Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
File: BPRq-IXRzLsMCbBocHhbXmkXh-E.mft (raw, json)
Hash identifier: 8UdMy9FGPqRbNhw40dTSw1ND6sNeAkB3hHDoaJjWmc0=
Subject key identifier: E6:53:98:C0:0A:7B:31:C0:33:F4:4C:85:C7:D1:67:C9:78:F8:DA:78
Authority key identifier: 04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
Certificate issuer: /CN=04f46af885d1ccbb0c09b06870785b5e691787e1
Certificate serial: 0199C569F06EE5CD266B46E706EFD3CB4059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
Manifest number: 08D5
Signing time: Wed 08 Oct 2025 20:01:18 +0000
Manifest this update: Wed 08 Oct 2025 20:01:18 +0000
Manifest next update: Thu 09 Oct 2025 20:01:18 +0000
Files and hashes: 1: BPRq-IXRzLsMCbBocHhbXmkXh-E.crl (hash: qOBm/DHgeW+SexdOj5Nk5cxCCuQDzbB0a+MyqAJlfWs=)
2: WLEkgsNLxhLL76J5KjgZ5ke2MzY.roa (hash: RM1foKQFE5R9Jao+pHN3ZInAMoldAOTi6T7jSW4GCSU=)
3: oZ7M5J6HpPSme6D2TdfG5_Zm_5g.roa (hash: 8k6SZEwbSYAoh3FpUOBzIDoo9yUrmYt/XSxxWhqtR38=)
4: yySGGL88ifuhtX4UWyplsao1PEY.roa (hash: PUZ7Y080pWmyPRE6f/sxnztUsgX4TTtPZlKlNa3Vh2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:69:f0:6e:e5:cd:26:6b:46:e7:06:ef:d3:cb:40:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04f46af885d1ccbb0c09b06870785b5e691787e1
Validity
Not Before: Oct 8 20:01:18 2025 GMT
Not After : Oct 9 20:01:18 2025 GMT
Subject: CN=e65398c00a7b31c033f44c85c7d167c978f8da78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7d:e6:b0:49:16:99:74:52:99:fd:61:c0:6a:
94:27:96:53:65:8c:35:47:e7:7b:30:9e:51:8b:a4:
0f:88:d6:95:bb:ab:a1:d2:42:1a:73:b2:09:c7:4c:
f9:b0:c0:f0:e9:cf:0e:df:73:7e:43:60:2b:1a:27:
12:b2:55:ce:a2:e1:76:9c:3c:ce:00:9a:2a:73:71:
fa:2d:b2:a6:c6:05:fb:d4:37:65:c7:b8:7c:80:76:
11:ac:9a:d1:54:f0:49:3d:67:e7:b2:87:52:8e:08:
40:e0:a1:b0:62:81:94:0a:41:1e:66:29:90:82:45:
25:c2:f5:0d:5d:a5:34:8b:95:40:02:09:10:f6:39:
55:51:df:97:45:b3:b3:fe:fd:96:58:ae:94:46:cb:
df:b6:92:d1:27:aa:c8:34:99:1f:98:4b:81:04:e5:
79:1b:af:de:f8:8f:1d:39:b0:49:3a:52:fa:ab:6b:
6b:d0:af:b0:d1:06:c4:61:70:e1:52:f6:bf:13:93:
e9:80:9a:02:83:bd:d3:ce:37:f5:cf:cf:3b:92:91:
a7:01:2f:04:6e:cd:c9:60:c8:55:d0:37:a2:63:e1:
c1:8f:87:e5:88:10:81:54:8b:12:d2:ec:18:f3:67:
06:83:77:2c:b4:f7:8c:be:a4:b8:9a:f0:d0:2e:d6:
32:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:53:98:C0:0A:7B:31:C0:33:F4:4C:85:C7:D1:67:C9:78:F8:DA:78
X509v3 Authority Key Identifier:
keyid:04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:44:51:27:3b:22:7d:7f:c5:08:72:e5:94:40:97:ba:19:fe:
76:db:a1:03:a7:d4:4a:b6:49:7f:0d:a6:9f:56:6d:5f:39:1a:
bc:32:34:8d:ae:6a:a1:1a:7b:c5:8c:db:43:79:73:97:79:31:
7b:04:d3:6e:f2:29:ed:f6:b6:a4:80:2c:06:25:2d:f3:51:87:
68:64:36:96:13:71:61:44:1f:8f:07:f6:94:68:7f:76:58:03:
dc:60:56:a8:a7:30:4b:b2:a9:69:c1:87:f1:f8:a1:ad:f2:19:
3a:f0:97:71:2e:01:82:8b:70:f5:99:bb:bd:98:29:a8:c4:1d:
bc:01:63:9a:09:c8:e8:e6:10:8f:8e:d5:c9:94:2f:b0:69:a3:
d9:f5:d9:49:dd:41:be:b0:9f:a7:e6:cd:d9:4b:09:ca:76:b9:
bd:c3:ff:51:04:f8:21:c3:24:6b:91:3a:da:7b:c8:df:d1:64:
89:84:bf:bb:7d:2b:17:38:6c:6e:be:25:a3:2d:18:72:48:75:
a0:4d:9b:7b:68:13:37:0f:9b:9c:88:b4:ff:7c:3a:15:15:d9:
f3:87:4f:63:11:91:94:94:8d:2d:62:93:0e:69:0b:a2:4d:3e:
30:a6:43:b0:ef:e0:4f:1d:c8:a8:43:7b:f1:12:66:41:a6:f8:
29:45:0e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:21:59 2025 by rpki-client