Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
File: BwkPumY7Byu1TMfUnoigOAN0y24.mft (raw, json)
Hash identifier: HPSHsLpNbDaD7r2n/bOMZvObwRnLHPUs2b3VwwKio28=
Subject key identifier: 58:C3:AD:46:2F:94:DF:36:AD:8A:9A:5E:F6:15:E7:2A:56:15:69:E7
Authority key identifier: 07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
Certificate issuer: /CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Certificate serial: 01984965C821451534BAE8F6A4B6EFD07611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 01:01:03 +0000
Manifest this update: Sun 27 Jul 2025 01:01:03 +0000
Manifest next update: Mon 28 Jul 2025 01:01:03 +0000
Files and hashes: 1: BwkPumY7Byu1TMfUnoigOAN0y24.crl (hash: 0DGaQiWr5d7TdLY3nwhM39wRhSGirHvKgoU3FIzgpeM=)
2: NQNN2zI--5W9phAw1FPsrLGEYwA.roa (hash: vTr80Rx2MWq5UoQZbNWzT5PuHgBwID0hr0ao7hRy9dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:c8:21:45:15:34:ba:e8:f6:a4:b6:ef:d0:76:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Validity
Not Before: Jul 27 01:01:03 2025 GMT
Not After : Jul 28 01:01:03 2025 GMT
Subject: CN=58c3ad462f94df36ad8a9a5ef615e72a561569e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:57:23:e0:ba:e7:45:87:1c:7f:ec:37:dc:3a:
12:f4:67:09:77:70:31:a1:bc:e5:79:01:8e:42:3c:
17:cd:29:4f:b9:1c:d9:e6:b1:87:08:4c:91:53:1f:
41:b4:2b:64:05:5a:d7:07:c0:2c:16:04:9a:c1:d8:
16:18:65:62:01:70:39:4c:23:4b:07:2a:d2:53:35:
98:be:13:dc:28:b5:22:b7:10:0e:5f:c1:f6:cf:5f:
1e:44:69:28:a7:61:11:9a:7f:97:2b:b5:cc:c3:61:
36:ce:25:85:bd:11:df:bd:22:97:43:3b:28:c4:8e:
e5:14:8f:ad:dc:7d:a8:ad:ca:94:5e:bc:31:97:bd:
47:67:89:61:48:33:10:f8:d0:29:14:1c:c0:da:8b:
20:70:04:ce:6b:df:d5:18:8a:8e:1f:1f:12:67:24:
85:93:fe:3f:b6:7c:8d:76:0f:47:b5:42:ec:f8:d1:
dd:be:5c:34:58:f3:63:9a:1b:89:f3:69:27:a9:ff:
04:1f:1c:68:a3:2e:2c:ec:4a:e0:63:91:fa:88:79:
d2:d9:00:ff:16:b2:26:96:60:71:55:22:87:71:60:
ac:6e:ae:3b:ba:de:48:11:5c:c2:75:aa:96:06:66:
ad:fa:67:93:10:40:01:8a:f9:ea:1c:5b:b3:4c:8e:
13:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C3:AD:46:2F:94:DF:36:AD:8A:9A:5E:F6:15:E7:2A:56:15:69:E7
X509v3 Authority Key Identifier:
keyid:07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:da:2e:c5:91:79:c3:0b:57:2b:eb:32:05:c8:75:5c:6e:0a:
77:b2:74:87:4a:d7:dd:46:e6:d3:8e:93:a9:10:a2:cb:06:57:
9d:b6:48:66:fc:b7:ea:58:6d:34:23:8a:8b:bc:6f:ca:84:68:
3c:40:e3:41:b7:da:36:52:54:7e:2f:36:fa:9b:92:e1:60:07:
b8:d5:5b:b6:a8:19:56:f6:4c:54:2b:69:6c:47:70:23:95:82:
92:d8:63:02:45:93:c9:48:b4:b3:1d:d2:49:f3:38:ee:ca:12:
8d:c2:64:62:52:22:a1:9c:95:4f:fe:3a:bf:d6:b1:c2:06:b3:
a6:6f:2c:92:84:95:dc:8a:d5:92:64:7f:6e:a4:fc:12:f8:7a:
76:7c:67:4a:9b:5f:a5:dc:32:fe:58:38:57:bb:57:01:fb:e8:
01:14:09:34:b7:c5:43:11:d0:ce:92:3b:33:f5:4b:98:a2:91:
ed:14:df:13:88:55:dd:a3:6f:75:c7:83:84:41:37:7a:1b:7a:
d5:c4:a8:6c:77:75:9c:7e:c0:bb:2d:63:d0:3c:ca:28:6c:8c:
ac:26:b4:d9:78:d3:70:ee:38:2b:e2:9f:65:4c:10:c0:37:02:
9e:61:9a:8a:8d:4a:c5:f7:7f:87:72:d2:f4:7b:63:63:8b:0c:
ce:93:73:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:30:36 2025 by rpki-client