Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
File: bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft (raw, json)
Hash identifier: 4L0DlgTWk2/AsQxTIMDKIecMoW1FQ+1jrOm1NBGdsYo=
Subject key identifier: 81:2C:B6:4D:98:ED:02:40:58:85:AD:CB:81:EB:F6:E2:F7:6B:41:24
Authority key identifier: 6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
Certificate issuer: /CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Certificate serial: 01984A77BC903E40DC2E3A7145AC915E6788
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
Manifest number: 0CE2
Signing time: Sun 27 Jul 2025 06:00:17 +0000
Manifest this update: Sun 27 Jul 2025 06:00:17 +0000
Manifest next update: Mon 28 Jul 2025 06:00:17 +0000
Files and hashes: 1: CNEWTRKouN1ztdllhCMhjhdKKHg.roa (hash: aqhxq+qj3sPvgTV0jZeMkrVOr4/8ei7UkGfqQsH5Ljo=)
2: Jaj49FDIg9x74-Mgv5pjh9hL3VA.roa (hash: RiqG1dHCuH2e+rEOq+su9EZpKh6AH03adatnHOfLKXM=)
3: bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl (hash: 1l8mBH8XrQ+TUY7diCphPBAkVtnKuBCIUUWQmLwr2Fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:bc:90:3e:40:dc:2e:3a:71:45:ac:91:5e:67:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Validity
Not Before: Jul 27 06:00:17 2025 GMT
Not After : Jul 28 06:00:17 2025 GMT
Subject: CN=812cb64d98ed02405885adcb81ebf6e2f76b4124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:73:7f:98:f4:5f:a1:8b:46:19:31:d3:05:78:
7d:f4:a0:57:82:33:ed:4a:af:c2:80:6e:7f:80:54:
67:a4:ad:c3:33:02:92:e1:4d:b9:36:33:83:70:6f:
30:99:fa:9d:ef:7e:db:09:2f:19:c9:a9:dd:23:cf:
7f:eb:30:f3:bf:1d:58:af:a3:96:b0:4c:2b:5b:ae:
a6:76:b8:73:52:35:46:a4:cd:9a:00:ff:96:68:5d:
b1:5b:88:cb:29:78:ce:60:c5:a5:ff:24:5c:3a:42:
be:60:cd:d2:c7:bb:ab:65:31:bf:7c:fc:7b:a8:d6:
02:59:19:46:41:49:b8:7f:71:45:19:d2:77:c8:ec:
6d:2c:9b:0b:46:34:22:5b:02:2d:71:99:a9:12:5f:
b9:8c:7e:6d:54:cb:f8:91:49:d3:7c:00:14:f6:cb:
25:c8:b8:12:67:d3:6a:d6:c0:d7:72:d2:0c:36:2e:
99:b0:d9:56:a2:23:51:6a:21:f7:d5:f8:01:70:3b:
8a:11:6a:88:50:a1:2f:55:be:e6:1e:5f:6d:60:40:
6c:f3:e0:c0:87:71:8a:97:6a:85:21:85:e2:cf:5f:
f3:0b:b1:5f:38:3e:57:f0:89:9f:a3:0e:bd:27:46:
06:61:4b:08:cc:f0:cf:f4:93:13:e1:5a:0a:39:03:
d7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2C:B6:4D:98:ED:02:40:58:85:AD:CB:81:EB:F6:E2:F7:6B:41:24
X509v3 Authority Key Identifier:
keyid:6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:7c:5e:50:b1:e4:24:de:2f:a5:6d:b4:20:10:7d:3c:f4:26:
