Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
File: _Blb1oKo6aEk1YU9xekIquczm64.mft (raw, json)
Hash identifier: 0ECltQSqpiI2xVyFAYD8xubEdcGO4BWS2GbqSY82mtU=
Subject key identifier: D0:98:A0:7F:C3:AE:2D:AC:4B:78:27:B4:85:BA:6F:3B:EC:EB:A8:CA
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial: 0197722CFE21EA8B845A0697F9A1F9988F86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
Manifest number: 1338
Signing time: Sun 15 Jun 2025 06:00:40 +0000
Manifest this update: Sun 15 Jun 2025 06:00:40 +0000
Manifest next update: Mon 16 Jun 2025 06:00:40 +0000
Files and hashes: 1: C0o6u4617ldzXCQhJDGF4IWONDQ.roa (hash: oggwBkJK9nhHHHUHaINutEQuhqdlfpUhFtxzmUm75kw=)
2: _Blb1oKo6aEk1YU9xekIquczm64.crl (hash: HMVRScDiTAVtXmCh2WqJcb5MF3J5+2MIc2XLg2nWHGA=)
3: eFaXAXJtU1k2p2wxUd4r6QNwVqc.roa (hash: RkwbFEsvbm5cD3j9VERr9RV6cFSAdbYRW8TdBaZFLJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2c:fe:21:ea:8b:84:5a:06:97:f9:a1:f9:98:8f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Validity
Not Before: Jun 15 06:00:40 2025 GMT
Not After : Jun 16 06:00:40 2025 GMT
Subject: CN=d098a07fc3ae2dac4b7827b485ba6f3beceba8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:13:f2:b9:e3:0e:36:d6:26:38:5f:da:c6:1a:
ef:b5:c0:4c:cf:fd:e3:47:23:e6:4b:3d:11:e2:2e:
5f:cc:09:ce:25:4d:1e:72:b7:7b:1b:f1:10:cd:17:
7c:0f:07:c3:1d:15:35:4f:1c:67:5e:17:83:eb:63:
03:f0:d6:2c:c2:cc:25:f7:82:98:96:5d:4b:6f:bc:
41:29:8f:48:cf:44:fe:9c:48:6d:7b:c4:21:37:a6:
e3:7c:cd:94:4c:12:e0:49:a6:73:43:51:71:03:88:
78:1f:8f:b2:19:83:2e:14:af:9c:30:0f:9c:f5:65:
50:f0:7a:df:d0:b3:75:66:1d:28:71:17:58:e0:d0:
b9:5b:b1:a9:44:13:02:e3:f8:09:c7:b5:c4:69:86:
6f:60:8b:4c:1f:9e:17:09:7f:be:ec:5d:91:25:90:
13:eb:4b:65:57:54:55:ff:cf:b9:c6:2b:52:99:4b:
7b:46:61:e4:8e:87:fe:fe:fd:40:75:a9:ae:99:99:
b0:80:10:e6:52:9b:ca:a7:f7:53:e5:1a:51:58:74:
df:17:27:14:11:38:6f:ed:8d:f3:66:ed:51:7f:db:
0b:0a:c5:a0:4b:d5:d4:e4:59:0a:23:91:6a:e7:16:
4c:ab:fc:92:d9:17:ee:86:09:8c:53:88:8c:96:39:
c5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:98:A0:7F:C3:AE:2D:AC:4B:78:27:B4:85:BA:6F:3B:EC:EB:A8:CA
X509v3 Authority Key Identifier:
keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:69:6b:4d:ab:58:4b:ca:66:c3:16:82:4e:dd:8e:71:c8:ac:
e1:29:90:3c:26:ac:d7:59:4a:89:86:1e:69:b5:43:0f:bb:89:
7e:6d:04:ae:59:a1:9d:c1:58:0b:e0:7b:2e:75:f2:26:d9:31:
