Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
File: BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft (raw, json)
Hash identifier: ryUzjanwhHOPMjdtQ7973tzplqhDXxXpLAW7CKwHNJc=
Subject key identifier: E7:0F:CE:86:D7:8F:58:49:03:F1:89:82:EA:10:94:33:D7:F7:4B:73
Authority key identifier: 05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
Certificate issuer: /CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Certificate serial: 01983A292C3A539F889664BAFF895C9F192A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
Manifest number: 05FC
Signing time: Thu 24 Jul 2025 02:00:33 +0000
Manifest this update: Thu 24 Jul 2025 02:00:33 +0000
Manifest next update: Fri 25 Jul 2025 02:00:33 +0000
Files and hashes: 1: B6FxjiJOC6_Birv76wylcyDexTM.roa (hash: eGhXe2MadeqSm3dFdd2yllOqHv5uGkbMvrl6C4hJsTU=)
2: BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl (hash: 0O1GrrGE/CPmZYdSwhEdxdXI2ggSB7MrH9wSrxIVlzM=)
3: Jkosv2xFFNQ2gORMGJ-Rj1JTgqk.roa (hash: V03sqShQTC3KKVEiSIPpDzr6IAR7BOwlpV6pUG5aI+w=)
4: PU3RtVE8bUTLDau3UULyJxnwYvk.roa (hash: rurDzg32C4cm1zQE6cZCxEDJG3aKAFEXLx56a9lYAvQ=)
5: TPqMfRSK5sIipm7-2Mw_-o6t_pE.roa (hash: DbvKLEpzC4KlaBAFfc8W2Orz87Jz73d6hIvvLvcnSeI=)
6: aFnhQawEO18IQ3GTJ01kkL1iiO8.roa (hash: lmQ4l6Xz/ufxEDRo15j0d1wdcSctSZ/L1+X4hlqiZ0E=)
7: i5Cva7AkVQeMjYySCI1cSGulBFU.roa (hash: OqdQgQr223XTYw+nW6EEK96kWz2kctHBvYApbJ8V5SM=)
8: orwBdnVfFaxWFzZXqCDe7xYVF-0.roa (hash: s5h3MlDKvwqoRseQHdYHw8t3JkEhjpPj+FNdQWzBxyg=)
9: zfGaREwozQlPDznadYm5iZBdTbo.roa (hash: BQ/Qo3WVP+Q/nW3nNfYM3evPzNFHtG1U5B77mp2vN9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3a:29:2c:3a:53:9f:88:96:64:ba:ff:89:5c:9f:19:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Validity
Not Before: Jul 24 02:00:33 2025 GMT
Not After : Jul 25 02:00:33 2025 GMT
Subject: CN=e70fce86d78f584903f18982ea109433d7f74b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f5:47:8c:77:ef:15:51:b8:2f:ff:1b:30:0a:
95:56:5e:dd:d9:df:8c:b3:09:0d:1f:c5:3e:7d:9c:
57:a4:55:6b:aa:79:18:d8:13:4b:9c:d3:c7:1c:48:
47:36:13:a9:f8:b6:ab:fb:27:59:75:72:8e:73:de:
bf:3b:81:93:1e:c0:2c:21:b4:3f:79:e3:19:d8:1f:
33:e5:e6:85:3e:da:86:e7:55:cb:63:37:ba:4f:e1:
d6:cf:58:62:23:4f:af:54:7a:46:d1:98:df:28:dd:
38:38:4b:33:c5:00:bb:37:42:60:09:c5:90:be:b8:
80:90:22:2c:51:fb:f0:3c:aa:90:d9:7c:45:74:bb:
30:e9:09:64:8f:15:e8:42:66:7b:0d:1a:fd:14:31:
a3:75:b9:11:02:a0:b1:88:29:30:f2:eb:36:76:69:
6e:10:7b:6b:f3:f2:2c:12:34:12:1f:a7:29:db:f8:
0e:a3:15:a0:6c:4e:04:5a:7f:c9:f3:d0:2c:30:dd:
bf:84:fb:18:e8:ae:02:3e:84:a4:f2:c9:60:50:82:
7d:ae:1a:1a:c3:be:a1:d9:fe:b7:c2:7f:6c:ea:54:
d9:09:59:df:fd:d1:1e:65:74:c6:77:f4:3a:98:b7:
46:d1:ff:ae:58:62:52:43:74:c1:70:5b:f0:2f:25:
85:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0F:CE:86:D7:8F:58:49:03:F1:89:82:EA:10:94:33:D7:F7:4B:73
X509v3 Authority Key Identifier:
keyid:05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:2c:58:16:8d:cf:00:f2:cb:de:c4:f3:b9:0d:7a:4e:b5:af:
e6:54:99:2b:b0:d4:4e:fd:49:e9:31:59:ec:17:6b:a8:eb:93:
58:5c:4e:54:85:a5:de:6b:33:4b:3b:c2:41:49:5a:b2:26:30:
5a:32:f4:98:b4:83:a8:e2:ce:d6:f3:81:56:03:2a:57:45:09:
9a:f1:72:ad:ff:d7:fd:21:9a:73:94:23:9e:6a:d5:67:2e:4f:
c9:11:06:8b:57:e5:cc:b4:30:c6:64:59:dc:26:26:39:a0:73:
63:37:e5:40:2e:c8:3e:3a:e9:ae:3a:17:6b:03:fd:9f:34:ca:
d7:89:53:a6:d3:cc:0e:74:dd:98:71:be:32:e9:1e:6a:e0:f8:
69:71:ef:d2:35:1d:bf:a0:0a:c5:8c:81:b0:26:c6:07:24:4c:
13:5e:56:3e:c8:b5:35:cc:30:59:2c:06:10:60:e1:a4:5c:de:
f9:c2:38:d6:95:aa:46:a5:38:b8:d0:dc:3d:83:04:f4:c2:65:
2e:fd:a6:b0:92:63:9a:2e:d7:4a:03:08:2b:b4:1b:98:e2:59:
bb:d2:3d:35:52:f7:62:74:23:2b:85:02:1d:f8:04:13:04:e5:
19:ee:3a:33:bc:51:36:d6:eb:62:47:3d:a9:22:d6:0a:d1:9c:
71:0d:de:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 04:57:59 2025 by rpki-client