33:f3:51:01:6f:d5:21:ff:c2:96:6d:7a:5d:63:1c:56:79:21:
e2:e3:e8:b7:99:c9:10:e7:b6:10:7b:3f:68:56:1a:8f:ec:7e:
c4:a9:8e:54:50:61:2a:1f:17:26:e6:24:f5:b0:7b:5b:68:ef:
ea:9a:bb:e4:f3:c8:13:dd:05:7b:92:b6:08:b2:01:85:cc:74:
25:d5:3b:d6:d9:03:6d:82:e7:91:bf:63:2b:c3:0e:3d:14:e7:
a2:5a:30:0d:62:14:05:fd:1b:a6:8d:bd:35:22:18:0a:33:d1:
df:03:f9:1e:1f:76:65:4c:dc:90:32:d8:4b:5e:77:e3:2e:77:
f4:a3:df:de:bc:41:0b:45:52:b0:59:52:2b:ad:78:3d:7f:ea:
04:93:f8:26:58:a4:61:f3:55:ac:42:b4:03:53:0f:b0:aa:b1:
ff:29:20:c4:65:f9:a3:df:f9:55:46:4c:f6:f3:05:f6:52:0f:
15:c6:11:81:f3:83:21:b5:b4:c0:8c:2e:50:cf:87:b6:e8:62:
4d:0e:2e:c2:4a:5c:1f:39:3c:11:24:8c:d9:aa:e3:46:d8:26:
31:63:76:d8:69:cd:97:a8:a5:81:2a:4a:f8:88:c2:91:46:47:
60:b0:bf:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKd7yQPkDcLjpxRayRXmeIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNjVmZTA1NWZiN2VkMDQzZDEwOTMwNzA0NWMwYWJkZjQw
NGQwNWQwHhcNMjUwNzI3MDYwMDE3WhcNMjUwNzI4MDYwMDE3WjAzMTEwLwYDVQQD
Eyg4MTJjYjY0ZDk4ZWQwMjQwNTg4NWFkY2I4MWViZjZlMmY3NmI0MTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnN/mPRfoYtGGTHTBXh99KBXgjPt
Sq/CgG5/gFRnpK3DMwKS4U25NjODcG8wmfqd737bCS8ZyandI89/6zDzvx1Yr6OW
sEwrW66mdrhzUjVGpM2aAP+WaF2xW4jLKXjOYMWl/yRcOkK+YM3Sx7urZTG/fPx7
qNYCWRlGQUm4f3FFGdJ3yOxtLJsLRjQiWwItcZmpEl+5jH5tVMv4kUnTfAAU9ssl
yLgSZ9Nq1sDXctIMNi6ZsNlWoiNRaiH31fgBcDuKEWqIUKEvVb7mHl9tYEBs8+DA
h3GKl2qFIYXiz1/zC7FfOD5X8Imfow69J0YGYUsIzPDP9JMT4VoKOQPXlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEstk2Y7QJAWIWty4Hr9uL3a0EkMB8GA1UdIwQY
MBaAFG1l/gVft+0EPRCTBwRcCr30BNBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYldYLUJWLTM3UVE5RUpNSEJGd0t2ZlFFMEYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mNjA3OTgtMzIwMi00ODRiLTg2NDAt
MWI3NDllOTgxMGI0LzEvYldYLUJWLTM3UVE5RUpNSEJGd0t2ZlFFMEYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9mNjA3OTgtMzIwMi00ODRiLTg2NDAtMWI3NDllOTgxMGI0
LzEvYldYLUJWLTM3UVE5RUpNSEJGd0t2ZlFFMEYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd3xeULHk
JN4vpW20IBB9PPQmM/NRAW/VIf/Clm16XWMcVnkh4uPot5nJEOe2EHs/aFYaj+x+
xKmOVFBhKh8XJuYk9bB7W2jv6pq75PPIE90Fe5K2CLIBhcx0JdU71tkDbYLnkb9j
K8MOPRTnolowDWIUBf0bpo29NSIYCjPR3wP5Hh92ZUzckDLYS1534y539KPf3rxB
C0VSsFlSK614PX/qBJP4JlikYfNVrEK0A1MPsKqx/ykgxGX5o9/5VUZM9vMF9lIP
FcYRgfODIbW0wIwuUM+HtuhiTQ4uwkpcHzk8ESSM2arjRtgmMWN22GnNl6ilgSpK
+IjCkUZHYLC/6g==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:43:18 2025 by rpki-client