Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
File: BWRw2Bso3FKOXyjbC7X20pRhGmU.mft (raw, json)
Hash identifier: v0ShxqYLZnuSzSzMKORRMkF0KQ9+aGAGpi/vkaHMne0=
Subject key identifier: 8F:88:81:B5:DA:DE:63:58:44:E9:9C:C3:B4:3C:FE:6C:51:2B:D7:7A
Authority key identifier: 05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65
Certificate issuer: /CN=056470d81b28dc528e5f28db0bb5f6d294611a65
Certificate serial: 019931C882468DC123F7FFCBEFE26C614F23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
Manifest number: 1392
Signing time: Wed 10 Sep 2025 04:00:47 +0000
Manifest this update: Wed 10 Sep 2025 04:00:47 +0000
Manifest next update: Thu 11 Sep 2025 04:00:47 +0000
Files and hashes: 1: BWRw2Bso3FKOXyjbC7X20pRhGmU.crl (hash: Jwl45sZILdgcG5mr+lY6wgmIipIra3KLUhkxYLYhXoM=)
2: kqmUwVdGk1LkjvL-upU9QhBrTk8.roa (hash: ljaTHQhywA3lYtK1TIsMdme1hiJbfaCWwfGaCBoPJAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:c8:82:46:8d:c1:23:f7:ff:cb:ef:e2:6c:61:4f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056470d81b28dc528e5f28db0bb5f6d294611a65
Validity
Not Before: Sep 10 04:00:47 2025 GMT
Not After : Sep 11 04:00:47 2025 GMT
Subject: CN=8f8881b5dade635844e99cc3b43cfe6c512bd77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c1:30:99:18:db:a7:dc:9c:d8:11:2f:fa:6e:
45:59:08:4d:bd:87:48:89:cb:ec:60:26:94:7a:dc:
08:02:39:ff:45:03:23:76:74:d4:4e:3b:49:18:44:
d9:d0:9b:c5:b2:da:5a:b3:f4:32:7a:02:99:de:2c:
b5:da:f6:4a:a2:63:d9:d4:ab:53:08:02:cd:39:f3:
48:fe:ef:60:89:1e:88:1a:32:aa:f5:2a:2e:3d:42:
2c:a6:a6:3f:00:b5:e0:1d:df:92:77:44:55:58:71:
82:ae:69:d8:9b:31:40:6a:c4:d3:e4:44:af:69:1e:
6a:a3:fa:fc:47:1d:ac:5c:dc:e8:f3:55:4a:be:bc:
f5:4b:74:b2:f4:f0:72:aa:4f:9a:dd:ef:d2:c3:75:
5b:d6:64:48:13:d7:00:c6:da:85:43:8b:73:26:ff:
09:d0:9b:2f:73:43:2d:31:d7:2a:1c:18:3c:33:5a:
2b:3d:2b:4d:69:79:a6:8e:38:43:d6:e5:a0:5c:a9:
d6:31:0e:f7:b1:f2:7a:e2:c0:49:4c:c1:9c:3c:ca:
d9:0c:dc:03:52:fb:ce:a2:19:54:69:46:5b:4f:5c:
56:e3:bd:40:4f:0a:ef:b8:0b:0d:ea:b2:64:ed:cc:
d1:60:6b:e6:94:49:f5:ed:32:49:c4:06:1c:e2:60:
c6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:88:81:B5:DA:DE:63:58:44:E9:9C:C3:B4:3C:FE:6C:51:2B:D7:7A
X509v3 Authority Key Identifier:
keyid:05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:78:67:57:2e:b4:e1:f4:c8:dc:dd:8a:56:c8:b6:9e:42:b4:
53:61:5c:9d:aa:85:a8:79:3f:76:a3:08:5e:1d:8c:1c:65:d3:
f7:28:20:7b:a8:54:b4:f9:5f:6d:46:5c:5f:62:3a:09:97:f6:
5e:cf:ce:9a:bd:53:28:33:40:45:ff:58:1b:2a:59:80:5b:bc:
0a:09:3b:cf:df:43:ec:40:89:26:c9:02:c4:9f:3a:6a:a1:a7:
64:6e:bb:f0:44:d8:ab:d4:5f:34:1b:25:ff:d5:1b:45:73:7a:
20:ab:c9:4e:32:d4:4f:64:e4:91:d1:a4:fb:10:aa:8e:61:c4:
47:0b:3e:d3:cc:54:1f:8d:b1:ed:24:fd:f5:13:f4:92:99:c8:
9b:00:0b:af:f8:31:0f:a0:02:9b:74:41:e0:ff:71:25:70:ff:
a9:22:7c:3d:d5:63:a7:9f:29:6f:65:63:2d:b5:32:02:36:56:
4c:eb:22:1d:a1:be:c0:45:50:19:7b:f9:92:d0:e2:10:9d:06:
fe:da:46:83:70:8c:d2:30:5a:20:18:0f:29:b9:8c:7f:64:3f:
14:ea:6d:68:fe:7a:a7:c9:86:ba:74:bb:6d:da:f4:e5:43:27:
17:06:d9:86:73:bd:b2:71:a5:ba:40:cb:04:c8:7b:a3:48:04:
d5:0e:64:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkxyIJGjcEj9//L7+JsYU8jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NjQ3MGQ4MWIyOGRjNTI4ZTVmMjhkYjBiYjVmNmQyOTQ2
MTFhNjUwHhcNMjUwOTEwMDQwMDQ3WhcNMjUwOTExMDQwMDQ3WjAzMTEwLwYDVQQD
Eyg4Zjg4ODFiNWRhZGU2MzU4NDRlOTljYzNiNDNjZmU2YzUxMmJkNzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMEwmRjbp9yc2BEv+m5FWQhNvYdI
icvsYCaUetwIAjn/RQMjdnTUTjtJGETZ0JvFstpas/QyegKZ3iy12vZKomPZ1KtT
CALNOfNI/u9giR6IGjKq9SouPUIspqY/ALXgHd+Sd0RVWHGCrmnYmzFAasTT5ESv
aR5qo/r8Rx2sXNzo81VKvrz1S3Sy9PByqk+a3e/Sw3Vb1mRIE9cAxtqFQ4tzJv8J
0Jsvc0MtMdcqHBg8M1orPStNaXmmjjhD1uWgXKnWMQ73sfJ64sBJTMGcPMrZDNwD
UvvOohlUaUZbT1xW471ATwrvuAsN6rJk7czRYGvmlEn17TJJxAYc4mDG0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+IgbXa3mNYROmcw7Q8/mxRK9d6MB8GA1UdIwQY
MBaAFAVkcNgbKNxSjl8o2wu19tKUYRplMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQldSdzJCc28zRktPWHlqYkM3WDIwcFJoR21VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xOTE2ZTEtYWQ5Yy00YjQwLWE5YjAt
OTNhODgyMjFkZWYyLzEvQldSdzJCc28zRktPWHlqYkM3WDIwcFJoR21VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8xOTE2ZTEtYWQ5Yy00YjQwLWE5YjAtOTNhODgyMjFkZWYy
LzEvQldSdzJCc28zRktPWHlqYkM3WDIwcFJoR21VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq3hnVy60
4fTI3N2KVsi2nkK0U2FcnaqFqHk/dqMIXh2MHGXT9ygge6hUtPlfbUZcX2I6CZf2
Xs/Omr1TKDNARf9YGypZgFu8Cgk7z99D7ECJJskCxJ86aqGnZG678ETYq9RfNBsl
/9UbRXN6IKvJTjLUT2TkkdGk+xCqjmHERws+08xUH42x7ST99RP0kpnImwALr/gx
D6ACm3RB4P9xJXD/qSJ8PdVjp58pb2VjLbUyAjZWTOsiHaG+wEVQGXv5ktDiEJ0G
/tpGg3CM0jBaIBgPKbmMf2Q/FOptaP56p8mGunS7bdr05UMnFwbZhnO9snGlukDL
BMh7o0gE1Q5kXw==
-----END CERTIFICATE-----
Generated at Wed Sep 10 11:06:22 2025 by rpki-client