7e:11:eb:3a:9f:2e:48:a7:3d:15:fa:13:e8:f6:56:29:36:ac:
b3:2e:20:7a:0d:20:07:bf:1a:05:b0:6a:f4:19:0c:8f:84:07:
38:52:c5:ff:0f:27:8c:50:df:fb:74:cd:5c:61:10:8b:c2:57:
51:9b:d6:c5:7a:65:6a:a5:00:36:9a:1d:7c:a4:c2:a8:8d:a5:
45:3d:fc:2e:32:e9:41:f3:3d:d3:e7:59:49:b3:d3:30:7d:3f:
d5:47:8b:dd:a5:a2:ca:b3:9e:dd:61:37:28:3e:a2:b3:3f:cd:
09:6c:ef:64:17:bd:e4:93:e1:0d:88:e0:9a:9d:f0:02:82:f9:
a8:73:28:ad:91:4f:9a:b7:ad:cc:fe:f7:e4:d7:d4:f0:bb:f7:
16:36:1e:de:3b:e8:9b:a2:14:1d:45:6b:41:96:f2:f6:88:aa:
0e:cc:37:17:54:b1:6b:98:48:c2:6e:20:a7:8e:39:6b:12:6f:
7d:12:a0:6d:ab:9a:b7:ba:22:60:0e:e2:3f:fe:7a:c5:13:d3:
15:0b:fe:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdyLP4h6ouEWgaX+aH5mI+GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMTk1YmQ2ODJhOGU5YTEyNGQ1ODUzZGM1ZTkwOGFhZTcz
MzliYWUwHhcNMjUwNjE1MDYwMDQwWhcNMjUwNjE2MDYwMDQwWjAzMTEwLwYDVQQD
EyhkMDk4YTA3ZmMzYWUyZGFjNGI3ODI3YjQ4NWJhNmYzYmVjZWJhOGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRPyueMONtYmOF/axhrvtcBMz/3j
RyPmSz0R4i5fzAnOJU0ecrd7G/EQzRd8DwfDHRU1TxxnXheD62MD8NYswswl94KY
ll1Lb7xBKY9Iz0T+nEhte8QhN6bjfM2UTBLgSaZzQ1FxA4h4H4+yGYMuFK+cMA+c
9WVQ8Hrf0LN1Zh0ocRdY4NC5W7GpRBMC4/gJx7XEaYZvYItMH54XCX++7F2RJZAT
60tlV1RV/8+5xitSmUt7RmHkjof+/v1AdamumZmwgBDmUpvKp/dT5RpRWHTfFycU
EThv7Y3zZu1Rf9sLCsWgS9XU5FkKI5Fq5xZMq/yS2RfuhgmMU4iMljnFrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCYoH/Dri2sS3gntIW6bzvs66jKMB8GA1UdIwQY
MBaAFPwZW9aCqOmhJNWFPcXpCKrnM5uuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0JsYjFvS282YUVrMVlVOXhla0lxdWN6bTY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9kYjkxMmYtYmY2ZC00ZjI0LTk2YWUt
Y2M3YjI4OTkwYjgxLzEvX0JsYjFvS282YUVrMVlVOXhla0lxdWN6bTY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9kYjkxMmYtYmY2ZC00ZjI0LTk2YWUtY2M3YjI4OTkwYjgx
LzEvX0JsYjFvS282YUVrMVlVOXhla0lxdWN6bTY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANGlrTatY
S8pmwxaCTt2Occis4SmQPCas11lKiYYeabVDD7uJfm0ErlmhncFYC+B7LnXyJtkx
fhHrOp8uSKc9FfoT6PZWKTassy4geg0gB78aBbBq9BkMj4QHOFLF/w8njFDf+3TN
XGEQi8JXUZvWxXplaqUANpodfKTCqI2lRT38LjLpQfM90+dZSbPTMH0/1UeL3aWi
yrOe3WE3KD6isz/NCWzvZBe95JPhDYjgmp3wAoL5qHMorZFPmretzP735NfU8Lv3
FjYe3jvom6IUHUVrQZby9oiqDsw3F1Sxa5hIwm4gp445axJvfRKgbauat7oiYA7i
P/56xRPTFQv+KQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 11:35:43 2025 by rpki-client