Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
File: BlpHDbq5wcM08PhfQXzRqkJenxM.mft (raw, json)
Hash identifier: Iob50Kq+Smbf1VUaxlFSxEu/lBYbjzt6BeLaHx60vjs=
Subject key identifier: AE:2B:B7:50:CC:D0:E6:48:CA:11:34:AC:37:50:2E:91:12:AF:1C:36
Authority key identifier: 06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13
Certificate issuer: /CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13
Certificate serial: 019A4DAB160BA74704CEED6FEF3AE0E8233E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
Manifest number: 0617
Signing time: Tue 04 Nov 2025 07:00:49 +0000
Manifest this update: Tue 04 Nov 2025 07:00:49 +0000
Manifest next update: Wed 05 Nov 2025 07:00:49 +0000
Files and hashes: 1: 0j4zGysO_O-dzNVZ-jKiyP9Ggsc.roa (hash: Gf2VsJuB8duFQ6nJJfI/YawuoQ34OO9JSfa7KF4vi0Y=)
2: BlpHDbq5wcM08PhfQXzRqkJenxM.crl (hash: HQZOMSrr3F8qgP6RZEje6C52F3PBaI5CFtuycCkQkUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:16:0b:a7:47:04:ce:ed:6f:ef:3a:e0:e8:23:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13
Validity
Not Before: Nov 4 07:00:49 2025 GMT
Not After : Nov 5 07:00:49 2025 GMT
Subject: CN=ae2bb750ccd0e648ca1134ac37502e9112af1c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:58:87:b1:33:03:42:a6:ae:2e:8f:8b:ac:03:
73:1c:a7:84:8a:ef:9c:f8:69:19:88:73:9e:d8:a2:
96:c4:1c:92:55:01:da:1c:ee:e5:1b:73:ae:21:10:
7b:5f:1f:13:0e:76:ba:e2:ce:6e:20:30:91:6f:d8:
c4:ec:5d:8b:41:56:bc:09:14:6a:6f:5a:87:77:11:
ed:64:16:22:49:00:19:8b:af:fe:ea:7a:b8:ee:8a:
e3:50:13:ba:73:24:5d:bc:7a:98:d0:99:34:ad:99:
2e:94:66:15:e8:d7:61:47:17:ce:f9:71:79:b0:58:
6a:15:98:bd:3f:04:6f:cf:ba:4b:bb:46:71:6c:db:
30:7d:a9:2c:bb:0f:47:88:4e:92:07:35:40:64:03:
1a:f9:c7:ae:4e:e2:5f:56:4a:4d:bc:a0:5d:fa:b6:
c4:40:2d:3c:86:80:bf:8c:62:68:a6:d5:5b:b6:fe:
57:05:2a:c5:17:31:ca:36:5a:22:e9:84:3c:97:35:
7b:34:53:52:8d:2b:65:9a:50:60:03:fa:cf:3d:aa:
cc:bb:5d:79:26:ea:8a:89:bb:1a:46:62:99:c1:81:
d6:57:0f:33:00:0e:75:be:3f:ab:71:e4:3a:80:d8:
5a:2c:ef:ae:b6:25:29:89:8f:11:69:b8:30:dd:6a:
f4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2B:B7:50:CC:D0:E6:48:CA:11:34:AC:37:50:2E:91:12:AF:1C:36
X509v3 Authority Key Identifier:
keyid:06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:0d:6f:28:a6:9b:55:1b:aa:c9:63:9a:1d:87:ea:99:cc:1a:
ab:e1:c7:8b:57:52:fc:27:b7:5f:c4:14:46:52:80:7d:69:5c:
0a:1b:2c:81:74:65:80:36:75:43:90:2f:6a:89:20:a0:74:c9:
fa:91:80:37:27:cc:79:f0:0c:d5:1e:45:9f:85:43:b7:70:8e:
bc:38:d7:bb:48:82:82:2d:25:87:c6:1c:c1:2a:13:6d:f2:f2:
79:13:5a:95:87:47:f6:46:68:df:06:62:ff:05:cc:af:5f:61:
6e:1a:aa:5e:5d:f4:35:dd:10:a4:09:54:05:cd:66:c1:e3:99:
31:ed:d6:63:91:52:6a:1e:d0:bb:e2:00:11:a5:fa:7a:39:fc:
23:73:ca:b9:9a:c4:29:b0:d5:1f:63:93:92:32:4c:8c:b4:20:
ef:bc:1a:06:be:c8:5e:ec:a2:f7:55:c3:95:15:af:a7:c1:a0:
4c:80:87:11:1d:0a:24:03:28:47:37:33:2a:16:9c:ac:23:52:
bf:79:27:20:d0:d1:30:74:d7:ff:de:0c:92:36:ae:99:79:d3:
e6:a2:df:fd:25:28:da:f2:14:8c:e1:08:fb:be:c6:b6:d9:e9:
39:d6:2c:8f:31:2d:db:84:94:1a:54:64:37:23:8a:0b:a9:ec:
92:2c:93:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:40 2025 by rpki-client