Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
File: BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft (raw, json)
Hash identifier: Chz0pP7pEA89zii4nUUFaJTLqjr8czcrhnlZI/Zn8VI=
Subject key identifier: 76:AF:19:59:3C:42:83:33:2B:1A:7D:4A:F5:6E:85:60:7E:2B:74:D5
Authority key identifier: 05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
Certificate issuer: /CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Certificate serial: 0199225584AD076ECC401C9C3415BEF2BA48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 04:00:53 +0000
Manifest this update: Sun 07 Sep 2025 04:00:53 +0000
Manifest next update: Mon 08 Sep 2025 04:00:53 +0000
Files and hashes: 1: BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl (hash: DY1uGNAnmPjh8RTiUQUR0bHBsgsOtAlLrA9NM5091lY=)
2: ddJdWwJ-x_kxknxp8wqmg5-PURw.roa (hash: /8Ho4F9DZAAaxfNKmXvihlaELQ9Ew+7q5ew0DKDsGRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:84:ad:07:6e:cc:40:1c:9c:34:15:be:f2:ba:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Validity
Not Before: Sep 7 04:00:53 2025 GMT
Not After : Sep 8 04:00:53 2025 GMT
Subject: CN=76af19593c4283332b1a7d4af56e85607e2b74d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4f:7f:3b:da:fc:5f:c0:49:a5:24:8f:24:11:
53:cc:58:28:b6:6e:7c:c0:c0:75:88:d0:41:66:04:
7a:f5:8f:c4:39:99:8b:80:fd:e3:d4:c5:30:d1:9c:
b2:00:c3:5f:45:14:79:b7:63:7a:99:72:14:31:bc:
19:66:c6:1a:17:01:ce:c0:c6:39:a5:1e:0c:84:7c:
21:06:91:1b:5f:1f:44:c4:76:6f:f9:1b:0b:4f:7d:
a9:b2:e4:03:a9:28:26:d9:75:1c:9d:1d:19:51:7a:
ea:75:79:a3:57:23:0e:06:94:78:26:2b:56:34:ca:
ee:d0:57:d2:8c:67:ff:b7:0a:80:a4:21:93:39:8c:
5f:be:85:48:78:e7:4a:d5:75:1f:3a:b5:4f:54:2f:
1a:bf:60:31:bc:45:62:c7:76:99:95:fb:ec:57:b5:
a7:88:e2:83:5d:99:a0:d1:28:77:45:de:f4:e8:11:
9f:00:8a:fe:68:57:1a:6c:f6:a9:b6:fe:67:de:45:
bc:44:43:18:48:95:f2:f6:ad:c8:1e:f4:bc:79:95:
23:65:c4:dc:e5:38:84:16:a0:e7:07:3c:b4:df:19:
e4:43:9b:5b:03:61:ee:ab:56:b8:bc:58:30:5f:a1:
8a:19:f8:3f:b7:91:4d:6f:61:08:90:cd:1a:57:b3:
79:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AF:19:59:3C:42:83:33:2B:1A:7D:4A:F5:6E:85:60:7E:2B:74:D5
X509v3 Authority Key Identifier:
keyid:05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:5d:e4:ad:e5:d0:0a:6b:f1:c7:7b:59:bf:b9:e2:72:af:25:
05:ee:10:06:6e:35:24:9e:53:f9:68:8f:4a:bf:81:fb:9e:1f:
6d:79:8a:dc:fa:20:2b:ef:32:01:c1:37:d7:02:46:47:21:b4:
81:9f:6c:7e:14:83:6a:25:4c:7c:2c:c4:1b:a7:fc:3c:41:54:
be:1a:b2:a7:b0:e3:2e:c4:61:87:e3:ad:5f:c7:65:50:7a:cc:
c3:57:78:82:75:b5:00:57:87:f6:31:d4:f6:f7:e3:62:8c:d2:
33:41:26:47:57:1e:57:18:5c:31:04:a9:e5:1e:04:f0:58:d9:
0f:5b:fd:f5:99:39:54:d1:67:59:10:77:be:56:c0:0b:53:c0:
ed:5c:d5:be:52:9d:c6:b4:61:89:87:e5:0b:6f:af:36:02:cd:
9a:77:55:71:14:96:12:6a:9a:2c:56:d7:cf:92:fa:11:5f:34:
22:cc:44:85:30:e7:d2:fb:22:98:23:e1:0c:86:91:c1:ef:bc:
03:09:72:73:8e:09:52:fa:c9:cf:74:e8:96:71:d9:bb:6b:f8:
64:e5:79:4f:31:93:af:f2:99:b9:64:3d:0f:43:4d:da:bc:56:
c5:52:49:39:1b:5d:73:35:ef:56:68:9a:04:c8:33:12:ac:40:
17:9f:4b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:54 2025 by rpki-client