Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft
File: bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft (raw, json)
Hash identifier: 9XmM7Sq6ftnRcrGj+Gdq7YXlWC7gJ/b+TQo661x8ndo=
Subject key identifier: 1E:76:C7:A0:F1:E8:FD:92:27:38:25:E2:B1:BB:7C:34:18:95:08:12
Authority key identifier: 6E:63:D6:D3:12:D6:5E:E4:EA:28:DA:F4:3A:FC:C8:6E:CE:D4:08:0F
Certificate issuer: /CN=6e63d6d312d65ee4ea28daf43afcc86eced4080f
Certificate serial: 019A515100253CB73EF64000E5F2C4EA2662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmPW0xLWXuTqKNr0OvzIbs7UCA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft
Manifest number: 060F
Signing time: Wed 05 Nov 2025 00:00:54 +0000
Manifest this update: Wed 05 Nov 2025 00:00:54 +0000
Manifest next update: Thu 06 Nov 2025 00:00:54 +0000
Files and hashes: 1: bmPW0xLWXuTqKNr0OvzIbs7UCA8.crl (hash: jFChoYdNON8IqjcYU/kyPwq799TkmKwNQqXDxU7i1Z8=)
2: r5Tl8FZK_359mQAz5_71c6QsEr4.roa (hash: bw0mkbca6ZCZwDsSt10mqa+pHFhQP/m6hZej8E74Pw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmPW0xLWXuTqKNr0OvzIbs7UCA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:00:25:3c:b7:3e:f6:40:00:e5:f2:c4:ea:26:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e63d6d312d65ee4ea28daf43afcc86eced4080f
Validity
Not Before: Nov 5 00:00:54 2025 GMT
Not After : Nov 6 00:00:54 2025 GMT
Subject: CN=1e76c7a0f1e8fd92273825e2b1bb7c3418950812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:12:21:eb:f0:38:a9:4f:8b:98:9b:f3:57:29:
34:46:cc:7c:86:75:5f:4b:7f:c5:a6:bb:63:f2:ae:
bb:64:90:91:3a:0d:4b:a0:05:51:d3:51:d6:5a:5a:
00:ff:b8:54:0a:eb:77:9f:ab:d6:9b:09:2b:23:f9:
a9:a7:01:3c:25:3f:ed:e6:b6:bf:42:64:fa:92:59:
36:71:6a:3b:b1:6d:f9:40:42:48:45:ea:9b:89:0f:
df:d1:98:63:cd:ab:b6:5e:fb:d2:81:fd:90:3e:0d:
70:42:ea:46:88:12:02:52:e2:17:55:17:91:af:28:
35:6b:6d:c0:cb:a7:d4:86:16:11:db:f9:b1:27:e0:
f4:e8:da:5b:81:d7:43:6a:76:39:46:40:48:11:e3:
d9:c6:78:cb:f3:d8:2f:32:84:eb:32:dc:3d:a5:7d:
b5:19:ed:bb:db:40:00:46:84:54:70:de:31:e5:04:
4a:f4:2f:37:8e:1f:4b:dd:fe:68:bc:37:b1:7e:c7:
ac:48:f5:dd:9f:11:fe:64:02:8c:b8:7a:c2:6a:b6:
a3:52:6a:ec:1a:61:bb:d2:48:00:7f:d8:15:0b:ab:
c0:5d:17:6b:9b:77:8f:31:95:88:5e:69:b2:e0:38:
68:37:76:08:9d:34:6c:33:aa:6b:78:4a:5b:58:b3:
45:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:76:C7:A0:F1:E8:FD:92:27:38:25:E2:B1:BB:7C:34:18:95:08:12
X509v3 Authority Key Identifier:
keyid:6E:63:D6:D3:12:D6:5E:E4:EA:28:DA:F4:3A:FC:C8:6E:CE:D4:08:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmPW0xLWXuTqKNr0OvzIbs7UCA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:bf:ec:11:a4:42:6e:ba:89:54:99:a6:2d:17:21:e2:b2:32:
c5:d4:6c:a1:73:8d:8d:ce:1d:a2:c3:6b:a6:04:29:79:c3:43:
7c:c4:ff:32:a6:2a:aa:eb:bf:f1:4a:cb:13:d4:f0:e5:51:b5:
67:15:d4:fe:1e:0a:17:74:af:db:ce:84:0a:ac:64:48:57:d6:
7c:15:bf:11:09:18:ba:21:52:99:fd:f0:5f:d0:11:9c:60:d1:
a6:db:f0:e2:8d:66:03:63:76:0f:2f:a8:20:5b:fa:1a:56:56:
8e:6e:89:55:ce:ff:bc:da:9f:7a:41:0c:7e:6a:84:a2:e0:44:
f8:7c:f7:cc:ae:4f:f5:f0:41:20:93:12:33:39:76:03:76:3a:
b7:78:76:74:84:b8:f3:79:59:09:c1:88:49:89:b1:ee:eb:e6:
58:26:1d:da:59:96:38:44:8e:61:ce:93:1e:88:f7:10:19:db:
58:5c:e0:52:2b:5c:20:41:0b:26:3a:7b:f1:b9:7f:ae:48:37:
51:6c:2e:13:d1:dd:a2:95:45:ce:0a:9c:b2:4d:0c:fc:03:ae:
f8:37:27:3f:6c:54:db:72:1c:fd:68:76:f3:01:7f:03:63:ec:
ea:6f:9e:83:3b:8e:1f:85:04:60:89:da:a8:e1:68:04:90:fa:
d3:e9:bc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:33:50 2025 by rpki-client