Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
File: BPRq-IXRzLsMCbBocHhbXmkXh-E.mft (raw, json)
Hash identifier: xVOj1vkS5YtDKqRJT3p+SjJ6g07/0FKhjMMRiJTFO+A=
Subject key identifier: E0:62:61:8C:9F:7C:3D:BE:39:9E:F4:0A:D9:13:7A:89:31:C6:E7:C3
Authority key identifier: 04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
Certificate issuer: /CN=04f46af885d1ccbb0c09b06870785b5e691787e1
Certificate serial: 0199FF59AE6EC91E84D3F079965B37156FC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
Manifest number: 08F3
Signing time: Mon 20 Oct 2025 02:01:31 +0000
Manifest this update: Mon 20 Oct 2025 02:01:31 +0000
Manifest next update: Tue 21 Oct 2025 02:01:31 +0000
Files and hashes: 1: BPRq-IXRzLsMCbBocHhbXmkXh-E.crl (hash: IVWd2FFDWA4V+0M0yyWVKW1cRZbkEB9thywPoOGXolM=)
2: WLEkgsNLxhLL76J5KjgZ5ke2MzY.roa (hash: RM1foKQFE5R9Jao+pHN3ZInAMoldAOTi6T7jSW4GCSU=)
3: oZ7M5J6HpPSme6D2TdfG5_Zm_5g.roa (hash: 8k6SZEwbSYAoh3FpUOBzIDoo9yUrmYt/XSxxWhqtR38=)
4: yySGGL88ifuhtX4UWyplsao1PEY.roa (hash: PUZ7Y080pWmyPRE6f/sxnztUsgX4TTtPZlKlNa3Vh2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:ae:6e:c9:1e:84:d3:f0:79:96:5b:37:15:6f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04f46af885d1ccbb0c09b06870785b5e691787e1
Validity
Not Before: Oct 20 02:01:31 2025 GMT
Not After : Oct 21 02:01:31 2025 GMT
Subject: CN=e062618c9f7c3dbe399ef40ad9137a8931c6e7c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:01:53:a1:d8:7f:ae:43:db:5d:e0:34:00:71:
9c:fe:62:18:84:85:ad:16:68:26:2e:7b:41:93:9d:
cb:c2:e7:c4:26:26:b5:de:c8:7b:63:a7:2d:b5:73:
7a:b4:2e:0f:a9:85:2d:cc:53:21:61:b4:ba:35:57:
36:85:12:a2:ed:b2:a6:7a:f5:f9:f8:0c:53:5d:e0:
d5:ce:a7:f2:ea:b9:a6:eb:68:72:b4:39:dc:ad:c6:
7b:84:a9:de:bf:cf:bb:3a:79:9d:55:8f:a4:4d:cb:
2a:93:d7:1b:8a:c8:12:dd:4c:d1:3f:b6:00:29:73:
d3:41:08:77:44:d7:ff:83:77:1e:6a:4e:9a:1f:b3:
62:36:51:d6:8b:f7:1e:11:30:1c:b2:52:71:f0:ce:
96:ed:c3:73:c3:f6:d2:11:4a:2e:ca:19:b7:db:07:
5c:31:7e:6b:d2:68:8c:e1:15:ec:c2:89:d1:66:c9:
20:d8:81:b3:44:30:23:3a:71:b8:50:b4:28:7f:16:
7a:19:58:c3:32:89:56:1a:c6:f4:7c:b8:fe:ee:61:
cb:3b:32:9e:4c:6a:bb:2a:34:f0:15:ce:a1:e3:c2:
54:b2:ce:b6:54:1d:40:3b:3e:ce:09:27:24:6a:d1:
39:1e:a0:ef:be:e9:10:b6:bf:12:8c:6c:4a:f7:61:
b6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:62:61:8C:9F:7C:3D:BE:39:9E:F4:0A:D9:13:7A:89:31:C6:E7:C3
X509v3 Authority Key Identifier:
keyid:04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:3c:11:ea:5c:24:4d:fb:78:83:3d:b0:7d:06:e6:e8:22:de:
d3:85:22:c8:ba:10:9c:80:5a:28:f8:ea:51:7b:b9:48:62:dd:
b2:74:bb:99:c1:9e:9d:9a:e8:f8:3c:33:e8:be:f5:3f:f6:5a:
5f:fb:a9:12:c4:d4:9c:c4:59:b2:ad:7a:3c:33:c2:73:74:7a:
f3:ae:11:2d:3a:38:51:18:1b:39:9a:24:3f:56:27:f8:7e:74:
71:67:76:e3:23:f7:7b:d6:fe:6d:5d:bb:57:0f:57:55:1d:13:
ef:86:d2:ea:96:9a:22:ee:67:05:1f:00:f9:22:76:7b:d8:03:
c7:14:b3:b3:49:34:a0:e5:0f:1e:2f:71:b1:6c:49:a5:0d:c5:
9f:93:3f:8d:e9:c3:e8:62:1e:b9:3e:b7:3a:46:fd:19:f1:03:
ee:39:00:0f:9a:69:26:8a:b7:b4:70:7e:1d:69:c8:0d:ec:89:
b2:e5:54:2f:1e:2a:53:ee:70:43:55:49:07:c1:a4:bf:b2:9c:
5d:0c:3d:8f:f9:e1:a7:86:1d:0a:78:17:7b:09:55:7f:9f:06:
ac:6d:19:2a:2c:44:0b:03:13:42:95:0c:a0:e3:4b:a0:0e:36:
52:03:76:4e:47:1f:b0:d3:30:23:7f:65:c1:59:51:10:06:cc:
da:d8:47:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:18:43 2025 by rpki-client