Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
File: BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft (raw, json)
Hash identifier: vJwDkMuWK60qAnfGzmBhYrWmZtOQJF8CTOGwchsZN9Q=
Subject key identifier: D5:6F:FE:03:46:B8:06:0B:DE:2C:EF:58:44:11:3E:81:42:71:D4:5A
Authority key identifier: 07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA
Certificate issuer: /CN=0701b929fd9edbabae35dd44adc161d7d470b1fa
Certificate serial: 019A24E5C8982B2C8408F45ECB882DC937D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
Manifest number: 16F7
Signing time: Mon 27 Oct 2025 09:00:30 +0000
Manifest this update: Mon 27 Oct 2025 09:00:30 +0000
Manifest next update: Tue 28 Oct 2025 09:00:30 +0000
Files and hashes: 1: BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl (hash: uihmnW8K6MLpllYdQC2h9CN6zSAxnj++3yRVfJCPRk4=)
2: ytt6NDRPw01MpgKIPHZI-KhTqFM.roa (hash: Qz/7LnFWYN8eKNmOmwVT183VYftTGjaTvg3yJfBkJTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e5:c8:98:2b:2c:84:08:f4:5e:cb:88:2d:c9:37:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0701b929fd9edbabae35dd44adc161d7d470b1fa
Validity
Not Before: Oct 27 09:00:30 2025 GMT
Not After : Oct 28 09:00:30 2025 GMT
Subject: CN=d56ffe0346b8060bde2cef5844113e814271d45a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:06:18:03:71:38:d1:4d:0a:55:72:ba:4a:96:
ed:17:ac:66:aa:65:e0:b8:cd:d0:ef:fd:25:4e:5e:
a0:09:14:32:38:18:b7:7a:be:cb:db:ef:8f:db:bf:
fb:59:02:91:42:bf:dd:e7:10:35:11:be:fa:58:6e:
c8:9f:1b:b4:ee:eb:07:ec:07:35:fc:c8:9c:dc:b7:
3b:aa:6e:3b:22:c4:7a:ac:58:8d:6d:96:ea:7c:84:
b1:ee:5a:21:60:fb:7d:bf:a2:36:c8:ea:41:bf:af:
01:64:5a:98:25:52:f8:98:c0:d8:13:ed:d2:e4:e6:
31:3c:84:5f:f6:b7:fa:3b:54:8b:e5:93:93:29:8c:
fd:ba:9c:38:25:0e:4e:ea:88:81:8b:51:18:e8:fb:
ed:42:10:da:a0:71:fc:ce:92:59:5a:63:9b:43:d3:
81:d5:07:0b:b3:90:86:f3:2e:69:c0:2a:3a:34:1c:
90:b9:55:e6:f6:e0:a8:86:ea:02:e0:64:5b:cc:a0:
20:41:4d:6b:23:2f:62:54:25:c1:55:ce:9c:81:d8:
a0:00:66:89:91:72:6e:7e:1e:a8:4b:73:eb:d0:35:
bb:e8:02:ef:ab:b7:b7:eb:37:bb:cb:06:a7:bf:75:
b7:6e:09:35:e3:36:13:a9:79:b6:be:0d:00:28:7d:
92:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6F:FE:03:46:B8:06:0B:DE:2C:EF:58:44:11:3E:81:42:71:D4:5A
X509v3 Authority Key Identifier:
keyid:07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:db:0b:e7:f6:25:45:45:21:b9:7b:4b:96:2b:67:a0:7e:04:
e4:bb:0a:cc:a3:1c:fc:83:fd:ca:41:13:39:4e:c6:c6:aa:c7:
10:a6:e8:95:21:8d:9a:d0:55:a6:b4:4f:a2:9b:80:a5:5f:dc:
f9:34:05:1f:34:6e:67:d6:de:21:a9:76:e2:26:6c:06:0f:c9:
c7:74:7c:29:a8:ce:db:65:47:95:1d:66:97:8c:97:55:4d:5a:
84:38:99:78:ea:14:67:c8:2a:1c:e5:3a:7c:87:a5:40:3d:c9:
55:c0:b2:d8:fa:19:aa:63:22:b1:ef:3c:42:3d:04:9c:1d:ea:
43:77:87:14:27:ea:82:f6:bc:2e:7e:40:d6:3c:55:7f:db:56:
8e:f1:20:a1:64:ab:7f:d4:fd:12:04:3e:3b:2e:6a:74:04:e2:
3d:df:ce:f1:f7:c6:9d:3a:59:a7:71:88:10:e0:84:72:f3:25:
3e:50:71:1a:ce:1e:39:8c:21:f8:52:f2:c0:db:28:98:20:0c:
52:29:43:46:43:1c:d7:e3:3d:c6:31:20:24:69:a0:be:7c:d9:
40:6f:42:4c:a6:38:e5:15:f6:f1:19:55:4b:96:aa:40:44:fa:
0a:a8:e8:7b:63:5d:b7:c2:3e:b3:a5:ef:58:36:73:6a:74:3f:
ef:2d:82:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:12:09 2025 by rpki-client