Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
File: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft (raw, json)
Hash identifier: VBRFufdld1FvWVcfgZOWq+/Ebeg/fA5yIb8eRiCi4QU=
Subject key identifier: 88:45:6D:15:FD:E3:CE:DB:D9:FB:61:CB:A7:2C:63:60:60:0C:3E:47
Authority key identifier: 05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
Certificate issuer: /CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Certificate serial: 019933B6D515F9E49D7E5488D1203C2EAEC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
Manifest number: 0939
Signing time: Wed 10 Sep 2025 13:00:44 +0000
Manifest this update: Wed 10 Sep 2025 13:00:44 +0000
Manifest next update: Thu 11 Sep 2025 13:00:44 +0000
Files and hashes: 1: 8wFv-nR7He4By0-yWjzDqasqWiA.roa (hash: Tegeoj66rXi91zg3veSuF/d35ix15E2u1G/QxmxwwNg=)
2: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl (hash: 1B3NCu8Y5R25cliDOyj/+YQ1UPLVGpNnZqev0bm7hGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b6:d5:15:f9:e4:9d:7e:54:88:d1:20:3c:2e:ae:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Validity
Not Before: Sep 10 13:00:44 2025 GMT
Not After : Sep 11 13:00:44 2025 GMT
Subject: CN=88456d15fde3cedbd9fb61cba72c6360600c3e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3e:66:5d:38:c4:48:6f:23:2c:c6:01:04:33:
bd:83:5d:74:06:40:4c:87:7f:38:aa:70:93:0e:e4:
22:81:a9:c5:4c:23:18:cd:d3:46:5b:ad:47:b1:4a:
d2:bf:5a:0a:86:b5:ea:c7:f7:cf:be:fb:9c:83:8f:
05:c8:80:06:e3:80:02:c9:4b:e8:f7:d6:3f:ba:5f:
83:7a:75:6b:ba:cb:e4:e5:ae:75:5f:13:95:1f:4b:
b6:a7:fa:e8:ef:52:7f:fb:89:a1:c2:6e:3d:ec:0a:
18:41:71:b4:15:69:49:c4:2a:0f:27:e8:f0:b0:38:
07:1b:53:06:5d:0b:78:39:fa:28:e9:35:f2:3d:92:
3f:13:16:d5:cb:47:5d:b9:4b:19:55:1f:5f:0d:29:
06:db:06:c5:35:af:98:35:ab:b3:2f:11:67:6b:1c:
ec:b7:46:4b:b4:05:ed:c6:d5:c4:bd:f7:5a:13:78:
a0:29:dd:ad:de:01:31:11:35:c1:e8:4a:a4:5b:f0:
ac:df:bb:40:fb:cb:c2:70:38:1e:89:ec:ea:1d:8a:
76:5e:70:f3:1c:a4:e3:30:4b:5b:a7:c0:d6:61:9b:
b0:1c:41:a6:ce:9c:5d:19:d9:02:73:c3:65:47:90:
8b:3a:92:a7:9f:72:c4:a8:03:0c:ca:d8:3d:e3:36:
cd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:45:6D:15:FD:E3:CE:DB:D9:FB:61:CB:A7:2C:63:60:60:0C:3E:47
X509v3 Authority Key Identifier:
keyid:05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ba:9e:4d:74:01:75:79:66:02:0a:c0:be:f9:2d:f2:a7:15:
83:da:4d:b3:a4:3e:ab:25:71:79:15:af:51:8b:6c:72:31:1d:
