Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.mft
File: BswqJrMawkvFKV0kqOEwcfL_DWE.mft (raw, json)
Hash identifier: dBeDrNJtxC0yB31agfA/o8qnC0z2pctZK8KvPUxqQmA=
Subject key identifier: 2A:34:A7:1D:CE:97:58:2D:13:6F:F5:CE:B2:5D:7B:81:90:61:21:59
Authority key identifier: 06:CC:2A:26:B3:1A:C2:4B:C5:29:5D:24:A8:E1:30:71:F2:FF:0D:61
Certificate issuer: /CN=06cc2a26b31ac24bc5295d24a8e13071f2ff0d61
Certificate serial: 019A507515F47F83EC6A09A9F35486296DA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BswqJrMawkvFKV0kqOEwcfL_DWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.mft
Manifest number: 04A1
Signing time: Tue 04 Nov 2025 20:00:41 +0000
Manifest this update: Tue 04 Nov 2025 20:00:41 +0000
Manifest next update: Wed 05 Nov 2025 20:00:41 +0000
Files and hashes: 1: 89qLG1K07SoB9KnzvBmCV6QFSkI.roa (hash: +0xILp3yJ9G90xUu2Ml6EPqNrjSk0rDe+FJWrTAlYPw=)
2: ACSoxiVrVB6X7y6ozamLSgqazeo.roa (hash: y8VDA0ULLPWCFXTUghHVruXhGvY9U4iQhON3EqU1Hso=)
3: BswqJrMawkvFKV0kqOEwcfL_DWE.crl (hash: uxPp+fH/ilWu4LsdIc+iO6iWfD/oRms1eud7x+bbUEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BswqJrMawkvFKV0kqOEwcfL_DWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:15:f4:7f:83:ec:6a:09:a9:f3:54:86:29:6d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06cc2a26b31ac24bc5295d24a8e13071f2ff0d61
Validity
Not Before: Nov 4 20:00:41 2025 GMT
Not After : Nov 5 20:00:41 2025 GMT
Subject: CN=2a34a71dce97582d136ff5ceb25d7b8190612159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:27:23:d7:92:88:00:9b:6e:d8:db:65:d6:90:
bb:20:72:b4:10:7e:07:4c:00:8b:91:f7:db:bc:57:
94:49:de:03:b4:8e:ab:5b:91:88:3d:cd:1a:89:56:
73:73:b6:e3:c8:a3:e5:7a:bf:2d:5d:1b:0f:8b:dd:
fd:34:86:fa:86:bf:49:53:d2:a1:3c:9c:23:a7:2c:
83:bf:a1:01:40:d8:4a:a9:10:a1:5e:aa:75:ab:61:
fb:80:3c:81:7d:36:d5:3b:85:6d:77:aa:d4:b8:a4:
af:85:e1:fa:5e:ec:9f:d0:0e:4f:4d:25:1c:42:50:
fc:4f:ab:dd:3e:20:0f:1c:ea:d5:81:73:8d:f2:8d:
65:92:12:72:ae:59:e4:a8:00:25:09:3a:47:e0:9a:
06:43:1f:b0:66:51:60:e7:77:ce:64:0d:68:f6:1a:
9f:d4:db:e8:b8:72:72:a4:cc:de:f1:63:e7:39:58:
1d:d4:a2:55:96:a3:ed:29:15:45:1b:77:26:c1:0e:
05:09:28:a3:ea:da:0f:9b:03:d4:a8:16:bc:ad:ef:
96:35:80:bd:ab:ee:34:ae:42:60:83:30:d8:d1:13:
db:9f:d4:8f:e4:14:40:0c:d8:60:a4:81:5e:de:e7:
3d:7d:c4:91:af:94:01:20:9e:f7:80:79:7e:41:ba:
1b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:34:A7:1D:CE:97:58:2D:13:6F:F5:CE:B2:5D:7B:81:90:61:21:59
X509v3 Authority Key Identifier:
keyid:06:CC:2A:26:B3:1A:C2:4B:C5:29:5D:24:A8:E1:30:71:F2:FF:0D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BswqJrMawkvFKV0kqOEwcfL_DWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:8c:02:e5:14:f2:be:1e:f9:da:85:9d:a2:12:2e:60:b8:c0:
1a:c2:e5:5f:64:b1:e1:b5:4c:05:71:b3:d9:ec:20:6e:80:b6:
83:89:b3:37:71:23:d1:9e:5e:a9:0b:84:6e:fe:f7:41:45:d4:
6f:5d:05:30:93:d6:26:c4:87:28:74:0c:c9:56:e2:35:ff:db:
99:76:d1:d8:0a:f0:26:de:47:0d:89:2e:0d:19:1c:7c:ba:48:
ee:d3:47:41:da:19:e5:7f:0e:2a:7e:91:89:86:19:12:1c:4b:
dc:8d:7c:4b:59:05:80:12:5f:3e:92:65:71:8f:c2:6b:44:dc:
c6:84:fc:cd:ca:12:ff:d0:0d:60:67:45:c1:1a:4c:5d:cb:56:
c2:01:5d:0e:a7:49:8e:f1:49:45:5a:93:76:0b:90:3e:0e:de:
63:f2:63:35:50:62:36:ae:31:4a:ef:46:77:b9:3e:24:26:b5:
13:5f:96:1c:08:0c:30:e9:86:a9:2f:28:43:f5:c3:e0:52:8d:
09:d1:f7:7c:16:ea:c9:23:35:fa:8c:17:79:50:1f:42:d2:21:
fe:76:39:1b:95:6a:46:59:c1:6a:bf:ac:e9:fd:99:f6:c6:62:
cf:95:e7:44:42:a2:e0:e7:25:4a:76:2b:89:25:d4:13:50:ac:
d4:c0:cf:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:34:23 2025 by rpki-client