Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
File: BWRw2Bso3FKOXyjbC7X20pRhGmU.mft (raw, json)
Hash identifier: fGV97X0+yUcEjZmw71i37LDdl8VYlDLnVob//W8VKKE=
Subject key identifier: DA:4E:4B:5D:6E:86:D3:E4:63:0D:2F:D7:7C:2B:75:CB:74:F2:81:58
Authority key identifier: 05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65
Certificate issuer: /CN=056470d81b28dc528e5f28db0bb5f6d294611a65
Certificate serial: 019874876C785C473856EF5B551F2A2F7619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
Manifest number: 1330
Signing time: Mon 04 Aug 2025 10:01:28 +0000
Manifest this update: Mon 04 Aug 2025 10:01:28 +0000
Manifest next update: Tue 05 Aug 2025 10:01:28 +0000
Files and hashes: 1: BWRw2Bso3FKOXyjbC7X20pRhGmU.crl (hash: DtDzs4sARscxYoM4CZW1a2jD8x2zZQqvYQ/NOqR0ZaE=)
2: kqmUwVdGk1LkjvL-upU9QhBrTk8.roa (hash: ljaTHQhywA3lYtK1TIsMdme1hiJbfaCWwfGaCBoPJAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:87:6c:78:5c:47:38:56:ef:5b:55:1f:2a:2f:76:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056470d81b28dc528e5f28db0bb5f6d294611a65
Validity
Not Before: Aug 4 10:01:28 2025 GMT
Not After : Aug 5 10:01:28 2025 GMT
Subject: CN=da4e4b5d6e86d3e4630d2fd77c2b75cb74f28158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:de:6a:e6:d2:c0:98:59:26:94:e2:bd:8b:16:
2a:20:d0:54:f6:da:33:41:bd:4c:49:d3:df:ff:d7:
6e:ce:e0:48:0b:95:ae:ab:51:8c:57:c6:fe:c6:1c:
c5:10:e8:28:8f:df:72:13:46:9b:de:08:1d:06:6d:
63:3f:7b:27:d4:ab:0a:8d:e5:bb:90:5f:bd:a3:dc:
26:e3:25:a2:b7:cd:14:e4:48:a3:39:56:be:55:f1:
b7:00:01:43:dd:d8:a4:71:b5:62:b4:51:b0:84:0f:
55:d1:c6:70:96:4f:c0:34:d0:89:da:79:b2:4a:db:
14:13:08:7a:b2:28:4f:b1:fb:2f:01:f1:5f:a7:5d:
11:54:66:ab:22:97:13:a2:7e:06:69:1e:91:63:b6:
13:2e:32:13:2c:91:63:e3:3b:48:d0:fb:b3:a0:ec:
f2:f0:a0:0f:1a:cf:47:05:ab:b4:82:95:79:a6:af:
e1:83:71:e3:43:ec:01:86:80:7f:d9:69:91:61:2a:
be:3f:b2:60:15:ef:0a:e2:44:09:82:4b:9a:3e:a8:
07:05:b2:18:ae:d5:fe:e3:a6:6a:31:46:a5:3d:8a:
18:56:84:fd:49:08:0d:5c:1e:35:8f:82:cc:3f:4b:
2f:57:40:c6:1e:a7:21:9e:7b:fd:18:b8:54:1e:96:
94:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4E:4B:5D:6E:86:D3:E4:63:0D:2F:D7:7C:2B:75:CB:74:F2:81:58
X509v3 Authority Key Identifier:
keyid:05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:80:fb:fc:36:3a:1c:a8:08:96:8f:cd:8f:a0:e1:98:24:3d:
73:53:4a:44:ca:9e:17:04:1a:0e:ab:59:a5:09:7b:a4:56:a4:
6e:39:9a:9d:af:17:5d:01:69:8e:1a:41:95:74:92:19:94:39:
2a:31:74:b1:0a:68:99:c3:50:7f:67:8b:74:02:81:ff:53:af:
41:1b:73:4e:4b:34:15:e5:a7:e6:b1:be:df:ba:2a:56:2a:d4:
40:b5:70:00:be:4d:83:a1:83:9a:f2:fb:cc:7b:6b:f0:46:67:
86:53:58:fc:ab:9c:b9:9d:84:88:84:fa:36:a9:e9:33:78:28:
bd:ec:49:92:0f:3a:be:87:69:bb:6d:63:5f:0b:51:ff:f5:15:
b9:1f:a1:57:37:16:43:9c:ff:8f:47:72:05:2e:92:25:b4:0b:
01:03:f5:db:1c:52:79:32:33:be:af:3d:e1:24:78:d5:c3:15:
1b:62:df:72:ef:7a:a9:fa:fc:21:52:bf:70:e7:cf:ab:d4:5e:
b0:12:ba:33:41:ee:f7:a2:c2:16:99:79:26:e4:d7:be:cc:22:
27:b3:b9:5f:f0:92:4f:8d:4d:00:d0:0a:32:91:38:f8:2e:f3:
81:86:b8:5e:97:ef:cc:74:96:87:f3:29:f6:78:38:bf:ad:6e:
bd:53:b7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:34 2025 by rpki-client