Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
File: BpML6MTKaQDu2y8yYNXdeFBXASk.mft (raw, json)
Hash identifier: lElzA6dP8ivn/QsBs1Xy4uiS7KWOJIQa0lnC4xmIirg=
Subject key identifier: 13:A5:05:7D:F2:E8:00:2B:0C:06:56:86:D5:B6:92:30:3C:2D:B3:AF
Authority key identifier: 06:93:0B:E8:C4:CA:69:00:EE:DB:2F:32:60:D5:DD:78:50:57:01:29
Certificate issuer: /CN=06930be8c4ca6900eedb2f3260d5dd7850570129
Certificate serial: 019A4E86A29B4AB15D8C21C99DF1EACB0A29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
Manifest number: 0648
Signing time: Tue 04 Nov 2025 11:00:37 +0000
Manifest this update: Tue 04 Nov 2025 11:00:37 +0000
Manifest next update: Wed 05 Nov 2025 11:00:37 +0000
Files and hashes: 1: 9v1danHKthvigEC35X1SKZS-6Og.roa (hash: lYoHFjCJjYXETX2ehKvjFug+lTMZ9V4bGWZKLE91KWo=)
2: BpML6MTKaQDu2y8yYNXdeFBXASk.crl (hash: Gakkxsv0Qhzay6yBAx+acJBcLNJEDiHFFkncMLXEuTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:a2:9b:4a:b1:5d:8c:21:c9:9d:f1:ea:cb:0a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06930be8c4ca6900eedb2f3260d5dd7850570129
Validity
Not Before: Nov 4 11:00:37 2025 GMT
Not After : Nov 5 11:00:37 2025 GMT
Subject: CN=13a5057df2e8002b0c065686d5b692303c2db3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b9:b1:a3:26:f6:cc:31:cb:5c:6d:a8:30:44:
35:a2:a3:0e:2e:02:b9:76:c8:89:3c:e5:d0:f4:1f:
ed:6e:aa:20:c5:08:0c:b0:f9:47:96:fe:e0:a7:53:
e4:d7:19:21:6c:1e:84:d9:25:5b:ce:13:08:7d:8b:
65:7d:9c:ed:10:89:b1:3f:e5:65:4a:83:df:25:7e:
17:33:62:e1:e1:5a:e8:b1:5f:14:5a:7b:a2:0e:36:
46:2c:15:6b:d0:f8:e0:f8:79:ab:a6:d9:47:9c:f6:
9d:4f:5b:e5:c6:f6:5d:15:8e:31:bc:a6:be:00:e9:
65:dc:73:e9:af:7c:94:6f:2c:fa:04:c6:a0:47:f9:
09:5e:03:c6:a7:e9:f5:59:97:12:52:74:ac:bd:90:
95:9d:90:9d:da:7c:b5:b4:ec:49:e4:02:db:36:33:
fe:44:77:c6:5e:99:ff:33:90:52:a4:9c:22:5d:5d:
86:7c:a3:29:58:2b:e4:2e:bc:68:21:61:87:a5:0f:
fa:33:68:91:12:09:e8:5e:a3:e7:26:b0:05:2d:b5:
a0:c7:a8:af:6b:07:4b:2a:d5:7b:4a:f4:94:ce:23:
a6:93:52:7c:2f:4f:88:6c:60:ce:82:f8:b0:c5:aa:
29:c9:6b:ab:d6:4c:90:af:a3:1e:a1:09:24:3d:ce:
fa:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A5:05:7D:F2:E8:00:2B:0C:06:56:86:D5:B6:92:30:3C:2D:B3:AF
X509v3 Authority Key Identifier:
keyid:06:93:0B:E8:C4:CA:69:00:EE:DB:2F:32:60:D5:DD:78:50:57:01:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ab:dc:3a:14:d4:a4:4d:1c:8c:94:dc:d4:e4:41:40:d8:2d:
fc:67:04:80:fa:d1:6f:a8:3b:ac:84:82:a5:1e:16:07:d9:60:
3f:72:bf:e3:5b:1c:b4:2f:23:2d:99:2d:6b:28:cf:42:fa:72:
e9:e9:54:21:07:c3:6f:c3:e1:89:35:8e:80:76:e9:38:ab:59:
01:a3:7c:6f:1f:ee:ac:8c:69:89:d6:2c:e0:46:f8:fb:f1:54:
12:e8:20:13:ad:06:ce:6d:18:70:d6:fb:9a:ae:06:a7:5e:da:
11:89:8a:32:7c:0d:8c:2d:e6:75:d2:4c:f9:e2:63:40:76:25:
90:02:7f:fc:3f:83:18:64:8c:5a:ec:f7:9a:ff:0b:3d:ad:25:
71:09:ec:9a:fd:d0:fd:84:54:bf:13:05:72:7c:7e:5c:60:84:
51:1c:37:85:db:38:17:5a:b5:bb:55:28:27:4f:66:6f:b6:7f:
35:93:e2:42:6e:88:e5:85:25:95:93:eb:9a:2c:84:0c:23:e8:
75:ea:55:12:99:c9:94:8f:76:ce:eb:51:ef:91:1b:5d:44:d2:
e4:ed:1e:ab:0b:d1:25:b9:2d:06:90:66:cd:96:c1:9d:f0:c4:
81:46:3f:41:11:04:42:a0:3f:51:a7:eb:dd:a9:f1:ac:5b:13:
b0:c0:ae:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:29 2025 by rpki-client