
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft
File: BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft (raw, json)
Hash identifier: dHQm4YEhfOncAz76cw/GIGIEwZvkTd3gUmRUL/6GXzM=
Subject key identifier: 53:9A:54:F3:1E:ED:38:7C:25:E7:57:DA:A5:6B:5A:31:FB:A8:29:88
Authority key identifier: 05:6C:66:D4:5F:E7:E2:F3:55:99:57:2A:77:6B:12:76:4D:C6:9A:01
Certificate issuer: /CN=056c66d45fe7e2f35599572a776b12764dc69a01
Certificate serial: 0199225572168408ABB15231DC1B1DAA25F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWxm1F_n4vNVmVcqd2sSdk3GmgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft
Manifest number: 77
Signing time: Sun 07 Sep 2025 04:00:49 +0000
Manifest this update: Sun 07 Sep 2025 04:00:49 +0000
Manifest next update: Mon 08 Sep 2025 04:00:49 +0000
Files and hashes: 1: BWxm1F_n4vNVmVcqd2sSdk3GmgE.crl (hash: /0K9792vdMv2ZRqxNjK1LRE/mP+VjALt0zmKraAjp1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWxm1F_n4vNVmVcqd2sSdk3GmgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:72:16:84:08:ab:b1:52:31:dc:1b:1d:aa:25:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056c66d45fe7e2f35599572a776b12764dc69a01
Validity
Not Before: Sep 7 04:00:49 2025 GMT
Not After : Sep 8 04:00:49 2025 GMT
Subject: CN=539a54f31eed387c25e757daa56b5a31fba82988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b2:05:05:4b:86:0a:b6:f8:4c:c1:b3:1d:b9:
46:77:f5:51:01:c1:05:c8:eb:f7:82:41:a4:f2:f9:
f0:6e:b0:69:bd:98:f8:c5:45:e0:39:c6:9e:60:32:
ad:ac:9f:98:38:3e:2a:eb:db:4c:27:be:54:4a:97:
a5:70:ae:c5:dd:da:e6:3a:4f:b7:11:b5:21:32:71:
55:44:45:97:20:4d:a5:6e:25:06:d7:77:29:b9:8d:
95:a3:25:14:f0:37:0f:a7:b5:cc:15:6c:f6:ca:fb:
eb:15:c5:43:b2:47:de:e2:5d:3e:4f:f6:9f:49:19:
91:ad:38:76:d9:23:36:5e:91:9b:bc:18:27:94:ee:
9c:4c:44:95:5f:00:1b:0f:ef:4f:52:bc:7e:5d:91:
8e:5b:01:65:b4:42:f2:8b:98:92:2f:59:c0:d5:4d:
62:e2:ad:86:4a:4f:81:7c:34:da:56:51:3b:04:23:
1f:e2:83:c8:6f:f1:f1:c9:32:ad:79:d0:04:52:5d:
04:c6:18:66:11:32:f0:fd:4a:f1:13:c8:31:55:f3:
6d:3f:44:1a:ab:62:4d:f4:f2:6f:38:e6:0f:2b:d1:
bb:5a:1a:ef:58:a0:e4:4e:17:91:d9:d5:63:a1:0c:
02:c4:38:21:a4:c3:f9:e7:3d:32:a1:1e:6d:af:8f:
0f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9A:54:F3:1E:ED:38:7C:25:E7:57:DA:A5:6B:5A:31:FB:A8:29:88
X509v3 Authority Key Identifier:
keyid:05:6C:66:D4:5F:E7:E2:F3:55:99:57:2A:77:6B:12:76:4D:C6:9A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWxm1F_n4vNVmVcqd2sSdk3GmgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:7b:7a:17:26:3c:55:a3:7f:43:c9:8f:e1:2b:49:3e:85:64:
