Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft
File: bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft (raw, json)
Hash identifier: siPKraR4ueGFtRpOK8Ez7A2UBXEQ/mCtmodIfRKaloI=
Subject key identifier: DE:91:22:A3:28:B4:6B:0C:F0:C1:08:A5:DF:2C:1C:BA:67:08:52:0A
Authority key identifier: 6C:B8:50:DE:B2:8B:DB:2F:65:5E:2F:1B:02:D3:7C:13:C6:D4:34:52
Certificate issuer: /CN=6cb850deb28bdb2f655e2f1b02d37c13c6d43452
Certificate serial: 0198955BB6C6ABC89436ACE988E47229F454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft
Manifest number: 03B5
Signing time: Sun 10 Aug 2025 19:01:12 +0000
Manifest this update: Sun 10 Aug 2025 19:01:12 +0000
Manifest next update: Mon 11 Aug 2025 19:01:12 +0000
Files and hashes: 1: bLhQ3rKL2y9lXi8bAtN8E8bUNFI.crl (hash: tWi5oMEDNTHfXagcA4VZSXUHKtZ32BWgrM6tfsOxuKk=)
2: xfuYQjKIwNsH8n8qNl-5nn5swlA.roa (hash: EURGAPm/xAIC/hIpJIK0VPaCfzGhmdAUIaI/It3KKIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 19:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:5b:b6:c6:ab:c8:94:36:ac:e9:88:e4:72:29:f4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb850deb28bdb2f655e2f1b02d37c13c6d43452
Validity
Not Before: Aug 10 19:01:12 2025 GMT
Not After : Aug 11 19:01:12 2025 GMT
Subject: CN=de9122a328b46b0cf0c108a5df2c1cba6708520a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e4:f6:bb:31:f2:89:a0:09:67:8f:ec:e7:97:
f6:13:88:38:9b:f5:27:11:e9:62:d4:0f:51:de:c7:
0e:a0:b3:cb:14:d1:34:8f:58:32:bc:1e:52:72:ed:
83:7b:bf:80:d1:94:b7:d1:55:d4:02:d1:06:aa:72:
ef:7b:8e:14:88:01:f2:cc:02:53:44:e7:04:a7:8c:
6b:43:18:01:7c:0b:a7:35:8a:32:a7:83:28:00:3c:
8d:0a:4a:26:ff:e3:e1:87:c0:e0:0f:e6:b6:ae:92:
19:cb:4f:15:18:ce:a2:dc:5e:2f:44:46:8b:db:cb:
9a:eb:e3:5f:aa:53:84:e5:0c:a2:6c:6e:63:e1:f3:
98:67:f3:04:b8:57:d7:d8:d1:b8:d3:ac:f4:d8:2e:
e2:ec:79:ff:0e:26:4a:83:43:8c:85:a8:14:17:b3:
90:ae:d0:92:4e:79:62:bc:f8:0a:17:72:46:1c:73:
16:7d:f0:7b:8d:f7:39:1b:9d:7e:81:21:e1:0f:c4:
fd:0d:2b:a4:4c:49:ab:71:21:6b:ca:84:ed:c8:ff:
63:d2:68:25:37:90:39:d5:bb:6f:03:7c:d6:b9:39:
87:48:23:53:45:b9:0e:ac:12:a6:cd:51:11:05:9e:
d7:f5:f5:a3:be:2e:a4:c8:da:30:b5:37:d3:55:ff:
16:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:91:22:A3:28:B4:6B:0C:F0:C1:08:A5:DF:2C:1C:BA:67:08:52:0A
X509v3 Authority Key Identifier:
keyid:6C:B8:50:DE:B2:8B:DB:2F:65:5E:2F:1B:02:D3:7C:13:C6:D4:34:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:07:cc:57:c1:5c:bc:a7:c6:83:4c:d6:2d:97:dd:2e:2a:d9:
54:2f:0d:fc:e2:2b:19:9b:df:2c:50:08:63:11:43:26:45:cf:
6d:4a:aa:77:41:ad:92:b0:69:87:b9:d0:9b:ab:ea:92:b4:2a:
78:6c:9f:ac:ab:91:01:68:38:e4:44:54:16:be:8c:3b:16:34:
3c:f7:f0:14:a1:5e:08:15:33:2b:24:ee:6a:3f:04:33:77:a0:
7e:c4:f0:a7:33:29:71:03:89:19:73:7e:e7:49:a9:35:38:72:
90:42:a4:a0:11:6b:a9:84:fb:02:ca:21:a6:80:24:f8:a7:e9:
a2:54:22:00:ec:d1:3f:02:c6:31:4b:6e:93:69:75:8d:50:cd:
a8:91:27:10:46:2f:69:9b:aa:ce:70:92:30:ac:29:0a:3e:90:
6c:81:d2:24:14:25:eb:4c:e2:1d:70:a4:64:1f:09:0b:99:03:
a6:2b:0c:a2:c3:50:3c:fd:47:51:e3:ed:5d:d6:21:c2:ef:ef:
fd:be:71:c8:24:93:c5:23:75:fe:4b:06:45:5c:50:54:4d:41:
ba:25:b2:b9:86:fe:f0:91:e6:7e:0b:24:d8:fc:76:3f:2a:98:
62:1a:09:3f:04:60:96:7b:2b:26:ff:93:6f:54:1b:3d:ca:10:
25:60:3d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:06:14 2025 by rpki-client