Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
File: BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft (raw, json)
Hash identifier: d4nErZq0f1j4/TkJvwLNaeZ3/XfuP796y3TBKGwd/8c=
Subject key identifier: 67:18:5D:7A:D0:2D:DF:B4:A6:20:36:86:8E:6E:8A:A9:8A:E9:5B:D8
Authority key identifier: 07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA
Certificate issuer: /CN=0701b929fd9edbabae35dd44adc161d7d470b1fa
Certificate serial: 01975490DE96C1F0893901F0136FD570E4EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
Manifest number: 1582
Signing time: Mon 09 Jun 2025 12:01:09 +0000
Manifest this update: Mon 09 Jun 2025 12:01:09 +0000
Manifest next update: Tue 10 Jun 2025 12:01:09 +0000
Files and hashes: 1: BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl (hash: nVyZyODgVbGRWPJdhiW1ri0I0wWe0aCXdEayewcUP/o=)
2: ytt6NDRPw01MpgKIPHZI-KhTqFM.roa (hash: Qz/7LnFWYN8eKNmOmwVT183VYftTGjaTvg3yJfBkJTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:90:de:96:c1:f0:89:39:01:f0:13:6f:d5:70:e4:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0701b929fd9edbabae35dd44adc161d7d470b1fa
Validity
Not Before: Jun 9 12:01:09 2025 GMT
Not After : Jun 10 12:01:09 2025 GMT
Subject: CN=67185d7ad02ddfb4a62036868e6e8aa98ae95bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ab:4b:25:d5:e4:dd:9b:f1:e1:1d:ac:71:b8:
bc:04:89:0e:ac:4a:53:a1:79:c9:58:43:9b:09:ee:
ee:e0:f2:c1:9d:4f:77:0a:7b:2b:d7:e5:be:b2:f0:
9d:6d:95:db:cc:43:2b:77:ec:f6:7a:ab:af:25:44:
d5:1e:0f:a0:56:44:07:1b:89:29:26:40:e0:19:79:
59:2b:31:ee:04:3a:d3:eb:1f:ea:b7:d0:af:88:aa:
bc:50:d1:ce:cf:86:34:64:fb:01:8d:4d:3b:ec:c4:
5b:eb:1f:5a:83:52:b9:23:fd:9c:ca:54:1f:d4:d8:
0e:e5:55:3e:59:4b:4d:f3:06:60:85:67:4d:49:6c:
e6:20:78:95:23:7a:28:d6:3b:91:b7:f5:2e:dc:b5:
95:73:2e:59:6e:b3:78:de:41:d8:51:dc:e6:02:36:
c7:70:30:01:01:f4:05:fc:23:26:4f:a9:f9:b1:f2:
7f:0f:91:1e:e4:41:f6:32:b2:54:e5:53:85:82:ff:
9d:2b:f0:18:03:77:3c:87:39:8d:4b:91:e8:f8:43:
e3:fe:8f:5b:6e:ab:e8:06:d9:6e:22:ed:d6:a6:e0:
88:fd:5d:02:64:9c:f4:96:d1:50:bc:34:d6:d5:d1:
60:16:58:77:5a:27:fa:4c:e9:4d:e9:b4:65:16:ba:
7b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:18:5D:7A:D0:2D:DF:B4:A6:20:36:86:8E:6E:8A:A9:8A:E9:5B:D8
X509v3 Authority Key Identifier:
keyid:07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:cc:04:59:c4:dd:f4:7f:44:90:e8:5f:03:93:fc:05:99:e2:
9a:39:f7:5e:80:0d:06:a7:d0:75:09:f6:27:e6:be:78:dc:70:
f4:78:7f:3f:12:58:2f:89:6b:e0:05:89:7d:8a:74:f3:d5:15:
00:67:97:5f:5b:f2:79:69:e8:e2:64:8f:03:5d:4d:d0:df:bb:
8a:8e:ba:ef:da:00:26:2d:e4:70:ef:d1:b0:43:9d:54:08:d8:
b5:67:2a:f2:38:71:4b:4f:31:0a:a8:70:65:cc:5b:88:4c:f4:
52:aa:88:80:f1:06:d9:ae:ac:4c:4a:c6:74:f2:33:9b:55:2e:
45:48:10:61:b8:d8:35:2a:7d:32:20:c0:90:ee:f1:b8:7e:1d:
26:e1:1c:bd:30:3c:31:c8:9e:57:20:9e:6d:d7:8a:3e:02:bc:
b0:0d:5c:bd:04:1f:ea:fb:82:96:26:06:a4:39:2e:8e:3f:d2:
61:df:14:bf:33:40:51:59:98:1a:ab:a6:a0:eb:5b:22:fe:3b:
d5:03:55:fa:a6:ec:99:dd:79:e2:62:72:4e:4a:06:86:23:88:
2c:48:15:db:ef:ce:7d:c7:15:e8:50:4e:2c:e3:1e:2a:b1:98:
f9:65:90:d2:c4:a6:5d:87:d1:30:df:96:98:52:ed:ee:ad:27:
bc:96:66:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:41:24 2025 by rpki-client