Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
File: bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft (raw, json)
Hash identifier: AAyWcFVlnaSxCcsA8e4SAZOA+wpsZumMKbT8Q0l16ak=
Subject key identifier: 88:9B:67:AA:1D:E4:31:4C:99:AD:BA:4C:70:51:FB:69:A3:DA:5E:E1
Authority key identifier: 6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
Certificate issuer: /CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Certificate serial: 019A21ADF222BF6092281DF4E9E7C1168A76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
Manifest number: 0DD6
Signing time: Sun 26 Oct 2025 18:00:39 +0000
Manifest this update: Sun 26 Oct 2025 18:00:39 +0000
Manifest next update: Mon 27 Oct 2025 18:00:39 +0000
Files and hashes: 1: CNEWTRKouN1ztdllhCMhjhdKKHg.roa (hash: aqhxq+qj3sPvgTV0jZeMkrVOr4/8ei7UkGfqQsH5Ljo=)
2: Jaj49FDIg9x74-Mgv5pjh9hL3VA.roa (hash: RiqG1dHCuH2e+rEOq+su9EZpKh6AH03adatnHOfLKXM=)
3: bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl (hash: oPVPtbKDhVPQ3+Lj1NH5YAfmjFZ3cJb66bVhV0e6YqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 18:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:f2:22:bf:60:92:28:1d:f4:e9:e7:c1:16:8a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Validity
Not Before: Oct 26 18:00:39 2025 GMT
Not After : Oct 27 18:00:39 2025 GMT
Subject: CN=889b67aa1de4314c99adba4c7051fb69a3da5ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4a:e4:d2:20:4b:58:e2:70:9b:c1:90:b2:81:
e8:b3:3e:20:a7:ec:2e:f5:6a:dd:f7:1b:17:3e:7c:
68:8f:c5:16:c8:6e:7a:ae:b1:fc:fc:0a:96:85:28:
02:9d:7e:51:c3:33:2e:9e:2b:66:dc:d6:95:c0:b5:
22:6a:ca:78:bc:62:44:c2:2c:d2:eb:1b:8e:59:dd:
b6:87:5c:fd:39:f2:8f:ef:10:1b:7d:b9:35:0b:2e:
e0:9f:cb:23:a1:81:8e:eb:94:12:ae:f6:8f:ec:65:
14:0e:f2:df:f0:3e:1a:4e:66:57:0c:89:b2:bb:b4:
9d:8b:6f:cf:d2:ca:54:a3:f8:cb:8e:ab:50:82:54:
2d:68:fa:7a:1a:ac:94:80:e5:e7:d0:db:8f:e2:3f:
cb:e3:ce:55:97:3e:43:d0:f9:7d:88:17:89:41:eb:
9a:4d:5d:6c:fc:d3:6f:1a:eb:18:59:c8:ee:0f:15:
8f:99:1d:28:60:b3:83:23:6b:9f:6e:b5:08:4c:1d:
c6:dc:68:c0:9c:af:e3:fd:dc:c2:f2:ec:d2:1d:c4:
47:00:db:6f:00:d9:a0:b9:93:c6:78:fa:39:a6:9d:
62:5f:ed:82:79:d8:2d:ed:e2:2b:ea:79:62:e3:fc:
93:28:7e:f1:77:d7:67:43:5b:78:73:d8:d2:ed:a5:
b1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9B:67:AA:1D:E4:31:4C:99:AD:BA:4C:70:51:FB:69:A3:DA:5E:E1
X509v3 Authority Key Identifier:
keyid:6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:7b:30:5f:25:72:eb:96:83:ef:62:c1:4f:e8:db:1b:2f:2a:
02:90:64:56:d5:72:fb:af:14:5d:62:69:09:e9:de:02:4d:c8:
5e:50:2a:1e:c6:a1:bd:a7:81:e0:8a:f1:80:45:c2:22:36:59:
fa:f0:f9:bd:cb:44:59:87:b8:19:43:ac:88:68:72:e9:e3:86:
49:29:1c:6b:20:57:9a:cd:e2:3f:c6:2c:2a:b2:ef:e1:c4:b5:
bb:7e:c3:21:e3:e8:1a:12:0c:86:fe:60:d5:a9:77:3d:94:ea:
07:59:49:1c:6f:05:3a:f7:1b:0d:6b:79:d4:49:54:e9:66:7a:
d6:31:1b:96:41:d1:9b:fb:84:7f:6c:c0:d9:f9:7b:41:89:01:
e4:f5:4f:37:07:5b:34:e5:3b:6a:fe:59:90:71:c3:3d:7d:49:
1d:95:6b:f5:c8:88:15:1e:36:03:50:20:62:d5:d2:86:aa:23:
07:95:41:12:5c:1e:b1:61:46:63:59:36:28:31:5d:5a:86:9a:
a7:9c:c8:91:7b:d5:11:30:fb:76:ce:06:43:9c:fc:cb:2e:f7:
dc:ee:23:1d:9d:3d:cc:12:47:d2:ce:c9:d8:f4:75:a0:97:e7:
20:06:81:b0:45:42:e1:f0:92:1f:ce:d8:40:cb:05:62:fb:53:
cf:ba:53:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:20:57 2025 by rpki-client