Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
File: Blyf7bW1RPaW7U2vE1sC3ubZevY.mft (raw, json)
Hash identifier: tvMSP9tgC7vcKYP8rqLbyXVvkZJCDCfCHuE+24ESlcM=
Subject key identifier: 75:9F:C3:61:B8:0A:D5:31:EF:79:B3:B2:E1:AF:10:04:E0:95:BE:91
Authority key identifier: 06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6
Certificate issuer: /CN=065c9fedb5b544f696ed4daf135b02dee6d97af6
Certificate serial: 019A4E86AF27A2946472023EF31C58BBCE89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 11:00:40 +0000
Manifest this update: Tue 04 Nov 2025 11:00:40 +0000
Manifest next update: Wed 05 Nov 2025 11:00:40 +0000
Files and hashes: 1: Blyf7bW1RPaW7U2vE1sC3ubZevY.crl (hash: DCLRCcNtAxUBjpiZBdKfupLc29kO7ZgbZZYq9CirCIg=)
2: UVnhMz4Jh2elkuvmMPm7Jt9svi8.roa (hash: he6S2b9IPHmcJG3wUgyxY2EilJ7c6oeB4o0eAPgBdLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:af:27:a2:94:64:72:02:3e:f3:1c:58:bb:ce:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=065c9fedb5b544f696ed4daf135b02dee6d97af6
Validity
Not Before: Nov 4 11:00:40 2025 GMT
Not After : Nov 5 11:00:40 2025 GMT
Subject: CN=759fc361b80ad531ef79b3b2e1af1004e095be91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:be:a2:2f:78:a8:e9:fd:ad:69:32:28:49:94:
53:85:a0:2f:2c:ef:9f:55:d2:91:a5:7c:bf:f8:b1:
e7:f1:ce:35:34:e6:ba:a5:9d:48:4c:dd:0e:9e:56:
c0:dd:3c:7b:58:0d:e3:c9:ad:26:e6:03:97:7f:72:
42:a6:0d:bb:80:5a:1b:04:ba:04:a8:e5:6d:aa:36:
cb:fc:c7:5b:44:d6:f2:3b:3c:09:7d:e8:ab:3a:cd:
f1:b9:14:f6:fe:27:b9:bf:19:f3:de:63:af:40:b0:
d7:ec:fd:63:d7:1d:f3:4e:48:b1:df:14:1a:7b:9f:
04:5e:f2:bb:83:25:65:60:21:03:26:8e:56:b9:f1:
b5:e7:25:32:30:01:a8:5f:a3:4c:02:d5:bd:ae:af:
e9:74:98:39:fd:60:8e:2e:43:e5:d3:2a:f2:52:fa:
cb:47:1e:31:bb:60:43:3d:77:67:af:c1:98:7b:fa:
88:b0:cd:1f:39:f5:33:1e:5d:e1:fb:cc:06:94:14:
bf:c4:f8:05:a6:be:99:6b:0d:15:4b:f5:b4:46:27:
93:d5:cc:33:fb:7b:07:76:e4:0f:2d:17:2a:31:c9:
89:7b:da:7a:bf:30:c1:84:aa:ad:09:38:48:a6:89:
99:a6:87:4c:4a:a9:0b:c6:fa:2b:bf:c8:4e:8d:f0:
e2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9F:C3:61:B8:0A:D5:31:EF:79:B3:B2:E1:AF:10:04:E0:95:BE:91
X509v3 Authority Key Identifier:
keyid:06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:9b:9a:df:c2:bf:44:58:10:77:ae:b6:e0:34:db:32:28:a1:
43:7f:a5:92:1a:65:4d:97:ab:c2:45:dc:04:8c:52:fc:f6:21:
