Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
File: BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft (raw, json)
Hash identifier: ELa/mQ1Zm0jqnpwuqU5k9iyfHE0U2BJ+UnYSTWYNRvY=
Subject key identifier: 46:C9:37:6A:81:A4:C2:05:39:88:C3:76:F8:EB:6E:68:57:AB:76:A7
Authority key identifier: 05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
Certificate issuer: /CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Certificate serial: 019A1CF554BDC7234C42533ED4FEC4DA1E0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
Manifest number: 06F6
Signing time: Sat 25 Oct 2025 20:00:31 +0000
Manifest this update: Sat 25 Oct 2025 20:00:31 +0000
Manifest next update: Sun 26 Oct 2025 20:00:31 +0000
Files and hashes: 1: B6FxjiJOC6_Birv76wylcyDexTM.roa (hash: eGhXe2MadeqSm3dFdd2yllOqHv5uGkbMvrl6C4hJsTU=)
2: BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl (hash: zLpDIA7oRKhKsuFfbipG+6XsvD5/x56wOzVMdRsP/oQ=)
3: Jkosv2xFFNQ2gORMGJ-Rj1JTgqk.roa (hash: V03sqShQTC3KKVEiSIPpDzr6IAR7BOwlpV6pUG5aI+w=)
4: PU3RtVE8bUTLDau3UULyJxnwYvk.roa (hash: rurDzg32C4cm1zQE6cZCxEDJG3aKAFEXLx56a9lYAvQ=)
5: TPqMfRSK5sIipm7-2Mw_-o6t_pE.roa (hash: DbvKLEpzC4KlaBAFfc8W2Orz87Jz73d6hIvvLvcnSeI=)
6: aFnhQawEO18IQ3GTJ01kkL1iiO8.roa (hash: lmQ4l6Xz/ufxEDRo15j0d1wdcSctSZ/L1+X4hlqiZ0E=)
7: i5Cva7AkVQeMjYySCI1cSGulBFU.roa (hash: OqdQgQr223XTYw+nW6EEK96kWz2kctHBvYApbJ8V5SM=)
8: orwBdnVfFaxWFzZXqCDe7xYVF-0.roa (hash: s5h3MlDKvwqoRseQHdYHw8t3JkEhjpPj+FNdQWzBxyg=)
9: zfGaREwozQlPDznadYm5iZBdTbo.roa (hash: BQ/Qo3WVP+Q/nW3nNfYM3evPzNFHtG1U5B77mp2vN9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:f5:54:bd:c7:23:4c:42:53:3e:d4:fe:c4:da:1e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Validity
Not Before: Oct 25 20:00:31 2025 GMT
Not After : Oct 26 20:00:31 2025 GMT
Subject: CN=46c9376a81a4c2053988c376f8eb6e6857ab76a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d3:47:d7:e0:63:3e:c8:22:0d:80:37:a8:34:
9d:44:ed:93:ef:36:3e:57:ab:be:02:3b:b0:14:0e:
56:c8:72:cb:be:f5:fe:71:44:7e:fb:1d:57:5e:ac:
1b:cb:c1:da:1d:e1:24:67:b8:d6:8e:19:3d:3d:31:
af:12:54:7b:02:97:18:fc:6a:19:09:bb:af:e1:b9:
3a:84:7d:a8:eb:60:24:fd:0c:03:28:e4:ca:29:37:
9d:44:ee:49:70:3c:c5:4e:7d:d3:97:61:d3:72:cd:
9f:41:16:da:00:58:1e:82:5d:f0:22:83:cc:20:44:
f0:4d:83:fc:a4:f2:af:12:cf:a4:80:89:c2:de:7d:
5f:ea:d5:8d:82:bb:f8:68:9b:95:1e:a0:2c:7f:92:
08:cd:92:25:0c:a0:e6:ab:6a:b8:de:fd:9c:6f:5b:
a2:ae:75:18:7c:5b:0b:4d:bb:c3:f7:2d:41:48:35:
cc:76:89:25:07:21:25:63:d1:b7:a2:37:78:29:a5:
97:fc:4a:01:b1:8d:40:5b:36:cf:48:28:42:02:f3:
0c:47:f4:27:0f:c1:6e:92:0c:2c:bb:72:8d:35:cb:
ea:57:70:c8:cc:a3:e0:67:fd:a6:aa:0d:31:a2:7c:
60:2f:fd:c9:fe:6f:a6:c3:d1:17:93:51:73:86:73:
f1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C9:37:6A:81:A4:C2:05:39:88:C3:76:F8:EB:6E:68:57:AB:76:A7
X509v3 Authority Key Identifier:
keyid:05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a3:5e:ec:07:e8:f9:7a:ba:9d:d7:33:2b:80:1f:9b:4e:4b:
5c:66:95:d0:a2:87:8e:fb:3f:46:62:1f:43:a6:38:06:4d:9f:
a5:c1:e1:f8:85:d0:9a:ad:be:d8:b2:0e:a0:48:93:2c:19:cb:
dc:9f:15:63:fd:13:1e:35:72:bb:38:5f:a0:18:70:ef:bf:1b:
33:ce:85:76:fb:b6:a7:c3:2a:c8:4b:e6:31:1b:57:80:36:29:
99:d6:04:1c:15:b4:97:2b:d0:40:dc:63:93:27:81:02:de:56:
eb:fb:42:82:51:d7:6a:c1:8f:d2:e7:62:1e:e1:18:48:12:b9:
dc:a5:78:54:ce:7a:b0:f0:c5:80:47:67:82:8e:30:9c:0e:fa:
6e:0b:bb:61:3f:22:2f:91:7d:85:52:ec:97:f0:f3:e5:7a:83:
43:2e:88:e2:00:1d:d6:da:6b:c2:6a:69:f0:49:78:27:42:d3:
c0:fc:e1:31:72:1b:16:c2:b8:d7:74:4d:f4:86:d6:a0:91:e0:
cb:07:2e:d3:f2:a7:bd:48:29:fb:cb:c4:c4:a2:00:42:d0:97:
22:79:3d:86:1e:0e:48:a8:cb:27:86:42:d8:24:82:7e:66:97:
60:9f:ed:6b:91:14:72:1a:1c:da:db:f3:7e:f2:08:f7:c5:93:
e6:42:c7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 22:29:27 2025 by rpki-client