Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
File: BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft (raw, json)
Hash identifier: rNotANQ2kRIwdqHfFSnviXiU6ktARER/TT38zjbQp1s=
Subject key identifier: 86:C8:11:9D:A1:89:2F:0A:38:F6:C2:D1:B8:65:EA:C6:9A:FF:A5:E5
Authority key identifier: 07:03:3A:91:0F:CF:2C:1B:15:97:7A:18:AC:E7:D8:57:BA:58:B9:AA
Certificate issuer: /CN=07033a910fcf2c1b15977a18ace7d857ba58b9aa
Certificate serial: 0199233179AEFF4F2FFD964753B50E4D6C36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
Manifest number: 0B01
Signing time: Sun 07 Sep 2025 08:01:08 +0000
Manifest this update: Sun 07 Sep 2025 08:01:08 +0000
Manifest next update: Mon 08 Sep 2025 08:01:08 +0000
Files and hashes: 1: 68akK538AgBQpzV9ol21s3i1l5E.roa (hash: FVtdNzWjJOk17abGuskk0fG+irWuLqKU8WFk4kXyjGs=)
2: BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl (hash: 0VdWUThpTHlnx+m0704roA0bs+XMHIWjQOnsOlGDhCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:79:ae:ff:4f:2f:fd:96:47:53:b5:0e:4d:6c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07033a910fcf2c1b15977a18ace7d857ba58b9aa
Validity
Not Before: Sep 7 08:01:08 2025 GMT
Not After : Sep 8 08:01:08 2025 GMT
Subject: CN=86c8119da1892f0a38f6c2d1b865eac69affa5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3d:8d:36:d6:94:b2:f1:86:78:a6:63:4e:95:
bd:9f:cb:08:4f:6f:03:6d:6f:3b:f9:91:25:bb:b8:
97:33:86:03:04:e1:de:2a:96:b5:ad:f7:1e:d8:8b:
e3:cd:58:8d:c8:5d:e0:ae:eb:14:6e:de:65:9b:cd:
8b:70:bd:2b:57:ce:cf:10:4b:71:41:17:71:45:21:
69:33:21:c2:b8:7a:63:e3:24:b8:07:d3:2e:87:80:
d3:28:bc:97:65:3f:d6:83:0b:5c:81:f6:35:33:0c:
fc:07:08:dd:43:46:e2:d7:ed:9f:55:dd:70:d0:78:
3d:0f:19:92:37:88:b1:73:35:09:b7:6a:7b:f2:f9:
f7:f6:9f:bd:c4:e7:57:39:af:b4:2e:d4:31:0c:32:
19:6f:c8:4c:53:aa:8d:69:44:a0:c9:2f:aa:5d:d4:
b7:dd:e3:e9:b0:e6:46:5a:a0:6c:46:84:ed:95:9e:
41:e7:35:3f:75:8c:dd:2f:a3:ff:af:e4:45:fd:39:
0e:45:6b:20:68:b2:0c:c8:7a:99:21:a3:27:67:9b:
f7:2f:6c:dd:6b:7b:ed:ae:ff:8d:18:e0:1e:4b:da:
d6:45:05:e9:4e:64:4c:59:ea:1b:b7:15:40:1e:9b:
17:79:45:ac:a7:74:78:24:3d:49:b9:f8:18:51:6c:
30:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C8:11:9D:A1:89:2F:0A:38:F6:C2:D1:B8:65:EA:C6:9A:FF:A5:E5
X509v3 Authority Key Identifier:
keyid:07:03:3A:91:0F:CF:2C:1B:15:97:7A:18:AC:E7:D8:57:BA:58:B9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c3:77:50:d6:ab:a3:29:08:4c:c4:23:c3:e8:8b:04:da:f5:
03:30:9b:0d:27:88:22:22:f7:b0:82:fe:58:2e:6b:50:80:93:
f1:5b:12:82:e5:b7:ac:98:0d:72:85:10:94:fb:1b:1b:3c:c2:
34:58:05:68:c5:97:72:4e:dc:4c:2b:62:8d:66:56:78:f8:96:
5f:34:cf:b2:96:42:5e:83:81:a0:6f:79:da:75:e1:3a:e2:0f:
fa:df:3b:ed:cd:2c:a6:35:29:e1:f9:cc:48:84:57:88:30:cb:
a1:b3:cf:40:3d:3e:89:f5:2a:45:13:1e:4d:f0:d1:18:33:7e:
ea:ca:08:3f:90:f4:b7:26:54:11:e7:a7:e4:8c:fa:ba:ec:1b:
02:06:0a:10:4b:6d:38:ae:8d:fb:dc:dc:df:cd:5c:77:66:2c:
93:75:54:d5:47:f0:8f:e8:c4:ba:2d:f1:4f:3a:c1:f5:26:a3:
9e:29:55:70:af:58:3c:34:6a:b3:b8:95:1b:df:4e:c4:64:1a:
b1:94:e4:e0:8e:5f:48:e6:b3:8b:19:25:9d:1e:ac:21:8f:ca:
87:fb:65:e6:a8:10:38:c3:64:6d:c0:b8:35:87:34:b4:de:8a:
95:e4:53:5c:5a:9a:c0:31:eb:77:42:6d:5b:ac:34:02:ea:24:
55:3a:ae:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:53:21 2025 by rpki-client