Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
File: BlpHDbq5wcM08PhfQXzRqkJenxM.mft (raw, json)
Hash identifier: o13p4fV1yrhlay/nrcQOJntbwiuZjAK2ReQNrLa1A0k=
Subject key identifier: 28:6E:B6:6B:3A:35:BD:CD:D5:C4:AD:88:24:A3:A8:D6:EA:77:3B:AA
Authority key identifier: 06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13
Certificate issuer: /CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13
Certificate serial: 0198733D8BFDA4399A70CBA2C0C0F789DBBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
Manifest number: 051D
Signing time: Mon 04 Aug 2025 04:01:09 +0000
Manifest this update: Mon 04 Aug 2025 04:01:09 +0000
Manifest next update: Tue 05 Aug 2025 04:01:09 +0000
Files and hashes: 1: BlpHDbq5wcM08PhfQXzRqkJenxM.crl (hash: LLS9mdKudkiNsCM9r0haUB4eV2P186x0+sc5IW4jOUU=)
2: ad6x4CiW1Da9W7G7xb_TGfwpp78.roa (hash: YUb9Lf1mTN1JjvT/olnYRSLlIBS8OJGKrxw+VtVpgBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:8b:fd:a4:39:9a:70:cb:a2:c0:c0:f7:89:db:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13
Validity
Not Before: Aug 4 04:01:09 2025 GMT
Not After : Aug 5 04:01:09 2025 GMT
Subject: CN=286eb66b3a35bdcdd5c4ad8824a3a8d6ea773baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5b:0f:ff:49:fa:b5:b1:0b:70:ad:a9:b8:55:
80:46:6a:1b:29:ea:23:b7:59:2e:a8:c4:dd:73:28:
c3:a1:36:01:0b:b3:27:da:37:b7:08:4d:b7:15:7f:
15:56:cc:d0:a4:03:12:6e:be:6b:ed:e0:e1:f1:62:
b5:2a:e2:4e:ed:6f:a7:ef:08:98:0f:7b:14:2f:82:
98:80:6b:f5:8f:18:37:bc:cd:15:cf:b8:05:65:80:
19:a5:df:b5:88:7f:22:a7:e5:54:50:39:80:d4:e8:
ef:f7:42:a0:ab:40:1a:7b:0a:42:34:ad:a3:b1:d7:
d6:41:d8:4d:fc:81:94:d0:3e:2f:71:b2:7c:41:a3:
21:ca:aa:f5:af:de:c3:80:1c:49:8b:a2:d6:34:21:
70:f3:35:17:ee:a2:bb:71:70:1e:4d:c7:17:52:35:
d9:42:81:a1:4b:62:e9:58:5d:9c:ed:e1:ee:dd:aa:
84:16:8e:6b:fe:c0:54:b0:ce:c7:55:c6:bd:5b:4e:
37:91:53:96:69:5b:f4:54:4f:a2:8d:d7:af:d1:cd:
ea:6a:dd:84:ef:81:24:98:01:5f:1e:84:09:1a:d0:
e1:f5:f9:6c:6e:4c:ef:e1:4a:09:0d:55:8b:d7:cf:
6c:e5:fa:16:d3:6c:4b:2a:cf:da:3d:35:4e:7a:c3:
1b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6E:B6:6B:3A:35:BD:CD:D5:C4:AD:88:24:A3:A8:D6:EA:77:3B:AA
X509v3 Authority Key Identifier:
keyid:06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:4e:6c:a3:8c:f7:3e:dd:ac:b8:de:b4:11:cd:5b:af:28:08:
31:cd:c4:88:2f:00:bb:20:10:70:18:bc:00:74:36:91:c4:8c:
ff:67:78:8b:c5:8f:e1:db:81:db:54:71:a0:f1:5a:f7:5f:7f:
9d:c7:75:88:a9:07:7e:23:10:fc:f1:0f:10:f6:43:aa:da:56:
73:49:80:8f:80:14:83:0b:ff:b9:49:b1:48:78:64:a1:f6:17:
ec:bc:13:f2:1c:29:43:db:11:0d:1a:d6:60:e4:ae:e3:25:51:
34:b4:92:77:9c:ec:26:9d:f2:3c:a2:b1:09:a6:70:68:67:b1:
fd:ba:1e:76:a2:7f:bd:40:75:94:19:75:92:9d:dd:a7:92:ad:
0d:57:9e:18:9d:7c:2c:0e:2f:20:df:93:ab:9c:55:7d:b7:b0:
f8:f0:87:4d:47:16:6e:21:87:61:59:1a:4a:83:93:48:3e:1f:
31:74:5c:2e:09:4d:0e:7d:31:3d:c8:b5:58:3b:9e:30:38:22:
44:8b:61:6e:7c:47:8f:bc:bc:96:a4:95:80:45:4c:bc:3d:4c:
a7:01:a7:0e:b2:66:26:0c:1b:c4:2c:d4:7c:25:dc:1e:ee:c8:
20:5b:f2:24:67:b0:49:04:d2:cc:0c:49:3c:e7:3c:b8:a2:f2:
7f:dd:06:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:21:10 2025 by rpki-client