Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
File: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft (raw, json)
Hash identifier: 2eMIXr3SWysvfObwTisDfAWSRSk+xBm3YCRUCdp7dec=
Subject key identifier: 3E:63:8C:9A:94:C4:44:3E:CA:12:6A:D4:66:E0:F7:12:50:F5:6F:EB
Authority key identifier: 05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
Certificate issuer: /CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Certificate serial: 0197605DA763B577CBF7951F798440EC3B34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
Manifest number: 0847
Signing time: Wed 11 Jun 2025 19:00:39 +0000
Manifest this update: Wed 11 Jun 2025 19:00:39 +0000
Manifest next update: Thu 12 Jun 2025 19:00:39 +0000
Files and hashes: 1: 8wFv-nR7He4By0-yWjzDqasqWiA.roa (hash: Tegeoj66rXi91zg3veSuF/d35ix15E2u1G/QxmxwwNg=)
2: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl (hash: teToV4p8ki/aZVZPXXAoEgSwbSbZbdrv2jQExU8Bjro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:5d:a7:63:b5:77:cb:f7:95:1f:79:84:40:ec:3b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Validity
Not Before: Jun 11 19:00:39 2025 GMT
Not After : Jun 12 19:00:39 2025 GMT
Subject: CN=3e638c9a94c4443eca126ad466e0f71250f56feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e1:9c:0e:ac:ea:c2:2a:19:13:7b:47:78:7c:
b0:85:95:b2:de:b7:32:97:c6:b0:04:a2:0c:f7:66:
cb:b4:03:01:ce:ac:be:4f:17:b3:e2:52:0c:50:65:
c9:5d:30:52:8b:d7:6a:78:7a:f4:9c:7c:79:3f:09:
2b:90:41:58:dd:d0:f0:2d:da:49:ec:ff:ed:e9:6e:
12:b8:e7:a0:bb:d5:80:46:73:2f:65:07:02:45:8d:
82:a1:d6:1b:33:ab:20:3c:fd:0c:ca:0d:99:58:c5:
03:86:73:6a:46:2c:4a:9e:d8:07:b5:f3:2c:56:97:
db:6e:47:49:4b:e8:28:86:45:c7:82:27:3a:6f:f8:
30:1b:52:88:b4:04:af:f6:66:8e:b2:c0:58:7f:bf:
65:99:55:97:5b:2f:22:a9:04:d6:7f:2e:b0:83:ab:
74:35:d0:47:e7:bb:ff:f6:86:4f:71:3d:b5:eb:f7:
52:20:30:24:e7:7d:45:69:3c:0c:6a:80:66:91:a4:
c2:80:81:87:06:39:8f:6c:78:ad:15:46:d7:ed:b1:
44:5e:b5:b0:b4:6c:58:d8:30:e7:ca:3f:f3:e3:df:
07:af:dc:f9:97:db:c1:07:d3:99:4f:dd:da:f8:2b:
f0:6e:95:e3:c3:0c:a4:a8:5e:3c:a6:ff:3b:08:0f:
8d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:63:8C:9A:94:C4:44:3E:CA:12:6A:D4:66:E0:F7:12:50:F5:6F:EB
X509v3 Authority Key Identifier:
keyid:05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:46:93:ae:4c:4a:bf:ef:34:27:53:74:8a:d0:3f:4c:ca:2d:
a2:a9:27:4b:61:c7:5e:11:7b:ac:94:3b:c3:e5:b7:06:55:63:
9b:14:9c:22:52:31:3c:10:03:c0:2b:41:17:96:fe:a4:19:d0:
8a:c1:cc:00:af:24:a9:d2:04:20:40:10:26:6b:5f:f0:ff:76:
14:54:9d:5e:9a:44:c0:2e:ec:cf:b0:aa:5e:a6:d1:80:b3:91:
fa:fb:41:56:4d:64:4f:2e:8d:f7:8b:56:fc:b7:a5:d2:f2:37:
ec:41:b4:5f:86:cc:a8:7d:1b:97:95:74:2e:f6:1a:17:95:2c:
37:9e:19:ed:a6:be:e8:81:40:d9:fd:e3:50:cd:3b:f8:ff:c1:
b5:7b:94:5e:69:34:8f:5a:6e:98:c7:31:61:0c:cc:a8:ee:6e:
99:1b:71:15:f7:a2:e2:ec:c7:5a:32:dd:94:77:1e:60:09:a7:
9f:94:a8:bf:5e:0c:87:2f:7e:26:a7:73:ff:7c:92:f8:a3:40:
a5:1d:1b:e6:d0:77:53:cf:81:a4:6f:dd:19:ee:1f:43:66:6e:
3d:3e:a5:37:c6:55:d8:90:38:9b:fa:6c:7c:7e:64:ae:d9:11:
c0:b8:61:bf:04:4a:a1:44:00:c9:a0:cd:d1:a2:91:b6:ee:d3:
d4:d4:fb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 00:56:42 2025 by rpki-client