Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
File: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft (raw, json)
Hash identifier: CtvlQtnTPpwJisFaPrYUjpdCdbV8ltk3DH6RUV8L+Ig=
Subject key identifier: 54:96:AA:6F:74:9F:1A:65:36:98:B8:D8:0A:8F:29:BC:1B:60:9B:BB
Authority key identifier: 05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
Certificate issuer: /CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Certificate serial: 01984A0A5424BDB1D3CC87F3D023FF9D0AD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
Manifest number: 08C0
Signing time: Sun 27 Jul 2025 04:00:47 +0000
Manifest this update: Sun 27 Jul 2025 04:00:47 +0000
Manifest next update: Mon 28 Jul 2025 04:00:47 +0000
Files and hashes: 1: 8wFv-nR7He4By0-yWjzDqasqWiA.roa (hash: Tegeoj66rXi91zg3veSuF/d35ix15E2u1G/QxmxwwNg=)
2: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl (hash: XBMkDXYiRCAbDBEdDo0PbVawcznPoEYoTL+Cqi5+r18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:54:24:bd:b1:d3:cc:87:f3:d0:23:ff:9d:0a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Validity
Not Before: Jul 27 04:00:47 2025 GMT
Not After : Jul 28 04:00:47 2025 GMT
Subject: CN=5496aa6f749f1a653698b8d80a8f29bc1b609bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4c:f5:bf:c4:8b:78:07:6d:f9:b6:5c:33:c4:
9d:03:f7:3e:6d:55:48:36:9e:1b:a6:8b:31:46:19:
a1:9e:1f:47:82:0a:fd:f6:3e:5f:ad:70:b3:a4:3b:
e9:5f:aa:ff:8d:e2:8c:5f:30:90:57:00:82:a2:f6:
e5:bd:f8:14:4b:57:35:d6:69:29:e0:ee:1f:db:24:
6e:40:31:d4:cb:bb:18:80:a0:91:62:be:46:36:8d:
79:54:05:90:ce:0c:3d:57:6f:8d:db:00:1d:25:a1:
12:ad:5c:fa:fa:b6:b8:26:5d:7b:77:71:f2:83:bd:
83:ff:c2:b8:13:b9:b6:8b:a3:fe:43:1f:bb:48:7c:
72:1c:f9:40:f9:81:a8:1f:0c:c8:3e:59:fe:5a:60:
2a:d2:ec:a7:5d:b9:da:02:93:bb:ab:45:bf:38:f1:
67:a0:0e:81:4f:d6:d3:11:97:a1:4d:fe:32:0e:57:
e8:97:86:40:58:92:ff:31:ce:9c:db:5d:60:97:a2:
61:3f:dd:62:05:41:3f:18:3e:6a:41:49:1a:91:eb:
69:1a:52:1b:96:53:f1:d1:f9:85:ad:05:ce:6c:2c:
fd:a2:df:9c:9a:77:41:9e:86:9b:d6:a6:30:12:4b:
95:08:b3:51:aa:a7:55:0a:2f:e7:5e:54:7a:1f:a4:
0b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:96:AA:6F:74:9F:1A:65:36:98:B8:D8:0A:8F:29:BC:1B:60:9B:BB
X509v3 Authority Key Identifier:
keyid:05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c6:e7:78:fc:1d:77:2b:55:ba:6e:96:d8:c6:76:00:d4:74:
20:2f:7b:cc:96:db:34:32:2a:05:8e:21:71:7e:91:8c:a3:fc:
85:d8:ce:6a:5f:2c:2d:84:95:c5:77:c0:05:77:c4:e8:04:c4:
50:99:8e:a7:dc:96:9f:66:df:38:ea:08:3b:24:9d:f7:41:b2:
5e:85:da:04:a8:65:8f:1a:35:9c:42:c0:ca:17:91:78:8c:4c:
58:52:22:d7:a0:b0:88:dc:be:68:73:63:5c:5a:30:9f:60:c7:
31:2e:72:e2:42:b7:92:74:ef:97:05:64:e2:06:4d:7d:34:94:
9e:9d:28:a3:e9:a5:49:84:ed:28:61:9c:83:3f:4c:87:0b:b3:
7b:da:93:d5:75:d7:7a:f6:ea:3a:52:ea:d3:4b:d9:c2:b1:a1:
85:e3:97:0f:2a:fb:0a:14:11:f4:88:49:10:30:5b:e1:0d:1d:
0c:20:87:17:22:ed:42:e9:95:72:eb:35:39:b2:95:ea:13:cf:
71:67:b9:a0:44:d0:a0:76:72:03:b1:0e:64:85:73:82:fb:6c:
18:19:ee:9e:9f:a3:ed:35:9b:82:f6:ae:2b:88:6a:0e:49:6a:
2c:0d:14:4c:d3:06:f3:8b:2d:cb:9d:16:5a:9a:30:44:41:96:
c3:7a:6a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:24:29 2025 by rpki-client