Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
File: BwkPumY7Byu1TMfUnoigOAN0y24.mft (raw, json)
Hash identifier: Ao9apU90AWh0SKh+qddrDIkfI8tV230a/YxKQzr0YBA=
Subject key identifier: F1:55:2F:9B:3E:C6:46:62:0D:0A:B0:E8:6A:78:CE:B5:AE:F4:97:60
Authority key identifier: 07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
Certificate issuer: /CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Certificate serial: 019894B7C62D7E4123D2D9BAE773C97348BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
Manifest number: 1626
Signing time: Sun 10 Aug 2025 16:02:08 +0000
Manifest this update: Sun 10 Aug 2025 16:02:08 +0000
Manifest next update: Mon 11 Aug 2025 16:02:08 +0000
Files and hashes: 1: BwkPumY7Byu1TMfUnoigOAN0y24.crl (hash: dziHpuoKWMUnHZUPmaWiNGriXa/xfax2y3aMdRYWY0A=)
2: NQNN2zI--5W9phAw1FPsrLGEYwA.roa (hash: vTr80Rx2MWq5UoQZbNWzT5PuHgBwID0hr0ao7hRy9dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b7:c6:2d:7e:41:23:d2:d9:ba:e7:73:c9:73:48:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Validity
Not Before: Aug 10 16:02:08 2025 GMT
Not After : Aug 11 16:02:08 2025 GMT
Subject: CN=f1552f9b3ec646620d0ab0e86a78ceb5aef49760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:92:c3:01:96:d5:4b:2a:3d:19:84:99:e7:ea:
67:1b:59:3f:c8:76:87:53:14:d3:51:89:19:3e:46:
01:fd:b2:3d:6d:b2:76:44:ba:b9:2d:69:43:cd:9b:
a4:b5:d6:5c:58:6c:43:66:ed:fc:1e:b6:f6:ae:20:
bd:80:0e:8b:a8:31:32:a7:4f:e9:2f:a1:e3:38:5c:
ab:a4:24:e2:a5:72:d5:d3:87:cb:05:37:15:e8:76:
86:c3:76:4b:0a:e1:b5:77:09:3e:7e:ec:c1:bd:2b:
43:ec:35:18:3a:e4:0f:eb:15:20:d8:49:88:dd:c7:
ad:dd:2b:69:9b:27:3e:bf:8c:bd:ec:98:f9:81:86:
36:69:65:ef:b3:da:e3:b5:13:38:69:2b:74:55:7e:
0c:72:b3:a0:9e:e0:9b:63:40:ab:76:33:e9:bf:6a:
be:5a:50:dd:79:f2:50:18:dc:d4:80:64:11:fc:fd:
3b:67:ec:0e:ed:25:d0:63:65:8e:a0:49:9b:b1:8b:
ab:7e:72:0b:3c:44:d5:50:31:9e:02:e2:95:63:5a:
eb:7e:ae:80:15:89:02:90:c0:96:5b:37:e3:8b:28:
d3:c3:b7:a9:32:35:f4:1d:af:ed:86:e2:ef:aa:3d:
6a:90:37:34:28:1e:52:36:08:28:dc:bb:5f:38:82:
88:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:55:2F:9B:3E:C6:46:62:0D:0A:B0:E8:6A:78:CE:B5:AE:F4:97:60
X509v3 Authority Key Identifier:
keyid:07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:51:12:ed:27:76:b0:75:64:3f:d8:f4:d0:07:6c:83:ac:9a:
40:cd:6f:3a:0c:f2:62:12:11:44:ed:87:2c:28:09:2e:00:4a:
79:ff:23:2d:c6:14:ef:04:ba:8f:96:96:59:7b:e5:ed:45:4e:
a1:3a:fc:6e:65:a9:44:2c:43:9d:1f:f5:03:67:e7:be:f8:ca:
6d:86:33:23:b8:f9:62:c1:c8:5d:04:90:69:57:2c:8a:eb:78:
8f:29:e1:e4:2a:08:1b:df:e0:84:52:fe:28:ec:17:69:e5:65:
e2:7d:aa:93:29:40:6d:86:44:18:7e:2b:30:1c:3f:b5:d3:13:
e4:5d:20:d5:4f:34:fc:22:2c:01:f2:d4:78:7c:2d:07:aa:24:
11:fb:63:02:f7:8e:bf:e5:cc:87:4c:d7:99:32:dd:89:2c:96:
4f:e4:b6:24:c6:a7:a0:56:c0:b7:05:ce:5c:c3:b9:8c:0c:13:
e1:d2:af:16:a9:d3:5d:a2:d2:a9:77:65:de:d0:53:1a:e4:bb:
9b:d1:e6:08:e1:4d:5d:26:9b:1f:01:41:61:16:58:30:fe:ff:
43:02:8c:a4:d2:f8:fb:99:de:33:0e:6f:45:28:aa:36:a0:7c:
7f:e7:8d:05:46:10:35:36:f4:05:9a:9e:ea:ce:bc:a9:67:13:
19:ff:02:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:11:43 2025 by rpki-client