Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
File: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft (raw, json)
Hash identifier: vwPT7M3Tx8qq6U9IkWcrAdo5+8gsprUbM/42B5LhyEc=
Subject key identifier: B5:60:4B:9C:36:52:E6:72:7B:BD:66:08:08:6F:8B:DF:5B:43:00:ED
Authority key identifier: 05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
Certificate issuer: /CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Certificate serial: 019A28F990D9A988A61D6756C5532927F7CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
Manifest number: 09B8
Signing time: Tue 28 Oct 2025 04:00:35 +0000
Manifest this update: Tue 28 Oct 2025 04:00:35 +0000
Manifest next update: Wed 29 Oct 2025 04:00:35 +0000
Files and hashes: 1: 8wFv-nR7He4By0-yWjzDqasqWiA.roa (hash: Tegeoj66rXi91zg3veSuF/d35ix15E2u1G/QxmxwwNg=)
2: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl (hash: EoS2sQSzCHYiw9DWvXOHNRS5PSbWMPDEm5oEnZhe3Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:f9:90:d9:a9:88:a6:1d:67:56:c5:53:29:27:f7:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Validity
Not Before: Oct 28 04:00:35 2025 GMT
Not After : Oct 29 04:00:35 2025 GMT
Subject: CN=b5604b9c3652e6727bbd6608086f8bdf5b4300ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:aa:19:62:d6:63:ac:38:98:42:9c:00:47:42:
1a:5c:a3:7d:1e:65:66:d1:d5:b7:84:3f:9f:92:c8:
b8:db:90:5c:f3:db:ca:13:d1:dd:b9:ee:ac:cd:f5:
e3:e1:da:33:0e:4c:ad:15:90:8b:d1:bd:d5:40:ab:
66:9f:e4:0b:75:7d:10:68:1a:38:3c:4a:96:09:29:
46:f4:30:8b:90:71:08:7d:f0:c2:04:5e:52:b5:fe:
9a:96:40:7a:14:69:ec:b4:6d:f1:82:d4:85:41:91:
f6:59:83:1f:0d:80:ed:bb:82:b3:19:f7:77:fc:98:
70:9d:94:cc:73:41:a0:84:ec:d1:c4:ac:b7:d5:d9:
96:a4:bf:88:5d:e1:50:0c:22:06:2a:51:fd:76:22:
16:ef:26:4d:0a:72:be:f1:c5:5d:f7:9c:39:86:a2:
4e:bb:34:92:3b:cf:c0:61:fe:0c:6e:0a:ec:bc:7f:
5a:e3:a9:75:c3:23:ab:ef:55:56:66:ef:c4:b0:44:
99:69:23:11:12:96:8b:3b:7b:c5:c8:23:ef:bd:c2:
52:73:6c:cf:b2:d1:2a:4d:4f:21:f1:b9:d9:24:0d:
48:03:2a:9a:bc:4e:92:00:16:b1:54:96:50:78:e6:
bf:cd:7c:b0:59:a7:4e:a3:10:e0:38:cf:f8:a1:44:
97:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:60:4B:9C:36:52:E6:72:7B:BD:66:08:08:6F:8B:DF:5B:43:00:ED
X509v3 Authority Key Identifier:
keyid:05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:97:3b:c2:e2:71:5c:e7:f5:be:6a:49:0b:70:42:10:59:00:
db:3a:0a:33:bd:16:bf:67:1d:a9:a7:85:ee:1f:a9:8b:94:c6:
6c:f2:cb:1d:60:6d:45:f3:94:41:d7:dd:a0:b5:fc:25:c4:1f:
b4:49:d3:f0:cf:ef:0c:0a:5a:f9:69:a6:a4:83:19:3c:3d:30:
c4:e4:c4:81:2b:a8:8f:be:8d:e0:2a:06:ed:df:b1:70:8a:ea:
a0:18:fd:1c:f0:75:aa:a9:02:7a:e5:3d:00:19:f9:69:f1:e9:
5d:b4:58:6a:a3:5a:6c:00:1c:e3:1b:f2:56:2b:6d:b5:27:8b:
00:89:7f:51:d4:3d:2b:dc:0f:05:cf:99:fd:1e:8c:60:32:e2:
4b:34:9c:f6:51:31:73:ac:fe:85:13:ec:3c:d4:44:dc:cc:57:
bd:da:57:c7:a9:93:5c:db:d2:2f:3d:fa:8b:79:03:3e:75:ba:
fc:61:55:7c:7a:11:b8:d1:b0:53:69:0e:00:78:bc:7d:6e:89:
a6:58:ac:01:40:2d:4f:ef:40:a1:91:dc:ab:e1:46:a0:47:65:
4f:e8:17:22:ed:d2:58:47:d1:85:70:d2:35:f2:e1:68:26:1e:
a6:85:c9:4e:91:f4:1e:38:ac:f6:78:ba:a6:0e:7c:b5:6e:d3:
8d:73:c1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 10:54:20 2025 by rpki-client