Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
File: _Blb1oKo6aEk1YU9xekIquczm64.mft (raw, json)
Hash identifier: 7nlk1wbloEJULT24Wm5Wa1GU4ZjJmK1ZsfO1UhAIc8Y=
Subject key identifier: 75:9E:B9:AF:51:08:14:05:C2:91:1A:6D:3B:15:60:D1:06:3A:9D:92
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial: 01987306A000261C97B04A688A1DB596978E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
Manifest number: 13BD
Signing time: Mon 04 Aug 2025 03:01:10 +0000
Manifest this update: Mon 04 Aug 2025 03:01:10 +0000
Manifest next update: Tue 05 Aug 2025 03:01:10 +0000
Files and hashes: 1: C0o6u4617ldzXCQhJDGF4IWONDQ.roa (hash: oggwBkJK9nhHHHUHaINutEQuhqdlfpUhFtxzmUm75kw=)
2: _Blb1oKo6aEk1YU9xekIquczm64.crl (hash: r7VclAduK9+xVfRiAY8iZPfE/mCwiHPpwYmlmFWCi8A=)
3: eFaXAXJtU1k2p2wxUd4r6QNwVqc.roa (hash: RkwbFEsvbm5cD3j9VERr9RV6cFSAdbYRW8TdBaZFLJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:a0:00:26:1c:97:b0:4a:68:8a:1d:b5:96:97:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Validity
Not Before: Aug 4 03:01:10 2025 GMT
Not After : Aug 5 03:01:10 2025 GMT
Subject: CN=759eb9af51081405c2911a6d3b1560d1063a9d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cc:59:a4:a5:90:28:55:2b:fb:2d:84:c1:2e:
f0:99:37:04:f8:fd:ac:f3:ae:50:b6:55:58:62:65:
ca:f3:24:8c:81:7b:72:1d:54:ae:51:bc:84:34:28:
0b:5c:86:d8:9a:0f:90:68:f7:4b:68:3e:7e:ef:c8:
71:33:c6:e6:8c:d9:e6:5b:b0:d9:16:0f:64:d4:be:
fc:69:f6:30:8f:8e:22:51:3d:b8:96:17:a9:bd:5c:
25:b5:90:5e:9c:52:b9:89:fc:16:72:b9:0c:23:1f:
34:99:50:30:0a:69:4f:4d:40:07:d0:cc:83:53:fc:
e4:0b:3c:b9:e6:bc:f4:26:3b:c5:1f:53:fe:7c:00:
54:ee:45:d6:f7:80:eb:c8:07:91:e4:58:20:72:91:
b7:84:04:ec:a3:29:fc:fc:9e:e1:1c:63:68:ab:2b:
94:a4:7b:49:20:c5:6b:0c:b8:43:08:25:ab:ca:99:
93:ff:08:be:6b:19:1c:c6:e7:a8:e6:66:da:31:99:
f4:0c:c6:c1:05:77:a0:e2:08:8f:9d:b6:87:f4:a8:
3e:d3:25:f4:28:10:ed:f4:fe:f5:c8:d8:7b:19:cc:
79:c0:7f:bc:ca:f6:ab:3e:09:31:95:cc:c5:04:4a:
9e:3b:46:0e:ea:d2:da:58:d9:d5:b3:29:ff:99:75:
8a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9E:B9:AF:51:08:14:05:C2:91:1A:6D:3B:15:60:D1:06:3A:9D:92
X509v3 Authority Key Identifier:
keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:bc:97:a1:55:a5:0b:c9:39:e0:13:83:3c:e7:ba:b9:63:b5:
35:ce:6b:7d:20:75:be:c0:3a:8f:91:68:4a:78:b0:dd:2d:95:
c1:f2:32:96:9f:04:d4:05:f9:c5:25:02:ba:46:42:49:ee:a5:
9a:4c:0c:fe:6e:6d:2d:d9:83:2f:a2:01:db:4b:a7:9d:53:b2:
cc:ff:b6:25:08:f7:d3:4a:92:fb:01:5e:4c:74:12:e4:37:2b:
ed:f9:42:ca:4f:e1:ff:e6:0e:45:f2:46:e7:cc:b9:83:7f:46:
c8:84:f6:da:16:8a:0c:07:eb:db:1e:e2:20:d4:5c:24:ac:45:
6d:ec:aa:ed:f8:5e:21:86:3a:8f:a2:a8:4a:08:a0:4e:fa:7c:
7e:f7:5c:9f:d8:a7:10:0d:32:af:fd:74:ae:1e:f3:ae:b9:8e:
79:15:98:39:1b:5e:14:8f:83:59:f4:83:5f:c6:a4:63:c8:e4:
5e:19:4a:0b:d5:b8:3d:46:36:53:90:47:47:84:32:d1:b3:4d:
42:50:47:82:a5:8f:94:b2:2d:68:9e:9b:76:5a:91:97:5e:da:
af:0c:15:96:23:63:e8:7d:94:f7:ee:5f:ce:01:50:c2:2a:ac:
7a:bc:c2:7e:d0:e0:19:25:0d:c7:8b:3d:31:e9:3b:ef:c0:84:
8b:03:57:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:40 2025 by rpki-client