Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
File: BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft (raw, json)
Hash identifier: Xz5PNM3sYzQGA4Ke5U4taB2NCjL+ewaI7lE4b2/vwUM=
Subject key identifier: 53:2A:03:C3:D7:14:9D:50:85:D3:5E:FA:9B:72:2F:99:87:E2:59:6A
Authority key identifier: 07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA
Certificate issuer: /CN=0701b929fd9edbabae35dd44adc161d7d470b1fa
Certificate serial: 0199375D312F0B7968291C33ECE2FF93B6C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
Manifest number: 167C
Signing time: Thu 11 Sep 2025 06:01:18 +0000
Manifest this update: Thu 11 Sep 2025 06:01:18 +0000
Manifest next update: Fri 12 Sep 2025 06:01:18 +0000
Files and hashes: 1: BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl (hash: OnwSwpzINB3aEkDPGsqf1NdZz6wCfx5SlD+ttStCbNA=)
2: ytt6NDRPw01MpgKIPHZI-KhTqFM.roa (hash: Qz/7LnFWYN8eKNmOmwVT183VYftTGjaTvg3yJfBkJTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 06:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:5d:31:2f:0b:79:68:29:1c:33:ec:e2:ff:93:b6:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0701b929fd9edbabae35dd44adc161d7d470b1fa
Validity
Not Before: Sep 11 06:01:18 2025 GMT
Not After : Sep 12 06:01:18 2025 GMT
Subject: CN=532a03c3d7149d5085d35efa9b722f9987e2596a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:df:60:15:d1:19:90:9a:65:16:ad:44:5a:72:
33:42:4c:76:af:2c:ca:cc:1b:95:e4:b0:05:33:ec:
41:dd:54:f8:4a:24:a2:ac:56:df:0c:7a:81:44:03:
9e:16:1b:b6:cd:51:9e:01:f4:d1:8b:b1:d8:30:05:
3a:42:41:d8:b3:78:a3:2d:0e:a6:93:12:f6:f0:04:
2c:9f:38:47:50:ab:08:c6:73:7d:f9:3f:22:a5:4c:
d7:cd:9b:12:bb:3b:b6:7f:24:2c:9a:bf:db:12:a9:
ef:35:bb:74:3b:9b:ce:e7:7a:f0:5c:c7:43:64:81:
bf:6e:fc:c1:29:31:8c:93:be:f0:df:97:73:b7:1e:
c7:95:8b:46:c0:db:2d:6d:98:fb:3c:80:0f:62:ce:
68:90:ba:3c:e3:ac:6e:5a:f3:9b:87:eb:3c:ca:a6:
5e:ec:65:d2:13:28:df:52:d6:40:55:61:f4:9b:8d:
f7:cc:3c:95:fd:8a:40:9b:03:14:18:0e:54:1f:e2:
01:69:f4:d3:10:c9:6a:8e:5d:f7:0d:3f:18:d1:08:
2e:d2:e2:6a:82:7e:ce:f8:be:a8:c4:db:7e:9c:4a:
83:51:7c:3a:f2:d9:a4:0f:59:d1:a5:e1:5b:61:c6:
e9:4d:7c:77:37:11:60:d9:5a:36:dc:2c:54:4c:7f:
12:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2A:03:C3:D7:14:9D:50:85:D3:5E:FA:9B:72:2F:99:87:E2:59:6A
X509v3 Authority Key Identifier:
keyid:07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:49:4d:3d:51:57:aa:74:37:70:2c:59:a9:60:73:a5:bc:4f:
52:fd:12:bc:5b:d9:fd:a9:0b:2f:33:25:32:36:03:e4:68:ee:
bc:d6:ca:75:48:b7:cd:cb:24:81:81:f8:04:51:44:99:b7:8b:
77:12:2c:a0:24:4f:f6:2b:72:bc:1f:97:37:44:75:ff:17:d0:
01:c4:e1:51:f6:ed:47:60:70:ef:ec:44:26:96:20:13:d0:99:
3f:9c:80:98:89:50:d7:82:3f:5a:e0:74:e9:51:af:4b:c8:65:
8f:89:f2:61:2a:8d:ea:11:b7:ae:56:46:8b:a0:7f:a6:90:00:
e5:10:66:ab:31:c2:0a:91:48:74:96:24:78:41:41:ed:52:af:
3d:19:31:eb:b1:d7:8b:30:10:be:36:d8:46:60:56:60:15:9d:
8f:b5:29:6f:d1:24:58:96:66:06:f8:de:5d:8e:7d:ca:cd:55:
52:1a:ae:41:11:ba:04:17:6f:61:32:f0:18:e5:f1:0f:db:db:
1f:9a:f5:d9:87:c1:34:45:b8:59:61:2a:fa:cf:c0:1d:56:50:
c8:a8:c2:5a:d4:49:91:f8:48:72:c3:40:49:30:b9:76:09:6a:
cd:11:86:00:b4:7f:d9:30:5a:87:12:f0:c0:0c:6a:16:79:6e:
9f:47:e3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 15:06:34 2025 by rpki-client