Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
File: BPRq-IXRzLsMCbBocHhbXmkXh-E.mft (raw, json)
Hash identifier: slz572Ve/iU2WNEV355vNIwS7PSOnkiN1ZVEzlHED1w=
Subject key identifier: B6:AF:99:61:3B:91:74:C5:69:C7:F2:5A:EF:C3:68:E8:19:A8:55:54
Authority key identifier: 04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
Certificate issuer: /CN=04f46af885d1ccbb0c09b06870785b5e691787e1
Certificate serial: 019A5263061B79A7E3724EED0063666738A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
Manifest number: 091E
Signing time: Wed 05 Nov 2025 05:00:12 +0000
Manifest this update: Wed 05 Nov 2025 05:00:12 +0000
Manifest next update: Thu 06 Nov 2025 05:00:12 +0000
Files and hashes: 1: BPRq-IXRzLsMCbBocHhbXmkXh-E.crl (hash: B2Xmm4FYhVRQ7y9RvwqfinwM/hLehgiLJEEX8CQWLPk=)
2: WLEkgsNLxhLL76J5KjgZ5ke2MzY.roa (hash: RM1foKQFE5R9Jao+pHN3ZInAMoldAOTi6T7jSW4GCSU=)
3: oZ7M5J6HpPSme6D2TdfG5_Zm_5g.roa (hash: 8k6SZEwbSYAoh3FpUOBzIDoo9yUrmYt/XSxxWhqtR38=)
4: yySGGL88ifuhtX4UWyplsao1PEY.roa (hash: PUZ7Y080pWmyPRE6f/sxnztUsgX4TTtPZlKlNa3Vh2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:06:1b:79:a7:e3:72:4e:ed:00:63:66:67:38:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04f46af885d1ccbb0c09b06870785b5e691787e1
Validity
Not Before: Nov 5 05:00:12 2025 GMT
Not After : Nov 6 05:00:12 2025 GMT
Subject: CN=b6af99613b9174c569c7f25aefc368e819a85554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:de:f4:f4:bd:13:90:bc:96:f4:17:09:2e:08:
71:c5:61:b1:1b:49:0f:76:14:f0:5c:2b:5c:c6:83:
4d:c1:c5:a4:a6:31:ba:f6:cb:aa:15:9b:60:58:9f:
d1:be:b3:8c:d0:d8:b9:b3:e8:88:bd:bc:5f:8c:00:
bc:02:3f:3b:c8:8a:0c:78:d0:74:c5:d7:83:17:58:
11:f2:54:d7:02:36:fb:d4:bc:14:60:f2:a3:07:f3:
04:24:01:9b:6f:8c:94:36:36:91:15:0e:5d:0b:8c:
e4:32:85:43:0d:a9:5d:27:80:45:4b:6c:c2:19:fa:
c1:35:a1:8c:ca:d7:2e:f4:be:9d:67:70:ab:ab:3f:
41:8f:62:b0:df:9f:8c:98:70:19:1d:3d:b1:4b:3f:
cf:32:24:c5:88:14:c6:a1:80:bc:97:c7:dc:a5:a0:
df:ba:16:f9:ee:e6:90:03:f5:8a:80:5b:4b:ee:29:
79:01:2a:33:98:e9:ec:c0:34:88:0f:8a:51:6d:81:
a6:6c:3c:60:f7:7a:1a:94:2d:e8:c8:bf:d0:a4:85:
40:7b:cf:b9:59:06:77:6e:b1:b7:02:f8:26:1c:5e:
bd:c4:eb:05:a5:fb:8c:40:e9:37:c4:18:0e:ef:e6:
19:37:54:87:e4:a2:b5:d1:15:5d:5c:66:fc:ff:5b:
00:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AF:99:61:3B:91:74:C5:69:C7:F2:5A:EF:C3:68:E8:19:A8:55:54
X509v3 Authority Key Identifier:
keyid:04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:69:34:1c:b6:78:06:1a:06:82:f7:4e:7d:91:51:a3:72:9c:
13:5c:ce:81:ee:ad:33:13:09:82:a3:00:bb:90:0d:f7:fa:26:
db:ec:64:b4:35:3b:88:52:34:8c:84:0d:c4:79:bb:cd:7a:1a:
f7:11:cf:77:bd:f4:7a:d6:30:83:d9:89:9f:8c:d4:87:41:3e:
a6:92:07:25:55:70:82:ab:5b:fa:b0:45:73:36:2e:69:4b:7d:
c2:ce:54:85:a6:38:7a:04:d8:88:1f:62:aa:40:22:3b:b2:67:
2b:94:7d:2c:30:cc:1d:bd:81:e0:5a:fc:e6:29:e6:54:f7:5e:
d4:09:0a:a4:61:22:2e:f4:86:3e:1c:b2:02:e8:45:38:57:e6:
86:ec:1f:ae:e7:9b:4c:76:74:ac:6f:33:a7:5c:d7:09:22:70:
58:78:6b:b6:f9:63:89:9a:ee:e5:f4:0f:14:3a:ba:1d:7b:6f:
76:21:9c:4b:ff:bb:db:7f:af:a1:ab:af:88:29:4c:9c:cf:65:
6e:93:65:b5:1d:f1:eb:e2:5b:f6:e6:0e:81:a5:98:b0:cc:40:
52:db:6f:43:04:33:4b:3d:bc:2e:99:a3:19:38:98:24:69:9a:
2f:5a:aa:bd:75:07:42:89:83:d1:ed:6e:8f:95:81:7e:14:88:
4e:90:6b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:21:55 2025 by rpki-client