Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
File: BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft (raw, json)
Hash identifier: ZfBhlAOhoj3jqRUb6yuBGtfK/1iQmM6mAM0P8fLn64E=
Subject key identifier: 44:BA:A4:1F:73:E0:00:76:55:70:E6:7B:19:52:11:8D:0F:31:62:43
Authority key identifier: 05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
Certificate issuer: /CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Certificate serial: 019A51873382D0E97A494AC0F4363B90C044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 01:00:06 +0000
Manifest this update: Wed 05 Nov 2025 01:00:06 +0000
Manifest next update: Thu 06 Nov 2025 01:00:06 +0000
Files and hashes: 1: BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl (hash: UZ8fEs6vAsjP7drIvOegscTUo+J8Y1ITJVyjgGTOVgk=)
2: ddJdWwJ-x_kxknxp8wqmg5-PURw.roa (hash: /8Ho4F9DZAAaxfNKmXvihlaELQ9Ew+7q5ew0DKDsGRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:33:82:d0:e9:7a:49:4a:c0:f4:36:3b:90:c0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Validity
Not Before: Nov 5 01:00:06 2025 GMT
Not After : Nov 6 01:00:06 2025 GMT
Subject: CN=44baa41f73e000765570e67b1952118d0f316243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:46:fb:fd:0d:bc:9a:ea:a8:35:34:b7:5f:21:
d5:b3:7c:1a:51:f5:95:b3:2c:14:fd:bd:89:ca:f8:
a4:90:31:19:ff:47:6f:e8:04:18:ea:94:92:1d:c2:
a6:c8:11:11:b8:c7:4d:b3:a5:68:cd:35:46:b9:fd:
cb:76:c4:e7:55:64:c1:42:a5:92:9e:31:a8:3a:1c:
c7:e6:50:71:9a:62:ac:a8:06:a4:d2:58:96:6e:0d:
99:c7:9c:06:8b:52:79:24:ee:e4:96:47:cc:6f:ad:
66:12:e7:5c:c3:6e:9f:9a:8f:9a:8a:d8:dd:c7:b6:
79:93:b4:35:53:f6:24:ba:b6:e5:03:14:92:6a:cd:
3c:50:1f:7a:8b:d9:0b:5e:21:e4:fc:ba:84:94:76:
ce:72:f9:e3:cd:a3:56:e2:86:f6:7c:5e:f2:99:20:
2c:72:5c:b2:39:72:2d:3b:67:8c:b1:cd:9b:7f:9e:
80:ae:16:a5:6d:5f:6d:e3:b4:c7:6e:eb:3e:bc:93:
c3:f8:4d:8b:bf:22:ac:eb:54:21:bf:cb:1e:bd:e8:
19:e9:84:09:0d:70:63:44:6a:ee:cb:f3:bc:bf:30:
29:70:c8:c2:f0:fb:30:fd:f3:d0:ba:3f:7b:04:48:
b0:ac:f8:6b:b0:63:f1:a4:23:25:0b:f7:72:e0:45:
52:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BA:A4:1F:73:E0:00:76:55:70:E6:7B:19:52:11:8D:0F:31:62:43
X509v3 Authority Key Identifier:
keyid:05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:26:7d:e4:a9:ff:c2:32:a6:2a:8d:b9:2a:fb:2f:96:9a:13:
64:6d:ea:04:6a:c0:1e:71:07:db:3d:ef:cd:15:4b:8d:3e:13:
d2:70:9e:4f:a8:5a:9f:67:52:ff:1f:17:f7:8b:2e:3e:94:28:
74:eb:b0:4e:f0:96:26:a3:15:5f:f6:9b:62:39:c4:66:15:06:
ba:9e:07:22:a7:55:7a:49:be:f0:e8:82:43:00:d9:55:4e:64:
8d:ea:52:4f:ba:39:32:06:82:6e:0a:85:5a:77:51:51:32:2b:
54:4c:57:a6:76:46:96:3a:e3:77:65:9f:db:00:8c:6a:74:5c:
a4:6a:44:0a:bb:59:2e:6c:bd:79:ec:08:09:24:bc:3f:c8:f1:
32:72:e0:20:fb:1a:71:9b:d6:de:37:f2:da:ce:9d:2f:3b:eb:
36:02:b2:95:f7:88:eb:9a:60:ba:b5:60:2d:8e:e3:f8:1d:49:
f7:c5:2f:d3:3e:96:90:a7:b3:c0:32:8b:bc:b1:12:bb:5c:c2:
74:aa:af:9c:c6:ce:f9:94:c4:3e:30:f0:35:ee:c0:5c:29:00:
b7:52:af:e2:ec:24:6d:be:29:7d:12:87:67:d9:99:f5:8f:fd:
d2:95:1a:5e:ba:94:6f:42:b1:03:1b:0d:ca:62:33:7a:38:62:
91:7d:32:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:28:13 2025 by rpki-client