Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
File: BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft (raw, json)
Hash identifier: QWRmj505kYfXfe/yesikVwwkUF8SxGw191hr/shRoug=
Subject key identifier: BB:F2:2E:62:B9:0C:7B:5E:24:A2:12:18:EA:1D:F4:36:D0:A6:F6:3B
Authority key identifier: 05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
Certificate issuer: /CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Certificate serial: 019927B27E9CBCA18B83CE07B0E6388DB5B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
Manifest number: 0677
Signing time: Mon 08 Sep 2025 05:00:33 +0000
Manifest this update: Mon 08 Sep 2025 05:00:33 +0000
Manifest next update: Tue 09 Sep 2025 05:00:33 +0000
Files and hashes: 1: B6FxjiJOC6_Birv76wylcyDexTM.roa (hash: eGhXe2MadeqSm3dFdd2yllOqHv5uGkbMvrl6C4hJsTU=)
2: BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl (hash: WS3zDdfU3Dz5uhM4vkaxAhsjqgjh9fGIYvCvwZ+cgqA=)
3: Jkosv2xFFNQ2gORMGJ-Rj1JTgqk.roa (hash: V03sqShQTC3KKVEiSIPpDzr6IAR7BOwlpV6pUG5aI+w=)
4: PU3RtVE8bUTLDau3UULyJxnwYvk.roa (hash: rurDzg32C4cm1zQE6cZCxEDJG3aKAFEXLx56a9lYAvQ=)
5: TPqMfRSK5sIipm7-2Mw_-o6t_pE.roa (hash: DbvKLEpzC4KlaBAFfc8W2Orz87Jz73d6hIvvLvcnSeI=)
6: aFnhQawEO18IQ3GTJ01kkL1iiO8.roa (hash: lmQ4l6Xz/ufxEDRo15j0d1wdcSctSZ/L1+X4hlqiZ0E=)
7: i5Cva7AkVQeMjYySCI1cSGulBFU.roa (hash: OqdQgQr223XTYw+nW6EEK96kWz2kctHBvYApbJ8V5SM=)
8: orwBdnVfFaxWFzZXqCDe7xYVF-0.roa (hash: s5h3MlDKvwqoRseQHdYHw8t3JkEhjpPj+FNdQWzBxyg=)
9: zfGaREwozQlPDznadYm5iZBdTbo.roa (hash: BQ/Qo3WVP+Q/nW3nNfYM3evPzNFHtG1U5B77mp2vN9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:b2:7e:9c:bc:a1:8b:83:ce:07:b0:e6:38:8d:b5:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Validity
Not Before: Sep 8 05:00:33 2025 GMT
Not After : Sep 9 05:00:33 2025 GMT
Subject: CN=bbf22e62b90c7b5e24a21218ea1df436d0a6f63b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c3:7b:7c:83:f5:37:69:43:1a:f3:a1:50:8c:
08:7c:03:1e:07:53:d5:0a:71:33:b5:3c:54:95:df:
50:01:82:76:57:80:1e:7a:67:2c:7a:90:51:0d:14:
8f:92:06:1e:fc:f0:be:2f:49:c9:39:b9:90:e4:cf:
4a:00:98:ed:8b:62:1f:cd:66:a7:25:05:55:e8:7c:
a7:74:8f:7d:35:98:5f:d5:ab:f5:03:48:39:21:45:
bb:ec:85:bc:98:99:ad:36:d2:4b:b5:40:e9:77:cb:
71:d6:1a:d3:9a:bc:bf:91:68:a8:34:11:91:2f:f3:
a1:ea:be:db:9d:09:9a:a3:cb:86:bd:70:6e:ec:90:
90:a3:e2:c5:4e:13:b5:93:df:4e:8d:8f:9d:93:16:
d2:78:3f:98:61:bb:47:65:35:8b:2b:75:b9:d0:91:
08:1b:9e:03:cc:62:df:99:63:af:cc:d4:6e:ad:d0:
e3:d8:06:67:08:ff:68:ba:02:4e:54:03:15:09:00:
69:12:b8:0e:34:4f:e6:b9:d8:d0:99:10:12:a0:92:
ce:d1:5c:38:26:82:5c:ea:3c:87:ce:78:8a:58:29:
ee:1f:44:f5:48:f0:85:aa:77:d7:86:f7:7e:da:60:
5f:ef:de:59:e0:d2:e8:b9:63:19:9b:de:9e:a9:86:
68:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F2:2E:62:B9:0C:7B:5E:24:A2:12:18:EA:1D:F4:36:D0:A6:F6:3B
X509v3 Authority Key Identifier:
keyid:05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:68:d8:d7:44:b5:1f:e9:f9:36:85:0d:68:08:97:51:64:38:
f2:7b:9d:c3:f5:95:91:eb:56:8c:1d:a1:31:91:f6:2d:a6:35:
ad:12:c2:e1:c1:a3:40:b4:b5:9e:88:b8:bf:2a:05:e7:d0:fb:
22:94:0a:09:bf:d1:cb:1a:7a:e7:e5:1e:83:d7:68:35:e8:7c:
0f:b9:2b:9b:d8:0a:7c:79:4f:0d:a8:39:47:f2:2c:dd:11:a3:
40:79:88:32:6d:13:7d:c4:f3:60:7c:dd:ab:15:8e:ca:19:b8:
60:e0:19:ab:43:b6:0e:7e:f5:ce:2b:67:13:da:f4:49:74:4f:
5e:f1:db:a7:b9:8b:a7:64:63:d7:8c:5a:e5:93:fb:9a:a1:c1:
7d:88:61:97:cf:45:c5:ca:16:b6:c6:90:bb:1b:96:95:b8:7b:
d6:5b:3c:1e:cd:83:b4:5c:d6:c6:34:e4:86:fc:d5:f8:78:c4:
6b:49:a1:ea:34:e2:e2:3d:06:8f:c8:b4:16:67:b6:ec:dc:9e:
f6:20:74:cf:28:b4:8c:12:c9:2e:cf:43:b6:e5:b1:a8:b9:fe:
e5:4f:eb:2e:09:f7:0c:5b:06:d3:83:92:25:cf:12:b5:59:b9:
53:51:38:cf:e6:ec:f0:0b:d5:7d:6a:42:bd:a8:74:49:cb:dc:
44:35:80:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:05:15 2025 by rpki-client