Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
File: BWAG8qGECQDHU2KBIbP7fsW9iek.mft (raw, json)
Hash identifier: 1t242fzDmV1Hy/7/FLicyyKP0hvEZPWEJQz35FrhBcg=
Subject key identifier: E2:F3:A5:A6:C1:5D:EE:54:96:5B:29:E6:E3:8A:31:5F:F9:21:5E:EB
Authority key identifier: 05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
Certificate issuer: /CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Certificate serial: 019A0CA64B7F7AD44CFEF43291A57C164B55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
Manifest number: 0929
Signing time: Wed 22 Oct 2025 16:00:16 +0000
Manifest this update: Wed 22 Oct 2025 16:00:16 +0000
Manifest next update: Thu 23 Oct 2025 16:00:16 +0000
Files and hashes: 1: BWAG8qGECQDHU2KBIbP7fsW9iek.crl (hash: dto14NJQ+KYFLt4hp5Ny5Je1jUSbBKwbOAgr07RyC28=)
2: vUBtInQXQnp6aIJZLEu8LFVUcuw.roa (hash: XecZfooeE59vNEPEzFn7DI60osYJ07EPCzVg5HN86l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:a6:4b:7f:7a:d4:4c:fe:f4:32:91:a5:7c:16:4b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Validity
Not Before: Oct 22 16:00:16 2025 GMT
Not After : Oct 23 16:00:16 2025 GMT
Subject: CN=e2f3a5a6c15dee54965b29e6e38a315ff9215eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0a:1c:8e:a0:53:54:99:61:67:fc:7e:ca:f2:
b8:d2:52:64:83:da:d1:f4:6c:b6:2b:50:aa:3e:50:
b7:1f:94:fb:dc:fd:22:87:0e:dc:f8:a8:5c:13:45:
d6:75:cf:48:d6:bb:a2:13:22:a2:1a:88:12:e8:71:
d6:9a:54:33:27:1e:06:d0:a4:e6:db:50:75:0e:bf:
48:b9:99:7d:3e:3b:22:25:70:2d:19:a7:c7:13:42:
56:ca:17:2a:fb:bd:63:fa:bb:e5:9c:89:44:23:4b:
ad:e0:93:fc:fe:3c:ae:4a:ff:1c:50:68:61:4b:d2:
1f:f5:97:75:fa:63:a1:95:56:20:8e:49:b0:f8:3a:
33:d9:aa:8f:4c:4b:5c:b3:b1:08:82:86:31:46:21:
fb:90:1f:c5:8a:22:a6:f3:5a:ea:8e:9a:3d:da:0c:
ba:ff:3d:18:c9:98:83:7d:ca:6f:0f:44:03:c0:1b:
39:41:0b:8e:ec:7b:59:bd:cb:3c:9d:1f:fc:2e:5c:
f5:a6:9d:08:a4:c0:96:93:45:61:18:1e:35:c2:50:
73:dd:61:16:73:98:5e:a8:ce:ba:67:43:28:92:47:
95:ad:ab:2a:96:aa:6d:8f:88:5e:b7:7c:3f:3b:e2:
3c:16:fc:cf:d4:7e:f2:56:ed:f4:2f:69:3a:5f:95:
54:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F3:A5:A6:C1:5D:EE:54:96:5B:29:E6:E3:8A:31:5F:F9:21:5E:EB
X509v3 Authority Key Identifier:
keyid:05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:01:9b:e9:6b:07:bd:46:79:e1:ad:61:6f:be:0e:52:44:eb:
32:40:43:92:15:d4:f4:80:a8:de:e5:07:a9:e3:0b:91:8e:cd:
