:50:11:d0:55:c1:8c:ce:7b:5b:c0:a8:b1:
1b:08:7c:9b:e0:2e:df:e0:89:2e:2f:d7:d3:43:15:
97:93:3b:57:5c:5d:ec:54:65:b9:02:de:7b:73:ba:
12:9c:49:e9:79:cc:59:de:c2:93:18:9f:cd:7a:af:
b7:f9:11:03:17:19:56:40:d1:b1:e7:95:62:e8:ef:
28:f9:51:24:a1:30:67:47:62:42:69:8c:e9:4f:cd:
a1:d4:13:6e:3c:5c:91:83:c4:45:70:95:a1:27:b0:
f6:c1:04:41:46:10:93:80:02:38:2e:f5:38:c8:cc:
68:26:7c:d6:12:ad:4c:8c:36:44:fe:d8:32:0f:87:
b3:e5:ef:bc:77:ea:68:fd:e6:74:41:64:56:4d:e8:
d8:71:28:0d:4d:54:07:a7:41:49:c9:a9:dc:71:e0:
0b:39:01:d5:05:34:aa:17:d0:dc:22:9d:c6:29:6c:
23:27:82:90:9f:13:aa:64:e5:31:d8:53:7c:6a:39:
79:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AE:91:A5:A5:8E:18:B1:A1:6B:9A:F8:B5:04:3C:14:52:91:32:79
X509v3 Authority Key Identifier:
keyid:05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e0:d0:a9:ae:6a:1f:31:59:26:2e:fc:c6:de:1c:1c:03:24:
1b:60:1a:37:4d:ff:dd:57:91:63:2e:84:7f:dc:69:b4:a8:18:
50:f5:93:e4:14:90:8d:24:dc:a1:31:ff:48:90:e5:53:47:c3:
dd:1b:2b:72:5d:98:f0:ec:6e:a2:ab:c8:97:85:9c:1b:82:bd:
0c:ac:22:bd:02:99:cf:b8:03:79:1f:14:48:77:b3:b6:b0:f2:
00:b8:81:dd:d0:b8:7b:49:74:88:b1:d6:4a:25:f9:94:d0:e9:
cc:f2:63:12:57:a4:90:33:16:a9:d3:96:ad:00:5c:99:9d:cc:
c7:a1:8e:01:da:31:cc:4d:1c:a6:27:8c:16:59:ad:65:2b:43:
ff:b2:e3:b9:95:f8:4e:21:56:36:a4:c6:8b:20:92:00:8b:e8:
16:2b:14:71:91:d8:88:e9:24:0e:70:00:08:11:f1:fc:9d:0b:
ea:a2:54:fe:8e:6f:50:68:0e:7c:66:ae:be:b1:b0:6b:7f:46:
47:f4:e8:13:30:ad:38:06:de:70:7e:da:1d:a4:e4:8f:f0:57:
51:5a:b3:4a:64:c0:f7:2d:77:9d:32:f6:43:cc:20:ca:16:56:
b0:eb:c9:de:17:84:16:19:18:63:c8:f6:9d:84:9d:8d:e5:8e:
5c:de:a0:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmTURsrHKdA5hx2FPneL4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NjQ3MGQ4MWIyOGRjNTI4ZTVmMjhkYjBiYjVmNmQyOTQ2
MTFhNjUwHhcNMjUxMTA0MTYwMDMxWhcNMjUxMTA1MTYwMDMxWjAzMTEwLwYDVQQD
EyhkMWFlOTFhNWE1OGUxOGIxYTE2YjlhZjhiNTA0M2MxNDUyOTEzMjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpKY0q8RpOBMdvwRSH/KmoUbAdqw
Jf3OR78N5OS0/dZl8CZjf4MZo3DFwaAe4WfmraZWualZp//jhOV/fItQEdBVwYzO
e1vAqLEbCHyb4C7f4IkuL9fTQxWXkztXXF3sVGW5At57c7oSnEnpecxZ3sKTGJ/N
eq+3+REDFxlWQNGx55Vi6O8o+VEkoTBnR2JCaYzpT82h1BNuPFyRg8RFcJWhJ7D2
wQRBRhCTgAI4LvU4yMxoJnzWEq1MjDZE/tgyD4ez5e+8d+po/eZ0QWRWTejYcSgN
TVQHp0FJyancceALOQHVBTSqF9DcIp3GKWwjJ4KQnxOqZOUx2FN8ajl5AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGukaWljhixoWua+LUEPBRSkTJ5MB8GA1UdIwQY
MBaAFAVkcNgbKNxSjl8o2wu19tKUYRplMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQldSdzJCc28zRktPWHlqYkM3WDIwcFJoR21VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xOTE2ZTEtYWQ5Yy00YjQwLWE5YjAt
OTNhODgyMjFkZWYyLzEvQldSdzJCc28zRktPWHlqYkM3WDIwcFJoR21VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8xOTE2ZTEtYWQ5Yy00YjQwLWE5YjAtOTNhODgyMjFkZWYy
LzEvQldSdzJCc28zRktPWHlqYkM3WDIwcFJoR21VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABeDQqa5q
HzFZJi78xt4cHAMkG2AaN03/3VeRYy6Ef9xptKgYUPWT5BSQjSTcoTH/SJDlU0fD
3Rsrcl2Y8OxuoqvIl4WcG4K9DKwivQKZz7gDeR8USHeztrDyALiB3dC4e0l0iLHW
SiX5lNDpzPJjElekkDMWqdOWrQBcmZ3Mx6GOAdoxzE0cpieMFlmtZStD/7LjuZX4
TiFWNqTGiyCSAIvoFisUcZHYiOkkDnAACBHx/J0L6qJU/o5vUGgOfGauvrGwa39G
R/ToEzCtOAbecH7aHaTkj/BXUVqzSmTA9y13nTL2Q8wgyhZWsOvJ3heEFhkYY8j2
nYSdjeWOXN6gTg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:32:41 2025 by rpki-client