Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
File: BpML6MTKaQDu2y8yYNXdeFBXASk.mft (raw, json)
Hash identifier: 7EuLJdrrYLtk0QEEKqut9JZ24oexMvqNz4TcrgHp0Sk=
Subject key identifier: F5:95:3F:DB:C8:44:12:92:6F:E9:E4:DD:A0:1C:3B:6B:2F:1F:C4:62
Authority key identifier: 06:93:0B:E8:C4:CA:69:00:EE:DB:2F:32:60:D5:DD:78:50:57:01:29
Certificate issuer: /CN=06930be8c4ca6900eedb2f3260d5dd7850570129
Certificate serial: 01992330F7371EDF3FC89FFE327B7F75C03B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
Manifest number: 05AD
Signing time: Sun 07 Sep 2025 08:00:35 +0000
Manifest this update: Sun 07 Sep 2025 08:00:35 +0000
Manifest next update: Mon 08 Sep 2025 08:00:35 +0000
Files and hashes: 1: 9v1danHKthvigEC35X1SKZS-6Og.roa (hash: lYoHFjCJjYXETX2ehKvjFug+lTMZ9V4bGWZKLE91KWo=)
2: BpML6MTKaQDu2y8yYNXdeFBXASk.crl (hash: NaUFSZ5g+s1x3vwnBI5vUvQO8OndNjrie/UqoK21I4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:f7:37:1e:df:3f:c8:9f:fe:32:7b:7f:75:c0:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06930be8c4ca6900eedb2f3260d5dd7850570129
Validity
Not Before: Sep 7 08:00:35 2025 GMT
Not After : Sep 8 08:00:35 2025 GMT
Subject: CN=f5953fdbc84412926fe9e4dda01c3b6b2f1fc462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:91:5e:1a:66:75:1c:17:6e:5f:1b:18:13:d0:
bd:ca:3e:ce:e8:73:d0:81:77:76:66:93:de:8b:5f:
34:fd:d9:66:79:9b:a1:20:55:cc:e9:15:ba:9e:74:
8b:65:da:74:98:77:93:1f:02:1a:c3:41:dc:ae:db:
7b:58:a3:4b:22:36:9b:27:e5:e0:b7:ea:02:98:6a:
a5:57:21:7b:a0:20:0e:8c:f2:70:3a:3b:62:25:74:
5d:37:a0:f9:5d:41:e6:df:bb:5e:b1:e8:74:03:49:
d2:78:1e:b0:87:6e:8c:9e:28:b4:6f:54:23:00:ee:
11:eb:ae:ef:9a:ed:f4:50:8d:40:e5:a0:76:d3:53:
5f:69:88:fa:5a:22:65:da:c6:08:02:ad:0b:fb:b1:
41:1c:20:ad:ac:9d:38:af:b1:bd:ed:0e:dd:95:95:
4c:3f:f3:55:6e:c8:2c:6d:ff:8c:d5:92:d1:b9:2f:
0b:f3:54:2e:1d:a6:45:6b:1d:71:6e:bc:fd:b9:58:
7b:23:78:57:14:c8:c3:c4:5f:84:61:ea:15:d4:33:
6c:cc:1e:56:5f:13:9d:1b:7c:c7:cd:3e:a2:ee:e1:
22:bf:8b:7b:7b:a0:39:82:a9:76:38:00:3b:80:1b:
b1:da:11:01:1a:d8:d2:af:2b:b0:e7:38:12:50:49:
9d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:95:3F:DB:C8:44:12:92:6F:E9:E4:DD:A0:1C:3B:6B:2F:1F:C4:62
X509v3 Authority Key Identifier:
keyid:06:93:0B:E8:C4:CA:69:00:EE:DB:2F:32:60:D5:DD:78:50:57:01:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:6b:29:40:44:98:4d:04:55:12:86:44:6e:a6:0e:08:ab:18:
1a:37:c0:d1:a7:1f:b8:fe:39:c3:86:e8:92:d0:02:3c:ab:a5:
59:cb:9f:6a:44:6f:1c:e3:65:7e:d6:6b:33:d5:1e:d6:b9:a9:
27:3f:c8:1b:de:45:13:fd:18:cd:63:6a:51:29:97:7b:15:d8:
aa:c7:ba:49:c5:f0:ae:05:5d:45:7b:bc:6a:ff:5f:65:62:24:
86:9b:5a:f6:d1:40:26:d7:c0:92:b1:30:53:d9:2b:fe:6e:66:
b2:2d:c5:d7:8f:af:30:b1:89:1d:75:73:98:b8:2f:6b:ad:80:
9d:22:7c:c6:3e:c6:67:9c:db:be:c6:70:ff:5b:d0:5c:57:ec:
b9:d3:84:05:7a:c5:c2:a7:68:44:7e:dc:ce:d6:c2:57:93:fb:
c2:7d:b8:43:ca:c5:2b:7b:98:0e:0a:97:80:80:68:c8:c0:2a:
9b:86:8e:90:b3:aa:80:17:5c:f2:b9:06:63:cc:19:8e:dc:70:
e4:9a:2b:1c:fb:d6:d9:2a:0c:f1:98:e6:f4:00:b0:8b:5c:04:
5a:14:64:7f:7a:35:b5:e8:14:4d:da:68:6d:a4:25:23:35:be:
eb:85:27:fb:1e:db:e1:2b:d0:f6:ba:bf:b5:0f:58:49:40:79:
28:f0:4a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:38 2025 by rpki-client