Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
File: BWRw2Bso3FKOXyjbC7X20pRhGmU.mft (raw, json)
Hash identifier: 76GR4Kudmal2ByGCXJGbV9Oazuxdsm/cszzOfcq63g0=
Subject key identifier: 3B:CE:79:38:63:89:36:E0:EB:08:C4:69:AB:CA:6F:72:CC:7C:4D:6E
Authority key identifier: 05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65
Certificate issuer: /CN=056470d81b28dc528e5f28db0bb5f6d294611a65
Certificate serial: 019A1F5182ACE6F96B5D53E9756270EBE384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
Manifest number: 140D
Signing time: Sun 26 Oct 2025 07:00:26 +0000
Manifest this update: Sun 26 Oct 2025 07:00:26 +0000
Manifest next update: Mon 27 Oct 2025 07:00:26 +0000
Files and hashes: 1: BWRw2Bso3FKOXyjbC7X20pRhGmU.crl (hash: kyD/YrFI++KAVy1k9csidbD2cV4NQmyS4JAkKpH4Tyg=)
2: kqmUwVdGk1LkjvL-upU9QhBrTk8.roa (hash: ljaTHQhywA3lYtK1TIsMdme1hiJbfaCWwfGaCBoPJAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:51:82:ac:e6:f9:6b:5d:53:e9:75:62:70:eb:e3:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056470d81b28dc528e5f28db0bb5f6d294611a65
Validity
Not Before: Oct 26 07:00:26 2025 GMT
Not After : Oct 27 07:00:26 2025 GMT
Subject: CN=3bce7938638936e0eb08c469abca6f72cc7c4d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b6:0c:bd:09:45:d6:d4:1d:fa:44:e3:32:a6:
3f:53:bf:8b:fb:ce:09:9c:41:b9:79:03:4c:16:0a:
6d:52:ea:69:90:5c:ba:99:a5:fa:f7:53:8b:d5:35:
4e:2c:b9:5c:8b:5c:e4:9d:51:1a:58:cd:02:23:68:
a5:bf:ae:4e:d6:39:30:37:de:87:59:18:45:ef:66:
dc:e3:9d:ae:e2:59:a5:50:c4:7d:6f:c9:b8:9d:b6:
c7:dd:51:3c:39:8b:c6:d9:38:55:0a:d2:54:7d:d3:
73:68:9f:7a:e9:fc:32:80:1c:57:39:55:13:08:b6:
cd:db:a0:be:3d:8a:90:3c:d0:1b:41:40:50:6a:23:
85:e6:83:4b:39:7d:d7:ad:92:eb:df:0c:8c:f0:3f:
c1:ae:54:c9:2a:f9:8d:20:d1:d1:7f:a5:4d:bf:19:
d6:68:e9:99:c9:1d:47:a3:17:50:d6:3f:c4:77:e7:
c7:a4:49:9e:5c:ba:80:90:f3:7d:78:c3:10:85:c4:
85:45:ef:46:3e:0d:98:be:0c:54:c3:5a:92:c6:15:
5c:24:fb:88:56:69:84:11:95:b7:6c:f1:9e:a2:6f:
4c:c7:17:ac:8a:ae:0e:45:c5:d5:d2:20:6c:09:af:
b6:cb:1d:56:9d:6c:bf:ab:7b:c7:8c:b0:aa:7e:7c:
08:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CE:79:38:63:89:36:E0:EB:08:C4:69:AB:CA:6F:72:CC:7C:4D:6E
X509v3 Authority Key Identifier:
keyid:05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a4:61:33:dd:19:26:df:8c:30:ea:16:76:f4:45:92:47:18:
65:86:e8:83:45:a9:1b:15:d8:2d:db:5d:e9:fd:34:69:45:71:
7e:66:c5:40:5a:d2:4e:83:56:e8:b0:14:f8:6d:1a:18:76:5a:
35:56:b0:af:ab:65:d7:8f:5d:7d:1d:2e:ab:86:e7:35:9a:8c:
86:31:e7:5c:93:90:0d:8b:01:61:44:77:2c:b9:09:da:2f:97:
a9:38:0f:9f:58:a5:c7:b4:ab:83:20:93:09:ef:35:91:de:f5:
dd:51:f7:c6:c7:54:ca:c5:19:09:b9:c2:75:3f:6f:c4:6c:61:
ac:bc:bd:8b:c5:21:01:e4:be:98:0b:4d:82:db:51:99:5e:a0:
b9:62:02:dd:20:25:38:8e:b1:1c:18:a5:63:9c:19:27:16:5a:
20:c7:a4:8d:6c:e6:68:e0:8f:35:cd:e4:be:29:58:95:4c:e4:
dc:60:95:aa:e5:90:40:2d:91:39:1b:62:fc:ba:07:2a:8a:87:
0e:1a:fc:98:b1:95:51:05:fe:7b:80:fb:76:f1:04:9a:67:ef:
3b:7b:1b:b0:8b:cc:50:08:65:72:39:83:2d:14:9c:15:8d:ad:
de:6f:72:4e:5f:bb:1d:5b:c2:47:ac:72:f4:46:f6:36:ac:85:
4c:7e:4a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 10:38:24 2025 by rpki-client