Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
File: bwyaERer1S7IA2tPN4ZE-nekuKc.mft (raw, json)
Hash identifier: VwGY8c2MFeMI0ab1NR+RRlKTV/tpe9I89M6VWSlZZEo=
Subject key identifier: 52:FE:21:4C:48:27:79:BE:A0:36:2D:BA:27:2E:F2:F2:71:99:53:D3
Authority key identifier: 6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7
Certificate issuer: /CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
Certificate serial: 019872CF537701E3B93CD8116BC2BDBCA6ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
Manifest number: 06FD
Signing time: Mon 04 Aug 2025 02:00:46 +0000
Manifest this update: Mon 04 Aug 2025 02:00:46 +0000
Manifest next update: Tue 05 Aug 2025 02:00:46 +0000
Files and hashes: 1: 5YbQ1lEYRu1FDVmUe9WtFEdIQq8.roa (hash: LLdAnT3T14ZMA8Ruwq6pBGBMT1LXc953lNErRWyZvjE=)
2: bwyaERer1S7IA2tPN4ZE-nekuKc.crl (hash: F2riSFFpQkljVuWCymoX9Buojgt6NeiStKvsGZhJ5W8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:53:77:01:e3:b9:3c:d8:11:6b:c2:bd:bc:a6:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
Validity
Not Before: Aug 4 02:00:46 2025 GMT
Not After : Aug 5 02:00:46 2025 GMT
Subject: CN=52fe214c482779bea0362dba272ef2f2719953d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:dd:df:94:fc:0d:5c:bb:30:33:9a:aa:5e:c2:
d3:03:e0:cc:bc:40:72:7e:5e:50:6f:e4:25:0c:c5:
58:f5:ca:45:96:89:79:ac:8b:be:d6:fc:6b:1b:54:
a4:2f:3a:61:24:48:97:9a:02:60:22:ee:85:50:00:
38:0c:b1:59:83:27:bd:03:65:d9:7f:d4:f0:54:e9:
0f:82:6e:5b:53:04:19:44:82:f9:06:19:0b:15:00:
1d:e2:8a:8b:14:c6:af:ec:5b:33:fd:a8:08:67:54:
4a:24:e5:ce:90:47:c7:62:48:65:cb:08:65:2c:f8:
9c:89:fb:d8:e3:0c:86:d2:b3:24:34:e2:25:ec:3c:
0d:48:0d:1f:02:f2:7b:b2:8e:ef:8d:51:d0:95:b5:
b8:9f:0f:7d:6b:83:cd:54:f2:35:c9:d9:4f:12:0f:
fc:05:0a:55:f0:23:de:25:71:f9:c0:4d:5b:55:38:
03:24:c2:25:63:17:93:33:74:bb:55:63:ac:dc:06:
ed:2a:f4:35:1f:cb:78:9a:4e:c7:ce:75:e5:ba:2e:
dd:4c:21:26:ab:ac:64:a1:9e:9f:cb:d2:0a:71:c2:
47:ea:5e:28:f5:ed:93:93:d9:ef:b1:f6:6b:72:3e:
b3:f3:e0:8c:00:7f:29:f0:f2:28:04:90:f9:23:96:
26:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FE:21:4C:48:27:79:BE:A0:36:2D:BA:27:2E:F2:F2:71:99:53:D3
X509v3 Authority Key Identifier:
keyid:6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:30:be:75:10:93:be:e5:20:92:01:f0:bd:9b:8a:29:98:c2:
4b:68:1f:7f:f1:e8:3d:46:b5:bc:3f:02:bc:1d:3a:c9:c8:5f:
3c:12:69:48:d0:30:1e:44:f7:d7:70:a8:08:b8:fd:d3:0f:b3:
40:04:a9:72:17:04:8f:c3:f7:b4:b8:f4:d1:97:4a:df:2e:76:
91:81:6f:0c:5a:8c:93:a0:54:44:34:22:65:9a:ae:1b:0e:b5:
2d:dd:82:7b:f2:45:3f:9d:3c:67:55:f6:ae:ad:bb:9f:98:87:
0e:d7:86:42:20:b0:e8:a8:b3:1a:82:b5:eb:bb:63:16:1a:bf:
f3:ab:8e:ea:cb:36:89:15:74:0e:61:8b:ba:c9:0e:9f:e7:50:
a9:bb:97:ab:26:a1:71:45:94:4a:ca:73:78:5f:e5:dd:e2:49:
1d:59:6d:a1:63:24:47:59:e3:21:fc:41:90:d1:0d:19:a7:d3:
dc:c5:11:98:7a:b9:be:3d:a4:22:33:6a:2a:5d:17:7e:c0:3d:
5d:35:7d:e7:34:7d:f4:7b:c1:13:12:56:a8:b6:c5:e7:f5:31:
7a:fb:55:6c:02:ba:af:cd:ef:7e:66:a0:c1:da:d6:b8:e1:e7:
b0:fc:8c:a2:39:4e:82:d6:c2:73:77:9f:93:5b:96:b6:48:53:
4a:a5:a9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:23 2025 by rpki-client