Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
File: bwyaERer1S7IA2tPN4ZE-nekuKc.mft (raw, json)
Hash identifier: wX+uOZnYf1pZzFrxvzaP4+WFRI5NB/YU9BcE0hS2pcM=
Subject key identifier: 8A:52:70:8B:9C:34:66:C7:FD:CD:E8:14:A8:A5:57:57:7C:D6:8C:ED
Authority key identifier: 6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7
Certificate issuer: /CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
Certificate serial: 019A0E277A0895BEA524CAB1EB53AEC4B46D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
Manifest number: 07D2
Signing time: Wed 22 Oct 2025 23:00:59 +0000
Manifest this update: Wed 22 Oct 2025 23:00:59 +0000
Manifest next update: Thu 23 Oct 2025 23:00:59 +0000
Files and hashes: 1: 5YbQ1lEYRu1FDVmUe9WtFEdIQq8.roa (hash: LLdAnT3T14ZMA8Ruwq6pBGBMT1LXc953lNErRWyZvjE=)
2: bwyaERer1S7IA2tPN4ZE-nekuKc.crl (hash: dfvXelUauLs8F6mI5LSLUKF7Le7X2ItPuzmXzNpPm3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0e:27:7a:08:95:be:a5:24:ca:b1:eb:53:ae:c4:b4:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
Validity
Not Before: Oct 22 23:00:59 2025 GMT
Not After : Oct 23 23:00:59 2025 GMT
Subject: CN=8a52708b9c3466c7fdcde814a8a557577cd68ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:33:37:48:b4:ea:2e:84:f3:eb:fa:c9:02:40:
fd:c4:82:9d:e0:2b:64:ab:8e:ff:75:38:6e:5e:5b:
c1:c9:d8:79:dc:b0:8a:3a:60:cd:c6:63:88:b3:49:
d2:31:10:71:25:d4:c4:43:51:8d:e0:10:da:e8:0e:
8f:7d:01:2c:19:b0:a9:b3:46:c4:42:ab:f7:18:5b:
d9:73:4e:57:cc:8a:0f:58:53:e8:eb:cc:75:a4:1c:
96:04:60:5a:cc:bf:70:b9:1e:97:23:c9:49:27:ae:
22:2e:9e:78:8f:ca:c4:aa:86:8e:54:76:47:6c:b2:
75:02:53:de:46:92:69:81:f8:f0:81:4f:7c:2d:a4:
17:6d:b8:cb:dd:bd:42:17:35:64:4a:73:62:17:6c:
2a:4a:ca:24:f2:8c:19:ee:9d:e7:02:91:90:50:06:
b6:30:64:21:4a:30:bd:00:6c:21:bc:bd:18:e0:30:
43:be:55:af:68:38:e2:ba:1d:25:8d:76:09:b5:b5:
5c:43:2d:72:0a:0f:32:0b:1a:51:92:78:f9:43:ce:
8a:8e:98:1e:98:fc:26:37:7b:58:ec:f2:0d:59:b2:
a4:a3:c5:b5:48:24:bb:f2:6e:f4:1d:6a:43:1d:0a:
1e:e9:d1:a9:ee:7c:1d:83:eb:e0:af:26:78:d6:25:
ee:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:52:70:8B:9C:34:66:C7:FD:CD:E8:14:A8:A5:57:57:7C:D6:8C:ED
X509v3 Authority Key Identifier:
keyid:6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:51:61:fa:7c:9b:f5:df:b7:9a:58:cf:06:b4:bf:0a:cd:ef:
29:f7:4d:55:f5:31:ae:d6:97:1f:65:9e:46:36:d8:e6:fc:9a:
8c:43:14:4b:dc:99:2a:0b:a7:cb:73:e5:c9:26:de:c4:db:7e:
a6:8e:99:63:c9:9b:59:d9:62:f9:e8:d1:b8:c1:aa:bc:e0:2e:
d3:b4:19:2c:fb:8b:8f:03:e0:43:a0:99:dc:f4:f7:d8:3a:09:
42:08:db:02:b2:9d:cc:ed:f3:31:63:e5:d9:db:e6:cf:65:d5:
3d:75:f5:a5:32:4f:15:b3:db:88:fc:32:85:ce:0c:eb:53:96:
be:f2:4f:4c:73:07:b6:dd:30:f2:26:df:17:4d:98:69:79:6d:
e2:4a:9e:96:ee:68:7d:b8:30:03:de:f9:64:a8:8e:12:d7:e9:
c4:6a:07:54:d3:c0:42:b4:7b:c6:9c:cb:1b:fa:48:a1:43:1d:
02:a1:2a:03:0b:10:a1:06:df:5c:5b:85:2f:ab:06:30:94:17:
de:e9:6e:de:0b:91:be:d3:16:a0:07:34:d6:d7:74:18:4b:15:
65:ba:5e:bd:8a:5d:ba:87:a1:94:b7:53:4f:0f:4d:22:25:cf:
19:e5:89:3a:a6:e2:69:68:6e:21:43:1d:84:30:cb:d3:ef:e4:
bd:70:c4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 06:37:14 2025 by rpki-client