Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.mft
File: BswqJrMawkvFKV0kqOEwcfL_DWE.mft (raw, json)
Hash identifier: 6QD4wgJBtMu5Jtu6xB0uWQO3R7M5z1xzhmuC76ula/o=
Subject key identifier: 3D:65:DC:F9:4A:AB:D6:24:BC:71:F1:3B:47:03:65:FE:68:F9:39:12
Authority key identifier: 06:CC:2A:26:B3:1A:C2:4B:C5:29:5D:24:A8:E1:30:71:F2:FF:0D:61
Certificate issuer: /CN=06cc2a26b31ac24bc5295d24a8e13071f2ff0d61
Certificate serial: 0198C67F470546918E8347328C508579218D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BswqJrMawkvFKV0kqOEwcfL_DWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.mft
Manifest number: 03D5
Signing time: Wed 20 Aug 2025 08:01:26 +0000
Manifest this update: Wed 20 Aug 2025 08:01:26 +0000
Manifest next update: Thu 21 Aug 2025 08:01:26 +0000
Files and hashes: 1: 89qLG1K07SoB9KnzvBmCV6QFSkI.roa (hash: +0xILp3yJ9G90xUu2Ml6EPqNrjSk0rDe+FJWrTAlYPw=)
2: ACSoxiVrVB6X7y6ozamLSgqazeo.roa (hash: y8VDA0ULLPWCFXTUghHVruXhGvY9U4iQhON3EqU1Hso=)
3: BswqJrMawkvFKV0kqOEwcfL_DWE.crl (hash: 8hf2tW1cu322VcFgkfj7HxN0a3x28EAKBEDNHqiMix0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BswqJrMawkvFKV0kqOEwcfL_DWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:7f:47:05:46:91:8e:83:47:32:8c:50:85:79:21:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06cc2a26b31ac24bc5295d24a8e13071f2ff0d61
Validity
Not Before: Aug 20 08:01:26 2025 GMT
Not After : Aug 21 08:01:26 2025 GMT
Subject: CN=3d65dcf94aabd624bc71f13b470365fe68f93912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e6:49:78:18:e0:92:86:e2:99:9a:dc:0f:69:
f1:02:f2:f8:aa:aa:1d:a9:a6:44:53:f4:30:dd:29:
74:3a:39:7c:ed:98:f4:86:91:93:53:c4:4a:42:2c:
69:09:ef:6b:34:44:f3:ba:05:1f:2a:2f:1b:41:30:
4b:a2:f5:d9:c0:20:f2:0d:d2:91:20:a5:91:26:e6:
c9:62:aa:89:e7:f1:cc:5d:61:8e:25:b8:e6:c9:4c:
13:fe:99:01:9a:d6:32:2d:1a:4a:fd:90:5b:34:e9:
da:9a:e6:e1:9e:a5:54:0b:14:e1:ec:9b:e0:be:65:
c7:e9:21:ff:c4:3b:d7:bd:d6:78:54:d7:a2:ca:80:
63:52:36:32:05:1f:66:ff:6a:58:cb:90:11:39:1b:
c4:01:1e:da:d2:44:bf:97:53:1e:34:13:ae:27:42:
70:d6:b2:0e:dd:10:eb:83:83:9a:38:50:f4:29:ea:
bd:04:1a:a1:4b:b6:ad:19:85:62:82:d0:99:90:65:
7f:ad:39:f8:b8:36:0f:7d:b5:0e:65:67:39:cd:22:
22:9a:86:bc:8c:fe:b4:0e:35:63:d4:c3:cc:3e:11:
bc:f1:98:90:ec:3b:6a:be:a7:79:a2:62:4c:a7:b4:
20:ba:e0:73:0d:27:67:bc:b6:ba:b8:97:e6:1e:b7:
2d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:65:DC:F9:4A:AB:D6:24:BC:71:F1:3B:47:03:65:FE:68:F9:39:12
X509v3 Authority Key Identifier:
keyid:06:CC:2A:26:B3:1A:C2:4B:C5:29:5D:24:A8:E1:30:71:F2:FF:0D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BswqJrMawkvFKV0kqOEwcfL_DWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:df:45:67:5e:3f:d3:68:33:be:3e:95:98:b0:41:27:04:a2:
29:ba:01:cc:01:03:8d:1c:9d:77:19:65:bf:a3:f0:be:7c:69:
33:65:29:ec:08:46:cf:94:c6:d7:f9:d2:c0:50:20:7a:2f:df:
90:5f:f4:1d:3d:02:43:57:cf:2d:4f:18:62:38:73:bd:91:8c:
a3:d4:f3:56:d2:e1:c7:30:11:ec:76:6e:77:a2:3f:39:fe:48:
50:bc:a5:5e:d7:93:88:1a:4f:2a:76:89:34:19:fb:7a:4a:0f:
20:7c:b6:43:0e:5e:e1:d2:d6:26:55:98:0c:d5:f4:6c:e4:a0:
ff:d2:3d:8a:7e:20:da:ac:d7:8d:e6:ab:4f:32:ab:14:9e:b7:
e9:e2:f3:5c:be:58:3a:b2:b3:88:af:b8:1c:0f:da:ae:28:15:
24:d2:52:9b:8b:69:67:be:46:c2:16:ab:bd:d5:68:2c:e9:85:
b7:c3:00:7f:cd:70:36:d0:45:1b:16:4e:6b:53:c8:3f:58:3e:
94:ca:44:fb:82:7f:0b:5c:12:cc:6d:9b:f1:fe:9f:ea:7d:19:
f5:8e:b8:f6:ba:9e:94:ff:e0:65:9e:9b:c0:b0:dd:8b:ae:42:
94:0f:ff:2a:08:5a:67:48:60:af:80:c8:73:7e:c9:78:12:f3:
6c:5c:ff:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:26:08 2025 by rpki-client