Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
File: BpML6MTKaQDu2y8yYNXdeFBXASk.mft (raw, json)
Hash identifier: UM5Uv7FJdr5tuLokC5saeb6QXRwAGkoysuVoV5rrvX4=
Subject key identifier: 60:95:BD:1A:ED:84:2F:5F:C6:91:76:65:E9:97:1D:BC:0F:70:BA:BA
Authority key identifier: 06:93:0B:E8:C4:CA:69:00:EE:DB:2F:32:60:D5:DD:78:50:57:01:29
Certificate issuer: /CN=06930be8c4ca6900eedb2f3260d5dd7850570129
Certificate serial: 019A714A379E2AFDE94CAF0D5D8023980441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
Manifest number: 065A
Signing time: Tue 11 Nov 2025 05:01:20 +0000
Manifest this update: Tue 11 Nov 2025 05:01:20 +0000
Manifest next update: Wed 12 Nov 2025 05:01:20 +0000
Files and hashes: 1: 9v1danHKthvigEC35X1SKZS-6Og.roa (hash: lYoHFjCJjYXETX2ehKvjFug+lTMZ9V4bGWZKLE91KWo=)
2: BpML6MTKaQDu2y8yYNXdeFBXASk.crl (hash: KqVzSyUpFP3dHdzBdzlNo1Adcr274u3oU7UEveWFh5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:37:9e:2a:fd:e9:4c:af:0d:5d:80:23:98:04:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06930be8c4ca6900eedb2f3260d5dd7850570129
Validity
Not Before: Nov 11 05:01:20 2025 GMT
Not After : Nov 12 05:01:20 2025 GMT
Subject: CN=6095bd1aed842f5fc6917665e9971dbc0f70baba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:97:91:b3:c6:32:c1:5c:f5:98:c3:90:33:50:
56:82:f7:29:42:19:e4:a2:d3:ad:72:c2:34:84:a6:
65:ab:50:ff:bf:b1:b6:ac:2e:40:49:d8:48:96:76:
4b:75:f3:f0:ac:e5:b1:17:de:af:39:53:3a:fd:e6:
d4:da:89:cf:c5:e8:45:cb:e2:1c:9a:a7:a0:96:b8:
8d:d5:76:40:75:1d:cc:13:9e:b9:6c:fd:56:84:5a:
7d:68:fe:44:dd:c9:32:fd:6e:a4:8b:7d:75:1a:4f:
d2:92:8c:82:17:ef:1c:06:d4:bb:ec:ab:9a:82:92:
3f:43:7a:e9:53:b5:4c:0d:60:d2:9e:5f:3c:3c:d2:
c1:49:a5:d1:60:2d:f8:0d:15:f7:ab:50:e7:f1:e1:
3b:02:56:48:c3:4b:b7:d5:d5:ed:75:f4:59:90:dc:
90:5c:35:3d:d0:43:72:41:d9:29:4b:ff:8a:0e:f4:
48:b3:4e:dc:dd:0c:cf:7a:f3:68:fb:28:d8:d5:6f:
2d:6c:b1:62:8f:b6:2e:b3:70:ff:25:32:ac:b8:2f:
5f:f4:8b:b7:69:52:92:48:dc:9f:b5:db:bf:2a:b2:
e5:6f:a1:68:3c:fc:0b:c5:32:f2:b1:cb:ca:17:60:
43:63:b2:7d:a3:22:64:46:75:92:51:c1:c7:4f:94:
8a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:95:BD:1A:ED:84:2F:5F:C6:91:76:65:E9:97:1D:BC:0F:70:BA:BA
X509v3 Authority Key Identifier:
keyid:06:93:0B:E8:C4:CA:69:00:EE:DB:2F:32:60:D5:DD:78:50:57:01:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:19:d7:72:24:0e:54:53:73:1e:54:83:fe:9c:df:6d:f6:2a:
a6:47:cf:10:a7:26:33:ad:05:7e:2d:65:36:b7:b2:91:36:9a:
75:8a:43:cc:37:b4:bb:02:26:e2:aa:22:e5:26:d7:67:82:78:
70:db:a7:81:a6:8d:38:73:7b:12:e7:79:4a:ee:62:74:81:43:
5e:1d:73:31:49:d7:7b:fd:83:92:93:c3:34:65:c9:b7:c9:d2:
bf:78:d4:94:40:1b:b3:7a:57:1f:04:07:f0:94:13:05:9c:6f:
72:ce:04:55:bf:79:d1:bb:2d:d1:f3:8d:3f:ce:be:17:03:2c:
10:30:f3:c4:76:80:e5:c2:86:9c:36:bd:12:dc:9f:6a:51:cf:
ea:c9:9d:8f:ae:7c:4c:e2:ca:97:0b:0d:41:f7:44:e0:41:71:
47:26:be:99:5f:b8:0c:bd:f4:0a:b9:5e:66:0a:1b:eb:ec:88:
6c:a0:d7:49:cd:1a:8c:b3:ca:2c:e8:fa:ee:04:00:19:e6:fe:
a6:d1:f7:c1:df:1b:67:69:75:dd:6b:32:c9:a3:fd:b0:93:9a:
07:49:98:a9:85:b0:42:2d:7e:01:38:65:8f:6a:8c:13:91:66:
45:15:6e:f1:4c:b4:29:6d:c7:8f:b5:92:8a:ac:b0:11:a2:af:
ff:af:14:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:18 2025 by rpki-client