ab:72:fb:d7:e8:f1:9b:63:c3:50:60:8f:e7:90:61:9f:4d:67:
54:e8:9e:45:a0:74:4d:18:4a:12:fc:af:50:21:ad:ac:bf:75:
74:23:36:df:6b:86:24:41:65:26:06:af:b8:8f:64:4d:1f:df:
e9:8b:f9:7c:2b:61:71:27:68:00:4f:f1:cf:8d:2a:58:1c:5a:
7a:10:b8:02:eb:bd:8d:b0:bb:12:b6:24:7e:b4:c9:5b:22:78:
42:56:23:da:cb:7c:5d:89:89:d9:20:40:1d:4f:75:52:87:15:
36:85:f8:a3:ad:17:1b:ad:d0:38:88:71:33:6d:c8:0b:6f:04:
57:45:8d:73:46:bb:bb:0f:d8:b1:2a:74:ea:0d:f7:18:62:86:
7a:e7:91:04:92:fd:90:f4:7d:b3:ec:15:4a:8b:76:bc:4e:00:
8f:c1:48:fd:45:3c:a3:cf:d6:6f:e1:41:c6:d0:ed:e2:43:24:
6d:36:a9:c7:f3:9f:fb:ad:38:a4:19:3f:03:a8:90:c2:5e:69:
35:57:e8:cf:7a:a3:9a:2e:e1:b2:ae:29:4c:3e:9f:d7:91:94:
33:7d:40:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoMpkt/etRM/vQykaV8FktVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NjAwNmYyYTE4NDA5MDBjNzUzNjI4MTIxYjNmYjdlYzVi
ZDg5ZTkwHhcNMjUxMDIyMTYwMDE2WhcNMjUxMDIzMTYwMDE2WjAzMTEwLwYDVQQD
EyhlMmYzYTVhNmMxNWRlZTU0OTY1YjI5ZTZlMzhhMzE1ZmY5MjE1ZWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QocjqBTVJlhZ/x+yvK40lJkg9rR
9Gy2K1CqPlC3H5T73P0ihw7c+KhcE0XWdc9I1ruiEyKiGogS6HHWmlQzJx4G0KTm
21B1Dr9IuZl9PjsiJXAtGafHE0JWyhcq+71j+rvlnIlEI0ut4JP8/jyuSv8cUGhh
S9If9Zd1+mOhlVYgjkmw+Doz2aqPTEtcs7EIgoYxRiH7kB/FiiKm81rqjpo92gy6
/z0YyZiDfcpvD0QDwBs5QQuO7HtZvcs8nR/8Llz1pp0IpMCWk0VhGB41wlBz3WEW
c5heqM66Z0MokkeVrasqlqptj4het3w/O+I8FvzP1H7yVu30L2k6X5VUNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLzpabBXe5Ullsp5uOKMV/5IV7rMB8GA1UdIwQY
MBaAFAVgBvKhhAkAx1NigSGz+37FvYnpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQldBRzhxR0VDUURIVTJLQkliUDdmc1c5aWVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC81NzMyZDMtYTUzYy00MWY3LWE2MjMt
NTViM2U2NDc2YTdiLzEvQldBRzhxR0VDUURIVTJLQkliUDdmc1c5aWVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC81NzMyZDMtYTUzYy00MWY3LWE2MjMtNTViM2U2NDc2YTdi
LzEvQldBRzhxR0VDUURIVTJLQkliUDdmc1c5aWVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVQGb6WsH
vUZ54a1hb74OUkTrMkBDkhXU9ICo3uUHqeMLkY7Nq3L71+jxm2PDUGCP55Bhn01n
VOieRaB0TRhKEvyvUCGtrL91dCM232uGJEFlJgavuI9kTR/f6Yv5fCthcSdoAE/x
z40qWBxaehC4Auu9jbC7ErYkfrTJWyJ4QlYj2st8XYmJ2SBAHU91UocVNoX4o60X
G63QOIhxM23IC28EV0WNc0a7uw/YsSp06g33GGKGeueRBJL9kPR9s+wVSot2vE4A
j8FI/UU8o8/Wb+FBxtDt4kMkbTapx/Of+604pBk/A6iQwl5pNVfoz3qjmi7hsq4p
TD6f15GUM31A/g==
-----END CERTIFICATE-----
Generated at Wed Oct 22 18:58:34 2025 by rpki-client