Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
File: BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft (raw, json)
Hash identifier: x9sISn6twreNr2xDkXuhbkm/uhr67aeBYiESnexk6XI=
Subject key identifier: 0B:C0:D1:5B:40:F1:50:8F:D2:C7:8A:25:43:F8:AF:0B:C4:D0:18:42
Authority key identifier: 07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA
Certificate issuer: /CN=0701b929fd9edbabae35dd44adc161d7d470b1fa
Certificate serial: 01975C4A5486C6AA828DC5D6B10112E9D107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
Manifest number: 1586
Signing time: Wed 11 Jun 2025 00:01:04 +0000
Manifest this update: Wed 11 Jun 2025 00:01:04 +0000
Manifest next update: Thu 12 Jun 2025 00:01:04 +0000
Files and hashes: 1: BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl (hash: 9RxzT7yXGjmvsK4xbAOhH3zw83USWttrvs0l86jjJAE=)
2: ytt6NDRPw01MpgKIPHZI-KhTqFM.roa (hash: Qz/7LnFWYN8eKNmOmwVT183VYftTGjaTvg3yJfBkJTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:4a:54:86:c6:aa:82:8d:c5:d6:b1:01:12:e9:d1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0701b929fd9edbabae35dd44adc161d7d470b1fa
Validity
Not Before: Jun 11 00:01:04 2025 GMT
Not After : Jun 12 00:01:04 2025 GMT
Subject: CN=0bc0d15b40f1508fd2c78a2543f8af0bc4d01842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3c:53:86:33:25:26:be:95:3d:4a:76:c7:b2:
63:92:92:5c:60:a1:cf:00:ad:af:a1:ed:9e:33:51:
86:1a:1e:b9:2e:f3:f4:25:ec:89:23:b7:67:78:28:
ca:b2:69:6f:b4:60:c3:1c:5a:fa:18:fb:e2:25:26:
f9:05:9c:4a:ae:94:02:fd:a0:62:5c:3a:4d:28:b7:
44:c4:a4:9a:9f:8f:38:48:f4:55:39:72:69:54:f4:
8b:5b:5e:b2:02:c7:e3:2c:d9:72:67:75:a6:35:6b:
ad:f8:c7:76:33:8f:44:5c:dc:bd:b2:89:24:b2:1a:
bc:d3:06:30:a8:ec:15:4d:09:ea:21:d1:44:cb:3a:
ac:ba:e4:f5:1c:27:09:a3:45:fb:a0:a9:64:1b:26:
6b:63:49:a8:f6:e8:80:55:44:c8:db:e7:45:d2:36:
9f:c7:32:7c:26:54:a0:85:b2:9e:61:eb:69:e6:29:
d4:1a:33:16:ed:4a:a1:90:f3:fc:70:06:ce:f0:1b:
79:0e:58:79:e5:8c:ca:3f:ed:d4:81:6f:50:f8:c9:
ed:80:b3:09:b1:08:11:64:7e:11:d9:8c:e9:88:94:
5b:45:16:63:34:f0:8b:76:01:34:5a:34:79:8e:14:
06:89:17:e9:33:fb:0b:0a:12:27:7b:c1:86:12:29:
31:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C0:D1:5B:40:F1:50:8F:D2:C7:8A:25:43:F8:AF:0B:C4:D0:18:42
X509v3 Authority Key Identifier:
keyid:07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c2:4b:90:a4:cf:af:60:dd:3a:f2:7b:4c:85:37:48:a8:fe:
