Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
File: BpML6MTKaQDu2y8yYNXdeFBXASk.mft (raw, json)
Hash identifier: csXmtXHVuQDP1d238s2xlCgd/APwjJYoMH5F3T3fG70=
Subject key identifier: D3:35:4F:CD:F1:21:6C:63:85:49:F1:EB:C8:2B:60:42:1C:CE:56:B3
Authority key identifier: 06:93:0B:E8:C4:CA:69:00:EE:DB:2F:32:60:D5:DD:78:50:57:01:29
Certificate issuer: /CN=06930be8c4ca6900eedb2f3260d5dd7850570129
Certificate serial: 0198D5F11C6A2689953D6C0954248E87E03E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
Manifest number: 0585
Signing time: Sat 23 Aug 2025 08:00:05 +0000
Manifest this update: Sat 23 Aug 2025 08:00:05 +0000
Manifest next update: Sun 24 Aug 2025 08:00:05 +0000
Files and hashes: 1: 9v1danHKthvigEC35X1SKZS-6Og.roa (hash: lYoHFjCJjYXETX2ehKvjFug+lTMZ9V4bGWZKLE91KWo=)
2: BpML6MTKaQDu2y8yYNXdeFBXASk.crl (hash: Y7mzpuSgaVfrgNBp4Mg4PQbE3T+tM+vSnfQdUu6ZK0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:1c:6a:26:89:95:3d:6c:09:54:24:8e:87:e0:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06930be8c4ca6900eedb2f3260d5dd7850570129
Validity
Not Before: Aug 23 08:00:05 2025 GMT
Not After : Aug 24 08:00:05 2025 GMT
Subject: CN=d3354fcdf1216c638549f1ebc82b60421cce56b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d7:1f:84:ef:55:5a:be:b7:0b:21:27:de:a7:
35:38:67:fb:60:c6:9f:02:18:17:a1:01:0f:9b:41:
b6:1b:d2:fc:96:4e:bc:8e:1b:8e:25:42:ae:95:6d:
9b:42:1a:fe:57:e7:a4:16:69:a9:8d:97:eb:19:54:
71:c8:b7:c5:95:20:3b:83:ac:b5:72:a6:d0:26:4f:
97:99:15:a9:20:bd:1d:9c:be:0a:b3:3d:00:a8:64:
90:d9:cb:c5:e7:83:a9:f7:c3:da:44:68:0f:31:26:
1e:ee:28:0e:c7:ca:59:6c:f1:87:93:49:bf:9e:d0:
c4:a3:2c:f6:f2:6e:dc:93:ea:b1:ca:5c:02:26:50:
6c:3c:a7:5e:f3:4c:00:3d:38:23:10:bd:a5:ab:98:
ff:98:7f:31:82:b1:ee:33:1f:a1:a0:3f:15:24:e6:
ee:d4:3a:fb:11:61:f7:82:6c:17:c6:fd:3a:e2:67:
2c:17:92:fb:64:cf:23:69:40:e8:f8:a3:fe:94:32:
00:c9:5e:be:9a:3d:87:1e:79:26:e5:db:aa:7a:81:
6d:46:91:85:33:56:89:72:ce:8f:a9:da:56:e5:b8:
c6:87:fc:ef:f6:b1:5f:f0:86:47:98:a6:3b:b5:aa:
c9:0b:43:f8:25:1d:3c:ce:dd:9c:6d:c5:d6:d4:48:
60:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:35:4F:CD:F1:21:6C:63:85:49:F1:EB:C8:2B:60:42:1C:CE:56:B3
X509v3 Authority Key Identifier:
keyid:06:93:0B:E8:C4:CA:69:00:EE:DB:2F:32:60:D5:DD:78:50:57:01:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ba:9f:46:8d:e7:70:cb:f1:e3:29:9e:e3:f9:9e:31:b6:7f:
2b:48:9b:89:a3:4f:e7:2d:e9:7a:85:38:72:46:02:cd:9b:72:
44:c1:f1:c6:4e:b0:29:87:af:19:75:1f:ae:b0:47:08:df:a4:
9d:9e:cf:92:44:64:8c:02:51:b5:87:98:c7:69:1a:de:7f:c8:
93:8d:31:25:69:5a:7f:7b:09:09:b4:2a:79:f2:3b:1c:1e:dd:
c9:90:5c:af:3d:98:b9:ea:05:4b:e1:1d:e1:63:df:35:4b:2b:
52:ee:21:20:18:76:80:7b:9e:c8:86:e0:e7:f3:22:5d:2f:b1:
b0:72:ce:d9:8b:c6:98:3e:a9:58:35:23:10:fe:eb:b0:d3:48:
f4:03:c2:d6:f3:40:ad:c8:d7:c8:04:6a:fa:08:b2:7e:d3:09:
46:f7:80:97:36:70:70:76:f4:6b:ee:db:31:f2:7d:08:4d:4f:
46:86:dc:44:73:fe:cd:46:9b:fa:0b:92:d9:79:eb:45:62:11:
39:b9:78:09:b6:92:6d:4e:1f:84:c5:8b:69:49:1e:48:81:2e:
22:0f:b6:15:46:aa:79:b6:dd:ca:39:14:06:7a:68:1d:0c:72:
ab:ad:de:e3:62:7d:89:26:f0:34:a3:f0:7c:62:81:ca:e4:74:
15:77:ae:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:22 2025 by rpki-client