21:b5:cf:c1:78:96:77:8e:7f:0a:cd:be:6e:00:24:be:b8:15:
bb:8d:af:e1:64:73:47:fc:b8:e4:0e:74:aa:19:4f:3a:29:21:
86:1b:a4:6c:c8:33:10:4c:c5:25:54:06:a0:35:fa:03:d2:9c:
92:d4:f9:59:7f:3d:61:b9:34:04:5b:07:58:53:ae:8a:10:19:
d1:46:5b:67:aa:9b:47:14:e1:43:51:92:b2:35:3c:4a:ea:0d:
47:ab:b5:f5:73:ce:27:85:b0:39:d4:87:39:68:e9:a2:26:9a:
81:1f:d0:11:e4:f4:ea:f1:88:7c:b2:e5:29:d7:f2:cd:2f:71:
ec:c9:a7:d5:bb:70:40:09:86:9f:c4:71:83:af:1c:5d:78:6f:
bf:35:d7:6e:c5:f0:62:0c:e1:0d:b2:61:50:1f:46:10:94:16:
b6:ef:6b:19:22:64:c1:8e:b9:f7:00:0c:12:c4:3e:ce:a6:17:
a3:4c:1b:1b:7c:e2:4f:b0:71:86:65:81:d0:32:d9:03:76:1b:
dc:85:48:41:3b:34:f1:36:a4:2f:00:74:06:61:f5:c0:aa:63:
a5:aa:8a:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhq8nopRkcgI+8xxYu86JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NWM5ZmVkYjViNTQ0ZjY5NmVkNGRhZjEzNWIwMmRlZTZk
OTdhZjYwHhcNMjUxMTA0MTEwMDQwWhcNMjUxMTA1MTEwMDQwWjAzMTEwLwYDVQQD
Eyg3NTlmYzM2MWI4MGFkNTMxZWY3OWIzYjJlMWFmMTAwNGUwOTViZTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsL6iL3io6f2taTIoSZRThaAvLO+f
VdKRpXy/+LHn8c41NOa6pZ1ITN0OnlbA3Tx7WA3jya0m5gOXf3JCpg27gFobBLoE
qOVtqjbL/MdbRNbyOzwJfeirOs3xuRT2/ie5vxnz3mOvQLDX7P1j1x3zTkix3xQa
e58EXvK7gyVlYCEDJo5WufG15yUyMAGoX6NMAtW9rq/pdJg5/WCOLkPl0yryUvrL
Rx4xu2BDPXdnr8GYe/qIsM0fOfUzHl3h+8wGlBS/xPgFpr6Zaw0VS/W0RieT1cwz
+3sHduQPLRcqMcmJe9p6vzDBhKqtCThIpomZpodMSqkLxvorv8hOjfDiTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWfw2G4CtUx73mzsuGvEATglb6RMB8GA1UdIwQY
MBaAFAZcn+21tUT2lu1NrxNbAt7m2Xr2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmx5ZjdiVzFSUGFXN1UydkUxc0MzdWJaZXZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84MWIyNzYtZTczNi00MTcyLTgwYTkt
MThkNjkwMzY3NTNiLzEvQmx5ZjdiVzFSUGFXN1UydkUxc0MzdWJaZXZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS84MWIyNzYtZTczNi00MTcyLTgwYTktMThkNjkwMzY3NTNi
LzEvQmx5ZjdiVzFSUGFXN1UydkUxc0MzdWJaZXZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW5ua38K/
RFgQd6624DTbMiihQ3+lkhplTZerwkXcBIxS/PYhIbXPwXiWd45/Cs2+bgAkvrgV
u42v4WRzR/y45A50qhlPOikhhhukbMgzEEzFJVQGoDX6A9KcktT5WX89Ybk0BFsH
WFOuihAZ0UZbZ6qbRxThQ1GSsjU8SuoNR6u19XPOJ4WwOdSHOWjpoiaagR/QEeT0
6vGIfLLlKdfyzS9x7Mmn1btwQAmGn8Rxg68cXXhvvzXXbsXwYgzhDbJhUB9GEJQW
tu9rGSJkwY659wAMEsQ+zqYXo0wbG3ziT7BxhmWB0DLZA3Yb3IVIQTs08TakLwB0
BmH1wKpjpaqK+g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:53 2025 by rpki-client