Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
File: bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft (raw, json)
Hash identifier: EUbPAvRMDpmFCDoLbntgKG8nO9aJa+RnszMixDgOLvo=
Subject key identifier: 81:1A:B9:67:96:C4:58:A5:F6:34:F9:0F:C7:DC:92:EB:FA:CA:96:73
Authority key identifier: 6D:BC:20:A7:36:FF:C1:31:9E:FD:E4:DB:63:13:7C:87:83:C6:B3:50
Certificate issuer: /CN=6dbc20a736ffc1319efde4db63137c8783c6b350
Certificate serial: 01984AAF0277A584EFBFC65F392C4CF6D6DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
Manifest number: 1606
Signing time: Sun 27 Jul 2025 07:00:39 +0000
Manifest this update: Sun 27 Jul 2025 07:00:39 +0000
Manifest next update: Mon 28 Jul 2025 07:00:39 +0000
Files and hashes: 1: YcO7jD5AOjhycshFGG-dIbqWcW4.roa (hash: BRqKFwkTw48defv1cFItIn/eg55FRfTYZOTRhHFmj2Q=)
2: bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl (hash: 5dV+fNLcKzFt5QooLNhB625wby3WWepXmPbMlbpZTVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:02:77:a5:84:ef:bf:c6:5f:39:2c:4c:f6:d6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbc20a736ffc1319efde4db63137c8783c6b350
Validity
Not Before: Jul 27 07:00:39 2025 GMT
Not After : Jul 28 07:00:39 2025 GMT
Subject: CN=811ab96796c458a5f634f90fc7dc92ebfaca9673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:51:77:1d:a7:71:91:b4:aa:eb:9f:8c:a3:d7:
e8:92:a5:f8:5f:98:8b:f9:44:5f:80:b1:be:b6:89:
e9:fe:1d:ea:cf:b9:e8:c2:87:b3:1b:46:3a:a4:bf:
77:f8:d1:e3:b6:42:8b:98:dc:21:3c:b4:bd:7f:ee:
04:80:c4:bc:39:9e:c9:b9:6f:42:96:38:98:c7:e8:
f2:13:45:06:58:b1:75:3c:7f:2b:fc:0b:ee:34:60:
82:2f:15:02:e2:0f:d6:99:71:77:d3:59:24:d5:ac:
7f:c8:24:e6:93:02:ed:80:94:1b:e9:ee:63:d9:25:
94:dd:d2:26:43:b8:e6:29:37:25:8c:c5:af:39:31:
29:0b:d0:b6:2f:ad:57:ef:62:8a:f2:26:52:e0:d9:
7e:e8:ad:26:2f:3f:32:24:8e:14:c1:49:60:ef:8c:
5e:45:8b:3e:5b:33:8b:41:ca:05:7f:d0:bb:d3:6a:
db:39:03:21:1e:e1:8c:e1:9c:ba:84:6a:06:87:6d:
98:0a:7c:23:16:32:0d:cc:70:2f:52:f9:5e:b5:1d:
5a:e0:27:dd:3a:8f:67:49:7a:8e:d8:d1:16:5d:06:
c0:90:4b:5f:c1:b0:0d:3f:28:b4:ae:91:d9:f4:d7:
ee:79:49:3e:bf:ec:94:13:27:79:bd:54:a6:0a:be:
c2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1A:B9:67:96:C4:58:A5:F6:34:F9:0F:C7:DC:92:EB:FA:CA:96:73
X509v3 Authority Key Identifier:
keyid:6D:BC:20:A7:36:FF:C1:31:9E:FD:E4:DB:63:13:7C:87:83:C6:B3:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:33:89:23:63:df:45:50:b9:2a:50:8b:65:c0:67:e5:b2:f7:
