Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.mft
File: BswqJrMawkvFKV0kqOEwcfL_DWE.mft (raw, json)
Hash identifier: 7Hz7UDPB6yMthDeT5+CFrm4qqaOkW7yvnZboXObu9So=
Subject key identifier: 70:67:51:78:7B:96:9C:42:87:A6:10:2B:48:2F:95:0E:BD:82:46:BE
Authority key identifier: 06:CC:2A:26:B3:1A:C2:4B:C5:29:5D:24:A8:E1:30:71:F2:FF:0D:61
Certificate issuer: /CN=06cc2a26b31ac24bc5295d24a8e13071f2ff0d61
Certificate serial: 0198737455F16878B4BA56C0E0B9E1A9B72C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BswqJrMawkvFKV0kqOEwcfL_DWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.mft
Manifest number: 03AA
Signing time: Mon 04 Aug 2025 05:01:00 +0000
Manifest this update: Mon 04 Aug 2025 05:01:00 +0000
Manifest next update: Tue 05 Aug 2025 05:01:00 +0000
Files and hashes: 1: 89qLG1K07SoB9KnzvBmCV6QFSkI.roa (hash: +0xILp3yJ9G90xUu2Ml6EPqNrjSk0rDe+FJWrTAlYPw=)
2: ACSoxiVrVB6X7y6ozamLSgqazeo.roa (hash: y8VDA0ULLPWCFXTUghHVruXhGvY9U4iQhON3EqU1Hso=)
3: BswqJrMawkvFKV0kqOEwcfL_DWE.crl (hash: /79ebt6sdPDhMAPxFe4gCM/VLjKtPEo2WxIO1q6rjk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BswqJrMawkvFKV0kqOEwcfL_DWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:55:f1:68:78:b4:ba:56:c0:e0:b9:e1:a9:b7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06cc2a26b31ac24bc5295d24a8e13071f2ff0d61
Validity
Not Before: Aug 4 05:01:00 2025 GMT
Not After : Aug 5 05:01:00 2025 GMT
Subject: CN=706751787b969c4287a6102b482f950ebd8246be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:91:64:5f:21:d3:43:a3:60:0e:52:a2:4c:6a:
8d:ad:22:fe:8b:1e:a8:27:84:c7:12:a7:8d:d6:d3:
eb:2f:f4:d7:8b:21:46:7e:fc:b7:76:43:e4:c6:bf:
fc:53:8a:c0:57:3d:1b:04:d9:04:df:92:76:f0:a9:
7b:bb:a3:61:0b:81:f8:2f:86:4b:aa:c5:bc:e5:4f:
04:86:df:13:0b:f4:f4:d8:c2:ac:bf:64:63:01:f5:
52:9f:e4:c0:3f:64:8e:c5:57:ea:84:c0:bf:80:44:
04:4d:9b:38:5f:a0:a0:1a:29:bb:65:34:ed:e2:13:
76:5a:cf:a0:c3:77:c9:d6:f5:42:a8:17:4f:33:26:
dc:06:ce:ca:b0:d2:6a:41:a1:cc:08:b2:3a:2e:fa:
e6:0b:7d:cd:0c:6a:74:41:d8:e4:be:31:5c:7e:d1:
ad:ec:fe:0f:26:59:38:85:99:33:77:74:3b:17:7c:
42:d8:89:37:c0:f1:03:62:45:95:42:4b:2a:30:a8:
30:d7:20:a5:85:f7:8a:e2:69:e6:9b:64:4d:11:77:
cc:41:ce:ab:af:6c:a9:ad:fd:0c:da:b4:1c:1f:55:
6d:94:af:76:04:88:88:07:63:76:f6:dc:b6:83:2d:
4b:3c:24:11:c6:0f:2e:b9:51:e9:6c:44:d6:63:4c:
0f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:67:51:78:7B:96:9C:42:87:A6:10:2B:48:2F:95:0E:BD:82:46:BE
X509v3 Authority Key Identifier:
keyid:06:CC:2A:26:B3:1A:C2:4B:C5:29:5D:24:A8:E1:30:71:F2:FF:0D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BswqJrMawkvFKV0kqOEwcfL_DWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:de:2a:5f:6d:40:c8:ae:8f:6c:74:61:87:82:fb:08:75:e0:
86:f3:00:0b:2a:c7:2e:6e:e8:0f:35:50:b5:b6:d4:46:73:40:
f5:8c:59:32:09:44:5e:4f:bd:60:f1:03:bd:77:02:5f:b4:31:
61:ce:7a:3e:a7:b7:4d:2a:af:b0:76:46:b3:79:42:d8:0b:e0:
57:6f:af:2d:8d:93:26:35:1d:5f:bb:f3:5c:fb:75:74:0b:f9:
ad:cb:a1:67:16:38:f4:0f:9f:43:b0:cd:72:50:d1:d0:c1:62:
08:a5:ae:18:89:33:9b:fb:ad:03:72:74:12:7b:c1:3e:9c:b6:
dd:14:cc:b1:b3:53:46:06:10:82:7f:4e:d5:2b:d6:08:2c:1e:
7e:7b:c8:f1:b6:2e:45:d5:39:32:0b:c8:03:88:04:a1:91:6a:
42:37:7d:b0:71:8f:4d:e1:e8:43:12:e0:d0:40:d1:03:23:11:
9c:69:fa:ca:03:e0:8a:10:3e:2d:18:b1:1f:eb:6c:60:ee:bb:
9f:57:98:d7:d1:bd:07:8c:ca:c1:31:7d:98:03:12:df:44:81:
27:38:dc:99:da:f1:58:1c:23:f9:b2:45:d1:d0:c3:bb:8e:e3:
d2:a6:27:eb:29:f2:d3:78:2e:c6:b9:b4:74:0b:cf:73:70:04:
e7:e3:d3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:31 2025 by rpki-client