Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
File: BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft (raw, json)
Hash identifier: 6Wl96KnpkNU/WZgCggqUP6Rhw3Xt6x1pZ/CopVSuWy4=
Subject key identifier: A5:5C:19:DD:B8:3A:9C:3E:E9:21:80:74:8E:B3:E6:83:C8:55:A3:98
Authority key identifier: 05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E
Certificate issuer: /CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
Certificate serial: 019A71EEE5CD48CF900042B975BDEB074FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
Manifest number: 1729
Signing time: Tue 11 Nov 2025 08:01:13 +0000
Manifest this update: Tue 11 Nov 2025 08:01:13 +0000
Manifest next update: Wed 12 Nov 2025 08:01:13 +0000
Files and hashes: 1: 74ie5YhiWCpEdYw1osP6lOLENo8.roa (hash: AISylC4LJSWYY19JWF/C07coR9FQEVOV3zwowa8Jq8A=)
2: BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl (hash: 33ux3wTpMqyykj8zVofTtqTUuslQMPr2newnVIxOqic=)
3: CFOEQzJpDfyIX_oaNWeu5lzrryg.roa (hash: IIn5PGhc9iJknynMgMeEVyICP0S0I656B95iMkmFmVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:e5:cd:48:cf:90:00:42:b9:75:bd:eb:07:4f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
Validity
Not Before: Nov 11 08:01:13 2025 GMT
Not After : Nov 12 08:01:13 2025 GMT
Subject: CN=a55c19ddb83a9c3ee92180748eb3e683c855a398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:60:16:d6:8c:3f:98:01:60:b0:29:98:5e:0e:
5f:71:f7:53:56:29:90:31:32:98:a5:dc:97:61:91:
47:a0:1e:17:8f:c6:01:4e:84:80:93:05:11:93:72:
b3:69:42:21:bd:17:97:7d:b0:63:a1:c4:91:ba:aa:
a3:9d:d1:5b:d3:67:d6:72:a7:66:87:0f:4e:88:18:
7f:a8:d7:53:69:8c:bf:2c:0e:61:09:3f:6f:40:54:
66:9e:ac:d5:61:48:f1:ed:81:f1:8d:fe:47:9b:3c:
75:1d:8c:aa:08:99:01:02:e1:64:ff:78:9c:41:5b:
d4:2a:ae:ac:7b:a0:d3:fa:c8:f8:b9:38:75:e4:3c:
04:08:d7:7f:fd:b9:cd:f8:fb:7c:9f:9d:2b:0b:79:
63:75:96:cd:53:ff:a1:44:56:12:4e:9c:ed:ad:88:
ad:4e:e5:77:a0:48:cc:30:50:dc:92:39:db:e9:e0:
25:5b:56:a9:a7:e2:bf:51:05:f3:fa:63:15:9a:fb:
cf:b0:fc:d7:c3:14:a0:ed:0e:25:0f:43:e4:67:66:
ee:70:1a:cf:a2:1a:05:1a:ff:d9:59:b3:12:0c:cc:
29:2d:88:e1:d2:08:6b:5e:3e:03:c9:32:0e:33:41:
12:d3:ec:7a:64:d9:e4:e3:e4:ae:c7:dd:6f:41:de:
4b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5C:19:DD:B8:3A:9C:3E:E9:21:80:74:8E:B3:E6:83:C8:55:A3:98
X509v3 Authority Key Identifier:
keyid:05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:03:bd:6c:92:da:a4:04:52:ac:0c:ed:df:86:67:61:e8:1e:
56:73:a4:1e:81:a7:14:ab:a0:fa:84:62:4f:f1:ca:95:f6:6a:
4a:d0:c3:1d:9d:64:45:98:bc:2b:53:33:b9:ee:c1:96:38:42:
22:4e:3a:1e:06:0f:47:74:8a:73:49:63:ae:ae:26:4c:21:a2:
1d:96:a0:11:a0:09:da:36:86:b9:08:b9:fb:7b:ae:ba:c2:8f:
f3:bd:48:83:ef:b4:ae:44:2c:68:dc:26:fe:21:e7:59:e0:5a:
29:b9:a2:d1:10:f5:18:2d:f8:16:7d:ce:b1:4d:d9:e1:a3:4d:
a9:5c:c4:ec:55:e2:9f:65:89:e7:19:a6:ac:db:d8:29:af:5a:
a6:38:16:13:c1:d6:8d:a1:06:0f:82:14:ba:5a:d0:80:10:3b:
61:ea:d5:2f:ec:02:40:7d:0c:dc:67:1c:17:e2:90:af:55:5f:
e9:85:70:ef:07:59:89:ce:e2:a0:e6:d8:bd:5c:4f:99:80:10:
6b:e8:a5:75:14:db:dc:7c:4b:27:36:2e:58:3c:6a:f4:01:ce:
bb:90:e3:bd:85:47:b4:5f:82:f3:a6:8e:59:4d:4a:77:58:09:
18:9b:62:58:e9:7c:f2:8e:ee:2e:3b:7b:20:89:00:d6:cc:3b:
63:76:c5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:10:32 2025 by rpki-client