b5:43:2c:9b:5b:d0:e9:79:9e:85:b0:a0:95:fd:56:89:5e:7c:
ba:9d:b0:4e:75:5d:76:43:ac:87:df:b4:6c:9c:68:da:a7:b5:
0e:0d:1e:8c:ef:74:e8:b0:59:fb:7e:5f:8b:98:f3:92:e3:fb:
a0:b4:f4:f9:a8:de:ca:35:31:b8:96:ee:08:e8:6e:cc:9d:d7:
80:1d:51:91:c4:70:1a:a4:20:d5:52:17:b4:cb:da:67:06:20:
31:83:02:5f:58:8a:08:89:e4:29:d9:eb:72:e3:ac:d7:80:f6:
2c:29:44:65:8d:0a:f5:da:9d:6c:58:6f:cb:ff:a6:ed:5a:bf:
67:d3:d7:ac:b4:f7:61:74:27:34:3d:53:8b:f6:a5:00:12:03:
c2:00:21:c8:0a:98:6c:ec:63:9f:02:91:2e:59:df:64:eb:51:
4a:ac:9b:05:92:c2:d2:67:eb:57:90:01:c2:71:95:a2:42:4c:
3a:50:f3:94:c2:68:09:5d:1b:c7:81:c2:1f:44:93:fe:37:45:
99:ec:3a:94:0b:62:4d:18:fa:13:dd:f9:51:2c:9f:4e:0f:9e:
a1:64:57:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkzttUV+eSdflSI0SA8Lq7IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NmY0YTQzZTBiMDY1MTI0N2ZjMzYyOWM2MjdiOWMzODVm
MGMzNzYwHhcNMjUwOTEwMTMwMDQ0WhcNMjUwOTExMTMwMDQ0WjAzMTEwLwYDVQQD
Eyg4ODQ1NmQxNWZkZTNjZWRiZDlmYjYxY2JhNzJjNjM2MDYwMGMzZTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuD5mXTjESG8jLMYBBDO9g110BkBM
h384qnCTDuQiganFTCMYzdNGW61HsUrSv1oKhrXqx/fPvvucg48FyIAG44ACyUvo
99Y/ul+DenVrusvk5a51XxOVH0u2p/ro71J/+4mhwm497AoYQXG0FWlJxCoPJ+jw
sDgHG1MGXQt4Ofoo6TXyPZI/ExbVy0dduUsZVR9fDSkG2wbFNa+YNauzLxFnaxzs
t0ZLtAXtxtXEvfdaE3igKd2t3gExETXB6EqkW/Cs37tA+8vCcDgeiezqHYp2XnDz
HKTjMEtbp8DWYZuwHEGmzpxdGdkCc8NlR5CLOpKnn3LEqAMMytg94zbNxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhFbRX9487b2fthy6csY2BgDD5HMB8GA1UdIwQY
MBaAFAVvSkPgsGUSR/w2KcYnucOF8MN2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlc5S1EtQ3daUkpIX0RZcHhpZTV3NFh3dzNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yNWI2Y2UtYzIxMS00NjY4LTlhNDct
ZmU1OGY4NGRkM2ZkLzEvQlc5S1EtQ3daUkpIX0RZcHhpZTV3NFh3dzNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yNWI2Y2UtYzIxMS00NjY4LTlhNDctZmU1OGY4NGRkM2Zk
LzEvQlc5S1EtQ3daUkpIX0RZcHhpZTV3NFh3dzNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADbqeTXQB
dXlmAgrAvvkt8qcVg9pNs6Q+qyVxeRWvUYtscjEdtUMsm1vQ6XmehbCglf1WiV58
up2wTnVddkOsh9+0bJxo2qe1Dg0ejO906LBZ+35fi5jzkuP7oLT0+ajeyjUxuJbu
COhuzJ3XgB1RkcRwGqQg1VIXtMvaZwYgMYMCX1iKCInkKdnrcuOs14D2LClEZY0K
9dqdbFhvy/+m7Vq/Z9PXrLT3YXQnND1Ti/alABIDwgAhyAqYbOxjnwKRLlnfZOtR
SqybBZLC0mfrV5ABwnGVokJMOlDzlMJoCV0bx4HCH0ST/jdFmew6lAtiTRj6E935
USyfTg+eoWRXMQ==
-----END CERTIFICATE-----
Generated at Wed Sep 10 17:26:29 2025 by rpki-client