a4:a8:1d:78:81:5e:c3:44:1a:85:a8:31:e3:da:ca:fe:51:21:
0f:c5:94:40:e7:22:00:4f:f3:d7:d7:0e:db:94:09:3b:a5:de:
f5:bd:45:ed:bc:af:c3:34:83:43:c1:34:8c:31:e7:d7:bd:4a:
67:f7:41:72:90:b9:a0:1e:fd:60:6f:49:f1:06:13:a1:fb:f5:
7c:b1:0d:5e:59:ce:5b:51:95:08:ef:82:52:56:f5:ec:de:c9:
63:34:55:72:2f:af:4e:cb:79:fb:10:82:b9:c8:db:7a:d9:56:
60:c5:5b:49:5c:fa:05:58:63:df:2a:03:ef:f9:d9:92:19:22:
b1:73:0a:c7:ef:04:3e:2b:ef:af:21:db:f5:8a:a5:6d:09:3b:
66:61:3c:18:e7:7c:c4:02:a1:a6:cd:72:af:3c:bf:7b:1b:c9:
de:9e:df:49:17:71:3c:39:5e:4c:cb:eb:5f:e3:99:39:24:d9:
1e:ce:a3:fa:e0:bc:f2:01:34:de:9c:9c:05:31:2f:db:04:f3:
9c:ab:51:da:48:64:8d:93:e8:c5:d1:d4:4f:79:01:0b:23:79:
a1:d8:62:d2:73:9f:f6:dc:8f:3a:2a:cb:4f:31:65:5d:ae:a2:
2f:68:4e:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVXIWhAirsVIx3BsdqiX2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NmM2NmQ0NWZlN2UyZjM1NTk5NTcyYTc3NmIxMjc2NGRj
NjlhMDEwHhcNMjUwOTA3MDQwMDQ5WhcNMjUwOTA4MDQwMDQ5WjAzMTEwLwYDVQQD
Eyg1MzlhNTRmMzFlZWQzODdjMjVlNzU3ZGFhNTZiNWEzMWZiYTgyOTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLIFBUuGCrb4TMGzHblGd/VRAcEF
yOv3gkGk8vnwbrBpvZj4xUXgOcaeYDKtrJ+YOD4q69tMJ75USpelcK7F3drmOk+3
EbUhMnFVREWXIE2lbiUG13cpuY2VoyUU8DcPp7XMFWz2yvvrFcVDskfe4l0+T/af
SRmRrTh22SM2XpGbvBgnlO6cTESVXwAbD+9PUrx+XZGOWwFltELyi5iSL1nA1U1i
4q2GSk+BfDTaVlE7BCMf4oPIb/HxyTKtedAEUl0ExhhmETLw/UrxE8gxVfNtP0Qa
q2JN9PJvOOYPK9G7WhrvWKDkTheR2dVjoQwCxDghpMP55z0yoR5tr48P1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFOaVPMe7Th8JedX2qVrWjH7qCmIMB8GA1UdIwQY
MBaAFAVsZtRf5+LzVZlXKndrEnZNxpoBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQld4bTFGX240dk5WbVZjcWQyc1NkazNHbWdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jMDJjNWMtZWExNy00ODkzLTg1ZTAt
MDIwNTQ2MGU4OTkwLzEvQld4bTFGX240dk5WbVZjcWQyc1NkazNHbWdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9jMDJjNWMtZWExNy00ODkzLTg1ZTAtMDIwNTQ2MGU4OTkw
LzEvQld4bTFGX240dk5WbVZjcWQyc1NkazNHbWdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEnt6FyY8
VaN/Q8mP4StJPoVkpKgdeIFew0Qahagx49rK/lEhD8WUQOciAE/z19cO25QJO6Xe
9b1F7byvwzSDQ8E0jDHn171KZ/dBcpC5oB79YG9J8QYTofv1fLENXlnOW1GVCO+C
Ulb17N7JYzRVci+vTst5+xCCucjbetlWYMVbSVz6BVhj3yoD7/nZkhkisXMKx+8E
PivvryHb9YqlbQk7ZmE8GOd8xAKhps1yrzy/exvJ3p7fSRdxPDleTMvrX+OZOSTZ
Hs6j+uC88gE03pycBTEv2wTznKtR2khkjZPoxdHUT3kBCyN5odhi0nOf9tyPOirL
TzFlXa6iL2hOJw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:23:06 2025 by rpki-client