Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
File: _Blb1oKo6aEk1YU9xekIquczm64.mft (raw, json)
Hash identifier: RLaJxMyKrH0OXeJ2XgU6d7ky/aMesylMkoplSwQrJnU=
Subject key identifier: 8A:DF:9F:77:FE:79:41:00:43:1D:1B:4C:89:3E:77:1F:7F:44:53:C5
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial: 019A50073AA17D9549F19427E594521D28B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
Manifest number: 14B4
Signing time: Tue 04 Nov 2025 18:00:42 +0000
Manifest this update: Tue 04 Nov 2025 18:00:42 +0000
Manifest next update: Wed 05 Nov 2025 18:00:42 +0000
Files and hashes: 1: C0o6u4617ldzXCQhJDGF4IWONDQ.roa (hash: oggwBkJK9nhHHHUHaINutEQuhqdlfpUhFtxzmUm75kw=)
2: _Blb1oKo6aEk1YU9xekIquczm64.crl (hash: 0ioNymhgYKipwRLNPeB6K5duVRa4779SvYRaoPtyUek=)
3: eFaXAXJtU1k2p2wxUd4r6QNwVqc.roa (hash: RkwbFEsvbm5cD3j9VERr9RV6cFSAdbYRW8TdBaZFLJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:3a:a1:7d:95:49:f1:94:27:e5:94:52:1d:28:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Validity
Not Before: Nov 4 18:00:42 2025 GMT
Not After : Nov 5 18:00:42 2025 GMT
Subject: CN=8adf9f77fe794100431d1b4c893e771f7f4453c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2a:b6:5c:83:20:e6:99:50:8c:00:14:0b:52:
10:fe:c7:80:73:91:ff:c7:93:78:56:97:ee:7d:ab:
c2:fa:96:14:42:f2:ec:21:9b:74:bc:d3:b2:3c:f3:
9b:95:9c:95:be:93:2a:f4:58:c4:60:37:d5:d5:30:
7c:c9:dd:96:5f:c8:c5:29:0b:a3:14:f2:c8:c7:2d:
24:e8:6d:0c:f8:1c:79:1a:6d:05:ea:5a:19:cb:fd:
50:3c:e0:6e:0a:25:e7:d5:14:73:61:7d:92:6a:57:
0d:5f:07:25:07:6b:43:5a:dd:7d:1a:f0:d3:18:f4:
a7:26:dc:0e:b5:f1:44:87:25:22:2d:a1:2b:3d:0d:
89:36:e1:df:87:e6:1b:cc:ba:d1:5f:c0:43:5e:47:
97:82:bd:de:a4:f1:8a:80:68:34:10:c8:11:77:14:
de:f9:26:71:eb:dc:fb:09:8f:36:93:2b:aa:f4:27:
ee:dc:8e:d5:8f:18:7a:66:97:b4:b2:3b:d1:72:e2:
97:6e:93:99:25:72:48:e5:eb:53:ee:2d:b7:39:63:
06:7c:77:9b:fc:ed:aa:0f:9a:3c:86:92:89:8f:8d:
33:60:6e:05:8d:8b:ec:a5:63:2b:37:83:33:14:51:
30:23:f6:47:54:4d:8d:0d:ef:9a:b3:e1:f3:d6:9f:
5f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DF:9F:77:FE:79:41:00:43:1D:1B:4C:89:3E:77:1F:7F:44:53:C5
X509v3 Authority Key Identifier:
keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:41:0b:58:b0:e9:62:77:a8:9d:d6:5a:43:10:d1:d4:98:f2:
a5:95:4e:32:46:83:02:0e:fa:8e:0e:41:44:e2:c0:a9:bc:53:
7e:b2:5b:f2:74:8b:d5:7e:53:05:30:88:1e:19:b5:25:85:e4:
