
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
File: bws2ahNvj8xd9SPI1G95B5HBs7s.mft (raw, json)
Hash identifier: 5pBB2VmaXpHucPnhwd6kyXwOGjXCfSWfLm4u/BE1MDA=
Subject key identifier: 03:69:D8:A9:E8:C2:20:CE:C5:9B:23:C1:FF:90:8E:91:5E:60:9C:53
Authority key identifier: 6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB
Certificate issuer: /CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb
Certificate serial: 01984A77E448DEB1C5AD661C7B5674D1F90C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
Manifest number: 0E75
Signing time: Sun 27 Jul 2025 06:00:27 +0000
Manifest this update: Sun 27 Jul 2025 06:00:27 +0000
Manifest next update: Mon 28 Jul 2025 06:00:27 +0000
Files and hashes: 1: 6DyFjxNuZaydS9bKmS0-lDimCWA.roa (hash: w+hli8OO0LCrT1s2As2YzA6/he3KpN8v/KtHkMIY6+4=)
2: bws2ahNvj8xd9SPI1G95B5HBs7s.crl (hash: 6rY2Zc8jw2eiR5IbkGbX3K46mC1DfjIi7RlzDrK6PTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:e4:48:de:b1:c5:ad:66:1c:7b:56:74:d1:f9:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb
Validity
Not Before: Jul 27 06:00:27 2025 GMT
Not After : Jul 28 06:00:27 2025 GMT
Subject: CN=0369d8a9e8c220cec59b23c1ff908e915e609c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3a:be:7b:c9:bf:fc:ba:b4:15:ad:3c:cc:5c:
e1:51:42:5d:12:dc:bf:b4:e8:82:dc:ec:15:15:cc:
ca:73:99:4d:43:83:ee:19:3c:fe:65:90:63:66:1c:
90:f8:1b:9e:07:88:d9:50:20:db:4f:14:f0:1c:c2:
48:2b:7f:d3:61:ca:b5:4b:ab:67:67:cf:ca:8d:16:
a8:43:6a:0d:ea:85:6f:4a:fa:22:9c:a6:4f:34:a4:
3d:70:d2:ec:49:89:35:86:15:96:c9:72:29:8a:f2:
cb:17:cf:a3:09:81:2a:cf:0a:75:4a:a1:56:d1:5e:
61:f1:2f:1d:1c:fd:8d:ff:c0:14:f2:10:96:f1:09:
4d:60:6b:01:3b:d7:6c:1d:8e:a6:92:e5:02:0c:11:
73:80:53:61:78:db:54:16:12:c2:d0:ae:8d:18:92:
20:6d:c4:ae:2c:9b:35:3e:b3:d1:3c:3e:ec:e7:ce:
8d:6d:b3:55:75:7b:1d:20:96:fb:ef:43:bd:16:bf:
04:0e:f9:0b:ff:a1:61:46:88:cb:af:d4:e5:0f:2f:
72:55:cf:4d:64:f2:52:9f:15:de:97:c0:2e:76:b8:
79:5b:35:42:ba:79:ca:43:f8:ef:54:c0:ed:9f:f7:
80:32:b6:4f:6f:2d:a1:e7:d2:27:1e:8e:02:d8:40:
be:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:69:D8:A9:E8:C2:20:CE:C5:9B:23:C1:FF:90:8E:91:5E:60:9C:53
X509v3 Authority Key Identifier:
keyid:6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:a1:f2:ef:c2:52:a9:e8:73:a7:62:8d:68:a5:1a:08:e3:52:
b2:1f:64:28:2a:73:9b:ca:58:52:cc:98:fb:b1:8f:fa:39:47:
ef:b9:3f:cd:8d:1e:a9:e0:c1:43:52:cc:fd:5d:f5:80:f7:ab:
50:93:01:74:b6:6f:c0:7b:67:36:0f:d6:58:6c:cc:30:a0:9d:
6a:e5:e6:b2:f4:10:92:27:b5:6d:ef:51:6c:eb:6b:21:58:e6:
cd:4a:ce:a7:93:6d:b2:2e:90:ec:b5:6f:26:37:3a:16:05:4a:
5e:e2:4a:d4:db:49:b2:2f:98:5f:69:e4:bc:82:2c:10:6e:f1:
50:35:99:fb:f0:e9:58:95:22:6f:9a:ca:62:52:78:99:93:75:
c6:1d:28:86:69:e8:d4:0b:7b:cf:23:91:45:6e:b0:d4:78:7a:
c9:bd:e9:07:9f:7f:66:ad:27:be:1f:e9:f9:7f:3d:68:71:58:
d1:72:49:86:5f:3a:f1:d0:89:d7:a2:a5:e2:a0:8f:a3:ed:2c:
f5:86:4e:7f:c5:be:6c:c4:2a:3a:f2:a6:39:65:b3:e1:61:2f:
33:72:6c:d7:03:c5:9a:2f:ef:9c:76:36:4a:6c:c6:60:b0:44:
d7:b4:11:78:cd:ce:ac:fc:b7:61:a1:ca:b4:08:51:46:2f:0b:
7b:65:54:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:58:10 2025 by rpki-client