c0:45:24:4c:07:3c:f3:25:32:77:37:88:f6:53:83:33:b6:b8:
f4:8e:2a:ce:8d:6d:a7:97:38:14:39:c8:48:bc:13:6b:95:46:
93:47:06:2e:e8:89:d2:ec:d1:ed:08:0e:65:e8:90:e0:89:e5:
03:1b:b3:39:70:9a:4f:0c:62:0a:5f:dc:1d:42:05:ca:96:a7:
30:c7:f8:91:94:64:62:5e:a6:43:2f:93:3d:7f:e2:a4:ff:23:
fc:89:3d:57:1c:6d:cc:ea:37:88:f1:86:e1:85:04:ff:11:93:
0b:52:01:fd:d5:ef:48:80:96:bd:d9:a7:5f:ef:82:e1:17:41:
e3:f3:26:b0:48:81:b9:5b:0b:bc:f2:ce:1d:7f:cb:45:df:ae:
fb:3c:2e:2c:1b:3d:25:b8:4a:0c:c6:5b:c1:f5:77:96:80:15:
3a:01:b6:7e:e5:5d:0b:20:bd:b6:92:2e:b3:19:9e:c4:02:e6:
bd:a4:36:6a:22:1b:83:01:a6:61:e8:63:a5:a1:d9:2c:70:07:
72:8e:58:79:87:03:47:42:ea:02:01:37:22:b2:a8:bb:57:61:
50:40:ff:a0:d1:22:da:2e:b5:76:9e:89:f8:da:f0:96:cc:44:
28:22:14:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdcSlSGxqqCjcXWsQES6dEHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MDFiOTI5ZmQ5ZWRiYWJhZTM1ZGQ0NGFkYzE2MWQ3ZDQ3
MGIxZmEwHhcNMjUwNjExMDAwMTA0WhcNMjUwNjEyMDAwMTA0WjAzMTEwLwYDVQQD
EygwYmMwZDE1YjQwZjE1MDhmZDJjNzhhMjU0M2Y4YWYwYmM0ZDAxODQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTxThjMlJr6VPUp2x7JjkpJcYKHP
AK2voe2eM1GGGh65LvP0JeyJI7dneCjKsmlvtGDDHFr6GPviJSb5BZxKrpQC/aBi
XDpNKLdExKSan484SPRVOXJpVPSLW16yAsfjLNlyZ3WmNWut+Md2M49EXNy9sokk
shq80wYwqOwVTQnqIdFEyzqsuuT1HCcJo0X7oKlkGyZrY0mo9uiAVUTI2+dF0jaf
xzJ8JlSghbKeYetp5inUGjMW7UqhkPP8cAbO8Bt5Dlh55YzKP+3UgW9Q+MntgLMJ
sQgRZH4R2YzpiJRbRRZjNPCLdgE0WjR5jhQGiRfpM/sLChIne8GGEikxJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAvA0VtA8VCP0seKJUP4rwvE0BhCMB8GA1UdIwQY
MBaAFAcBuSn9nturrjXdRK3BYdfUcLH6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQndHNUtmMmUyNnV1TmQxRXJjRmgxOVJ3c2ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8yYjQyZmMtNDliYy00ZjgxLTk4N2It
ODU0OTMwNDZlYzQ2LzEvQndHNUtmMmUyNnV1TmQxRXJjRmgxOVJ3c2ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8yYjQyZmMtNDliYy00ZjgxLTk4N2ItODU0OTMwNDZlYzQ2
LzEvQndHNUtmMmUyNnV1TmQxRXJjRmgxOVJ3c2ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf8JLkKTP
r2DdOvJ7TIU3SKj+wEUkTAc88yUydzeI9lODM7a49I4qzo1tp5c4FDnISLwTa5VG
k0cGLuiJ0uzR7QgOZeiQ4InlAxuzOXCaTwxiCl/cHUIFypanMMf4kZRkYl6mQy+T
PX/ipP8j/Ik9VxxtzOo3iPGG4YUE/xGTC1IB/dXvSICWvdmnX++C4RdB4/MmsEiB
uVsLvPLOHX/LRd+u+zwuLBs9JbhKDMZbwfV3loAVOgG2fuVdCyC9tpIusxmexALm
vaQ2aiIbgwGmYehjpaHZLHAHco5YeYcDR0LqAgE3IrKou1dhUED/oNEi2i61dp6J
+NrwlsxEKCIU1w==
-----END CERTIFICATE-----
Generated at Wed Jun 11 09:41:24 2025 by rpki-client