Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
File: BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft (raw, json)
Hash identifier: 0WgtMbvcVmioPpgcYK0JrC7PLSeW9dzAQiHxEeOC3bk=
Subject key identifier: AB:CC:22:61:1D:47:DF:C0:73:12:5E:00:D7:A2:D1:50:34:BB:ED:19
Authority key identifier: 07:03:3A:91:0F:CF:2C:1B:15:97:7A:18:AC:E7:D8:57:BA:58:B9:AA
Certificate issuer: /CN=07033a910fcf2c1b15977a18ace7d857ba58b9aa
Certificate serial: 019A7149E4270063C0A027512FAB1DF98132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
Manifest number: 0BAE
Signing time: Tue 11 Nov 2025 05:00:59 +0000
Manifest this update: Tue 11 Nov 2025 05:00:59 +0000
Manifest next update: Wed 12 Nov 2025 05:00:59 +0000
Files and hashes: 1: 68akK538AgBQpzV9ol21s3i1l5E.roa (hash: FVtdNzWjJOk17abGuskk0fG+irWuLqKU8WFk4kXyjGs=)
2: BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl (hash: A3LYkGEtItJ6f1RpEZuhVngjceBTnsuU3dmAmbIBCjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:e4:27:00:63:c0:a0:27:51:2f:ab:1d:f9:81:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07033a910fcf2c1b15977a18ace7d857ba58b9aa
Validity
Not Before: Nov 11 05:00:59 2025 GMT
Not After : Nov 12 05:00:59 2025 GMT
Subject: CN=abcc22611d47dfc073125e00d7a2d15034bbed19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ef:e4:05:63:8b:90:4a:72:29:e5:dd:03:50:
70:c8:9e:e1:28:50:2c:e0:6f:34:9b:9f:7d:2b:f7:
09:28:92:2d:48:18:5d:98:3d:4d:51:10:e8:63:41:
03:23:d0:4a:74:9c:8f:98:81:ec:d1:35:a4:31:3a:
e5:32:88:27:e5:a2:cd:55:8b:96:b9:b8:24:be:13:
c3:41:83:ad:c3:42:01:d1:c4:b0:9d:3f:96:bf:51:
6b:14:84:61:e0:2f:a1:57:3a:3c:f4:8e:c6:fb:5c:
49:a7:7c:38:83:41:98:44:ac:28:8c:d7:41:b9:0a:
6d:3c:63:d8:69:f2:b2:29:03:b1:de:e7:56:fe:86:
d3:8d:03:e9:6c:ae:83:9c:88:1d:df:1d:c9:02:e0:
59:ab:9b:39:db:2f:04:03:76:64:b1:02:49:79:79:
70:f4:fb:4c:19:4f:28:73:4e:79:4e:38:c6:2b:e3:
d6:43:04:2d:ef:99:74:01:e4:f8:6a:22:90:2e:12:
af:fc:08:6e:8a:bf:c3:b0:40:47:69:19:57:68:b6:
fa:20:54:d7:33:b8:93:91:94:43:61:7a:dc:fe:34:
ad:f1:7c:55:75:e9:3e:12:ed:fd:89:e8:6a:30:57:
f0:f1:c4:3a:7b:d1:04:bd:a0:df:2f:a9:69:f8:be:
77:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CC:22:61:1D:47:DF:C0:73:12:5E:00:D7:A2:D1:50:34:BB:ED:19
X509v3 Authority Key Identifier:
keyid:07:03:3A:91:0F:CF:2C:1B:15:97:7A:18:AC:E7:D8:57:BA:58:B9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7f:fb:f9:54:bd:26:7a:c5:70:7a:d2:7d:b5:7c:99:cc:25:
46:8d:b9:fa:77:72:fe:bf:af:d5:91:09:eb:80:ec:79:ae:6b:
32:a3:37:18:1f:44:37:0c:a2:4d:02:dc:c0:21:e4:fb:e8:a3:
f7:6c:84:9b:8f:70:a0:95:32:3d:90:6c:26:7e:34:34:c9:44:
55:16:52:f6:09:4c:15:72:df:ec:3f:e8:91:0b:ce:ba:6a:e4:
d2:55:f7:a0:3d:b9:87:4b:98:fa:a5:c1:26:3d:db:5d:84:af:
62:25:2f:02:43:d3:bd:9c:56:1d:f5:f6:0c:09:ff:8a:5e:08:
c6:8d:3e:a2:bd:c1:ec:31:5f:94:fd:46:a9:97:d6:73:34:a7:
30:2d:80:6c:e6:cb:fa:6a:83:3b:46:20:a3:f1:c0:7f:15:22:
dd:c9:6d:c8:b0:31:a6:1a:17:4a:51:ea:bf:13:c2:cb:52:56:
f3:af:e4:0c:10:f0:74:52:7d:97:fe:82:90:92:e5:d3:45:f8:
8a:65:9b:bc:48:43:52:6c:ee:b9:86:12:db:a4:7c:ce:84:8e:
31:d4:99:d5:e2:67:19:da:e4:9f:01:ea:31:4d:c7:50:9a:e6:
f9:04:07:59:08:ec:e2:c4:b3:ba:2f:19:72:b5:8a:61:3b:58:
ed:ee:84:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:36:20 2025 by rpki-client