Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft
File: bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft (raw, json)
Hash identifier: X36Z7X+VytM1aFHI22bJBQg/RVAFTN7jm7XvjCXJcSg=
Subject key identifier: 1A:B7:4C:91:24:7B:19:3B:31:F3:3F:A4:01:C2:34:76:60:DB:9E:D8
Authority key identifier: 6E:63:D6:D3:12:D6:5E:E4:EA:28:DA:F4:3A:FC:C8:6E:CE:D4:08:0F
Certificate issuer: /CN=6e63d6d312d65ee4ea28daf43afcc86eced4080f
Certificate serial: 019A722674621349DE9C51142299A2641D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmPW0xLWXuTqKNr0OvzIbs7UCA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft
Manifest number: 0620
Signing time: Tue 11 Nov 2025 09:01:53 +0000
Manifest this update: Tue 11 Nov 2025 09:01:53 +0000
Manifest next update: Wed 12 Nov 2025 09:01:53 +0000
Files and hashes: 1: bmPW0xLWXuTqKNr0OvzIbs7UCA8.crl (hash: dN6SWz+q15yr8WBx3ttciNEXV5090G2kXOk/umJUMP8=)
2: r5Tl8FZK_359mQAz5_71c6QsEr4.roa (hash: bw0mkbca6ZCZwDsSt10mqa+pHFhQP/m6hZej8E74Pw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmPW0xLWXuTqKNr0OvzIbs7UCA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:74:62:13:49:de:9c:51:14:22:99:a2:64:1d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e63d6d312d65ee4ea28daf43afcc86eced4080f
Validity
Not Before: Nov 11 09:01:53 2025 GMT
Not After : Nov 12 09:01:53 2025 GMT
Subject: CN=1ab74c91247b193b31f33fa401c2347660db9ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:81:95:74:dc:24:1f:cb:c5:e7:fc:63:f5:07:
fe:df:7f:ab:81:14:c0:4c:33:43:df:5f:fc:06:05:
ba:8b:12:1b:40:f3:44:79:e0:b4:3e:62:a8:5a:2a:
1b:8c:0f:25:0a:2e:1a:82:0e:eb:c3:91:77:b4:b2:
14:d6:fc:9e:6d:27:32:08:c8:ce:94:c1:05:5b:49:
ac:20:61:ff:8f:a3:0f:bd:89:2c:0b:e7:17:76:8e:
91:d8:21:53:11:a7:2d:4a:25:0b:1a:35:34:1e:5d:
21:93:3a:7a:a8:4b:91:82:90:d3:64:44:e0:92:d8:
7f:6b:06:56:b8:a0:55:c1:91:b4:94:36:4a:61:3e:
c9:63:70:0a:fe:0f:0f:bd:d9:8a:dd:59:24:59:00:
cb:79:de:03:7d:21:51:75:d7:2d:c0:7b:78:fd:30:
ef:64:bd:73:4c:fc:d1:20:e3:fd:f1:73:0f:06:ca:
e5:dc:06:4d:95:cc:29:ee:b6:ed:32:9d:7d:18:43:
a9:4a:c4:79:c1:55:3f:63:51:1a:ab:2b:4d:7d:27:
78:a4:74:44:27:c6:06:54:ee:ed:9b:be:7d:5e:15:
79:2a:40:06:10:25:9e:61:69:97:d0:69:7d:0b:92:
20:3a:1b:a4:34:53:44:d4:27:a5:33:a7:2d:6b:82:
29:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B7:4C:91:24:7B:19:3B:31:F3:3F:A4:01:C2:34:76:60:DB:9E:D8
X509v3 Authority Key Identifier:
keyid:6E:63:D6:D3:12:D6:5E:E4:EA:28:DA:F4:3A:FC:C8:6E:CE:D4:08:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmPW0xLWXuTqKNr0OvzIbs7UCA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:9e:14:4f:2c:4f:81:16:11:1f:0a:7a:60:ea:fa:59:01:4e:
26:ae:94:42:2c:ba:e4:35:41:03:3f:ba:90:f5:4d:0a:45:4e:
5f:c8:8a:17:20:1f:45:f6:0a:a5:c8:94:47:d1:28:11:3f:50:
41:f4:ee:ac:3f:f7:f2:d0:85:ca:64:ad:e4:a7:b1:9a:8f:f9:
76:c0:99:95:ca:cd:34:94:a9:c3:e1:f4:12:70:bf:5f:8b:f9:
fb:e7:3b:a9:96:ea:77:9c:4b:50:9f:c1:51:e2:40:e1:d1:c2:
49:3c:2c:04:9d:b4:cb:af:e6:59:b3:b6:14:ed:39:13:bf:99:
89:f3:41:50:e4:62:e0:19:35:e9:0c:ad:63:21:68:ab:e0:a3:
d1:ec:4e:13:eb:8c:e7:d9:5e:c8:cb:5f:e8:f6:59:1c:72:94:
e0:a4:48:f7:d4:15:2b:b8:70:96:ee:63:d2:fa:dd:f4:d4:9a:
65:08:ef:7e:74:55:3a:e6:f8:c3:82:ac:9c:83:16:28:b7:0c:
48:a8:89:43:5c:22:a1:d7:40:6b:05:8b:50:1d:e2:a1:01:18:
2a:be:cd:33:c0:5a:4f:4e:ab:99:86:48:ed:8b:3d:a3:62:ff:
cb:82:8b:05:2e:0c:78:6d:0e:a7:0f:fe:39:4e:73:6f:d7:eb:
88:56:0a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:39:23 2025 by rpki-client