08:7d:ea:27:02:9f:5c:83:d3:e0:f2:a5:38:f2:3e:8d:3c:96:
bc:50:9f:66:bf:54:40:f5:f1:58:bd:6c:27:c3:d6:fd:88:68:
18:a3:58:32:0a:15:9a:0e:b3:e8:80:3f:d5:9a:be:74:c0:a0:
ae:0a:be:10:01:30:a1:c9:d4:07:58:4e:7b:19:7b:c9:c4:33:
d5:a4:fe:f6:c5:77:ef:06:f1:36:c9:9a:56:54:66:03:ce:9e:
59:43:50:09:34:ea:d4:e0:bf:d6:2d:12:9b:af:07:b5:3b:73:
6d:46:8f:5c:bb:1b:73:b2:ad:94:8c:ec:12:84:56:19:1b:cc:
56:d9:b3:5d:d8:99:58:e2:f6:bb:d7:59:6e:26:b4:7f:a8:f7:
da:48:04:69:d4:c6:8d:e0:3e:f6:5d:c2:dc:cd:54:93:bc:2a:
49:30:9d:b7:86:16:eb:d4:d8:6c:25:98:c8:a9:34:43:1e:9c:
7d:05:f4:0e:25:f9:48:97:71:20:d8:5b:1f:ff:76:2d:6e:94:
9b:0d:2e:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQBzqhfZVJ8ZQn5ZRSHSiwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMTk1YmQ2ODJhOGU5YTEyNGQ1ODUzZGM1ZTkwOGFhZTcz
MzliYWUwHhcNMjUxMTA0MTgwMDQyWhcNMjUxMTA1MTgwMDQyWjAzMTEwLwYDVQQD
Eyg4YWRmOWY3N2ZlNzk0MTAwNDMxZDFiNGM4OTNlNzcxZjdmNDQ1M2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Cq2XIMg5plQjAAUC1IQ/seAc5H/
x5N4VpfufavC+pYUQvLsIZt0vNOyPPOblZyVvpMq9FjEYDfV1TB8yd2WX8jFKQuj
FPLIxy0k6G0M+Bx5Gm0F6loZy/1QPOBuCiXn1RRzYX2SalcNXwclB2tDWt19GvDT
GPSnJtwOtfFEhyUiLaErPQ2JNuHfh+YbzLrRX8BDXkeXgr3epPGKgGg0EMgRdxTe
+SZx69z7CY82kyuq9Cfu3I7Vjxh6Zpe0sjvRcuKXbpOZJXJI5etT7i23OWMGfHeb
/O2qD5o8hpKJj40zYG4FjYvspWMrN4MzFFEwI/ZHVE2NDe+as+Hz1p9fWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrfn3f+eUEAQx0bTIk+dx9/RFPFMB8GA1UdIwQY
MBaAFPwZW9aCqOmhJNWFPcXpCKrnM5uuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0JsYjFvS282YUVrMVlVOXhla0lxdWN6bTY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9kYjkxMmYtYmY2ZC00ZjI0LTk2YWUt
Y2M3YjI4OTkwYjgxLzEvX0JsYjFvS282YUVrMVlVOXhla0lxdWN6bTY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9kYjkxMmYtYmY2ZC00ZjI0LTk2YWUtY2M3YjI4OTkwYjgx
LzEvX0JsYjFvS282YUVrMVlVOXhla0lxdWN6bTY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA0ELWLDp
YneondZaQxDR1JjypZVOMkaDAg76jg5BROLAqbxTfrJb8nSL1X5TBTCIHhm1JYXk
CH3qJwKfXIPT4PKlOPI+jTyWvFCfZr9UQPXxWL1sJ8PW/YhoGKNYMgoVmg6z6IA/
1Zq+dMCgrgq+EAEwocnUB1hOexl7ycQz1aT+9sV37wbxNsmaVlRmA86eWUNQCTTq
1OC/1i0Sm68HtTtzbUaPXLsbc7KtlIzsEoRWGRvMVtmzXdiZWOL2u9dZbia0f6j3
2kgEadTGjeA+9l3C3M1Uk7wqSTCdt4YW69TYbCWYyKk0Qx6cfQX0DiX5SJdxINhb
H/92LW6Umw0uUg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:18:18 2025 by rpki-client