25:6e:bc:10:81:1b:a6:26:66:06:7c:50:cd:22:49:75:cd:ce:
1b:36:bd:aa:d8:c7:96:90:4a:c8:f0:b7:fd:9d:4e:5e:82:80:
70:9a:72:60:b3:be:4b:5a:c8:14:bf:52:7d:9e:e5:09:9b:93:
00:da:36:69:ad:d8:3d:ce:45:44:e4:d4:98:b5:36:01:b5:a7:
7c:74:09:22:36:64:9e:db:59:48:64:30:dd:6a:af:41:67:2f:
75:90:2d:2a:69:7d:e7:ad:9e:0e:33:ff:e7:5a:ff:ef:a0:93:
1b:a0:ac:4b:72:c7:18:29:55:0f:7c:f1:26:cd:63:57:d6:b8:
c4:f8:79:aa:50:48:6b:c6:0b:45:53:d9:02:37:be:ce:6a:ed:
18:05:4f:65:b3:9e:cb:7f:0c:66:a9:44:e2:89:52:f9:c3:6a:
8c:f7:96:b5:3c:4d:a0:18:99:c7:f2:43:c4:d9:49:99:69:2a:
df:e1:49:1e:d8:2e:a3:27:37:19:df:67:b9:fe:a1:c2:d0:39:
0d:43:07:f6:9a:f7:15:39:f4:8c:53:64:0f:fc:24:44:00:d0:
a9:4e:d5:5e:71:96:7e:16:51:a2:a2:49:26:cd:e7:69:6e:00:
20:c8:9f:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKrwJ3pYTvv8ZfOSxM9tbeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkYmMyMGE3MzZmZmMxMzE5ZWZkZTRkYjYzMTM3Yzg3ODNj
NmIzNTAwHhcNMjUwNzI3MDcwMDM5WhcNMjUwNzI4MDcwMDM5WjAzMTEwLwYDVQQD
Eyg4MTFhYjk2Nzk2YzQ1OGE1ZjYzNGY5MGZjN2RjOTJlYmZhY2E5NjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFF3HadxkbSq65+Mo9fokqX4X5iL
+URfgLG+tonp/h3qz7nowoezG0Y6pL93+NHjtkKLmNwhPLS9f+4EgMS8OZ7JuW9C
ljiYx+jyE0UGWLF1PH8r/AvuNGCCLxUC4g/WmXF301kk1ax/yCTmkwLtgJQb6e5j
2SWU3dImQ7jmKTcljMWvOTEpC9C2L61X72KK8iZS4Nl+6K0mLz8yJI4UwUlg74xe
RYs+WzOLQcoFf9C702rbOQMhHuGM4Zy6hGoGh22YCnwjFjINzHAvUvletR1a4Cfd
Oo9nSXqO2NEWXQbAkEtfwbANPyi0rpHZ9NfueUk+v+yUEyd5vVSmCr7CrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEauWeWxFil9jT5D8fckuv6ypZzMB8GA1UdIwQY
MBaAFG28IKc2/8Exnv3k22MTfIeDxrNQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmJ3Z3B6Yl93VEdlX2VUYll4TjhoNFBHczFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny84OTgxMDEtNzhhYy00YTAzLWIzZjkt
YTU0ZWMwZDY4ZmE4LzEvYmJ3Z3B6Yl93VEdlX2VUYll4TjhoNFBHczFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny84OTgxMDEtNzhhYy00YTAzLWIzZjktYTU0ZWMwZDY4ZmE4
LzEvYmJ3Z3B6Yl93VEdlX2VUYll4TjhoNFBHczFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsTOJI2Pf
RVC5KlCLZcBn5bL3JW68EIEbpiZmBnxQzSJJdc3OGza9qtjHlpBKyPC3/Z1OXoKA
cJpyYLO+S1rIFL9SfZ7lCZuTANo2aa3YPc5FROTUmLU2AbWnfHQJIjZknttZSGQw
3WqvQWcvdZAtKml9562eDjP/51r/76CTG6CsS3LHGClVD3zxJs1jV9a4xPh5qlBI
a8YLRVPZAje+zmrtGAVPZbOey38MZqlE4olS+cNqjPeWtTxNoBiZx/JDxNlJmWkq
3+FJHtguoyc3Gd9nuf6hwtA5DUMH9pr3FTn0jFNkD/wkRADQqU7VXnGWfhZRoqJJ
Js3naW4AIMif2g==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:12:19 2025 by rpki-client