Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
File: BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft (raw, json)
Hash identifier: UohuwcX84TZMqK2C/1cZJmSO7HQfi6y1yFWsTSTgH/E=
Subject key identifier: E3:11:68:45:3F:0D:12:A2:07:7C:EC:B8:61:91:AD:1E:35:AE:9C:16
Authority key identifier: 07:03:3A:91:0F:CF:2C:1B:15:97:7A:18:AC:E7:D8:57:BA:58:B9:AA
Certificate issuer: /CN=07033a910fcf2c1b15977a18ace7d857ba58b9aa
Certificate serial: 0197C98270B4762921EF0879574FA16B0DCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
Manifest number: 0A4E
Signing time: Wed 02 Jul 2025 05:00:58 +0000
Manifest this update: Wed 02 Jul 2025 05:00:58 +0000
Manifest next update: Thu 03 Jul 2025 05:00:58 +0000
Files and hashes: 1: 68akK538AgBQpzV9ol21s3i1l5E.roa (hash: FVtdNzWjJOk17abGuskk0fG+irWuLqKU8WFk4kXyjGs=)
2: BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl (hash: 4/3Me+yp3LToM0ksJqTaWk+/lrWXjZbezS/ljt4Eamo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:82:70:b4:76:29:21:ef:08:79:57:4f:a1:6b:0d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07033a910fcf2c1b15977a18ace7d857ba58b9aa
Validity
Not Before: Jul 2 05:00:58 2025 GMT
Not After : Jul 3 05:00:58 2025 GMT
Subject: CN=e31168453f0d12a2077cecb86191ad1e35ae9c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f0:48:9b:ad:ca:16:6c:7c:a1:53:85:fe:4c:
2f:e6:37:86:18:f3:0e:17:d9:82:d6:7a:b6:c9:b9:
f4:d7:bd:38:fe:ec:3b:f1:6c:ab:e4:4e:47:f4:8b:
17:08:4c:3d:fb:90:ce:ba:ce:6e:7a:b8:51:2d:df:
9c:24:fd:bc:b3:38:c0:7b:ba:8e:84:f2:94:60:02:
d7:45:d8:52:11:07:f4:02:14:57:7a:4e:df:08:72:
30:a6:b5:e8:d6:6a:5c:90:ad:f2:d4:bc:00:4d:de:
95:59:75:6e:f5:87:12:96:b6:61:b7:97:f6:98:53:
1e:01:7f:cb:95:9e:2d:6c:fa:f4:a8:60:bb:f2:2f:
91:38:c7:67:6f:7b:a9:87:3e:25:07:b2:42:eb:32:
59:74:ea:3b:8c:f2:f8:bc:a3:c1:73:b6:52:b7:8f:
f2:2a:01:c3:f6:06:da:ce:ff:cb:8b:d2:3b:28:54:
0b:89:84:1a:f3:38:40:94:5d:3c:c4:ec:a8:78:21:
91:1f:8c:f6:23:9c:5c:04:d6:40:aa:d9:a8:90:b3:
11:72:98:02:7e:05:da:9a:38:e8:ab:6a:e3:ca:84:
2d:07:c0:27:e0:7a:77:05:82:ca:85:78:b8:73:59:
22:34:a0:53:c1:f7:3f:f2:5e:bb:ca:3c:a8:c9:c2:
04:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:11:68:45:3F:0D:12:A2:07:7C:EC:B8:61:91:AD:1E:35:AE:9C:16
X509v3 Authority Key Identifier:
keyid:07:03:3A:91:0F:CF:2C:1B:15:97:7A:18:AC:E7:D8:57:BA:58:B9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:94:a7:ac:55:53:de:cd:f3:5c:22:ab:5c:b3:3e:0b:ed:ed:
a7:10:c5:58:66:f4:f7:fe:8a:17:f7:fc:bc:73:fe:ce:55:e3:
fe:8f:98:83:34:66:85:9f:84:24:10:74:a9:21:af:f7:00:03:
7e:88:84:b3:ba:cf:3c:d0:e9:26:69:2f:c5:2a:ca:1c:20:96:
28:62:a9:9a:0d:4c:14:a6:6d:cc:0a:a0:3b:08:51:15:07:0d:
73:f9:b6:97:ea:2f:71:05:ed:c2:f6:ef:6a:0b:5d:56:ec:a6:
51:24:ce:d2:81:92:6a:e5:77:72:fb:d0:4a:6a:9e:9e:00:b5:
34:91:d4:0c:ea:c5:ac:b6:c9:26:7a:d4:fc:20:6f:2a:9c:da:
79:22:2d:c1:73:85:e3:03:74:ab:4a:a2:93:4c:cb:60:7f:5f:
43:ac:38:e2:7d:8f:c7:bb:6e:b5:93:a3:6e:c8:da:b4:f2:03:
cb:61:68:a7:75:c0:55:ff:30:ca:40:0b:86:c6:8c:f9:a2:60:
46:63:e7:4f:8f:ce:a1:5a:0f:12:f9:e3:d2:95:4d:4f:5f:dc:
44:db:f8:f1:fb:a3:1a:b8:4f:e4:9c:cb:af:67:8e:59:69:ae:
87:26:ce:ec:1f:64:f2:56:a6:ac:70:f7:15:21:c8:5a:d6:f4:
bc:6d:0b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:13:45 2025 by rpki-client