Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
File: BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft (raw, json)
Hash identifier: zjUXapijRh0zhZiwg4EMcVgdJxuOg40YEO1qhQjGURM=
Subject key identifier: 7A:A0:16:AB:50:BC:41:AE:7A:F6:12:C8:20:77:B0:80:01:AF:11:C6
Authority key identifier: 04:BE:DB:61:54:A8:79:5D:C4:CE:EF:A6:7A:18:FE:DF:C6:52:15:94
Certificate issuer: /CN=04bedb6154a8795dc4ceefa67a18fedfc6521594
Certificate serial: 019A4E4FC8D6368D4888A385654C7A789D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
Manifest number: 059D
Signing time: Tue 04 Nov 2025 10:00:42 +0000
Manifest this update: Tue 04 Nov 2025 10:00:42 +0000
Manifest next update: Wed 05 Nov 2025 10:00:42 +0000
Files and hashes: 1: BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl (hash: rrsD2W2ew5XzCH8G7tR2+jz804W9Av70jIpyyn8zT5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:c8:d6:36:8d:48:88:a3:85:65:4c:7a:78:9d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04bedb6154a8795dc4ceefa67a18fedfc6521594
Validity
Not Before: Nov 4 10:00:42 2025 GMT
Not After : Nov 5 10:00:42 2025 GMT
Subject: CN=7aa016ab50bc41ae7af612c82077b08001af11c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a7:87:6f:95:15:7a:91:00:fa:0f:b1:dd:42:
fb:79:5f:5a:23:56:2d:19:c4:43:05:5a:08:1e:07:
ca:ae:cc:92:df:7f:03:00:66:72:4a:a3:0d:87:d7:
60:55:fb:94:89:5d:1f:78:34:34:93:49:81:8b:2e:
28:e5:df:21:46:fc:8a:9d:e4:4d:6a:2e:92:38:0e:
8d:42:65:a4:9d:48:b1:01:95:7a:90:f0:73:95:b5:
dd:6e:4e:6b:4e:dd:de:b0:12:e2:04:14:8d:02:e9:
17:04:25:3e:50:80:18:54:9a:71:96:ec:2a:59:e5:
33:95:cd:9d:27:52:bd:cf:b6:f9:43:a0:d5:02:ad:
ab:f6:74:ab:9d:9f:0a:ea:b9:e7:d8:e1:9e:0e:51:
39:b0:80:ee:4b:a3:c2:8e:30:4e:0e:93:ef:c9:39:
2b:9c:4c:94:62:fc:ea:83:0f:f0:ff:1f:58:94:a5:
7d:b2:8a:bb:d0:ac:85:8e:94:82:fd:d1:1e:4b:6d:
fb:ea:68:92:39:ca:ef:d8:8e:4a:44:2f:d7:f7:8e:
18:8a:49:9a:c6:e8:57:b6:86:03:26:d2:ea:e9:b0:
1d:05:ef:46:4a:5b:42:75:25:3c:93:ab:cf:45:40:
1f:e7:5c:d3:d6:ce:d9:fc:82:80:da:fd:a6:dc:84:
e1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A0:16:AB:50:BC:41:AE:7A:F6:12:C8:20:77:B0:80:01:AF:11:C6
X509v3 Authority Key Identifier:
keyid:04:BE:DB:61:54:A8:79:5D:C4:CE:EF:A6:7A:18:FE:DF:C6:52:15:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:7d:0a:09:ce:07:a3:ed:6b:2c:7d:21:a1:cf:73:7a:b2:1d:
66:a9:4f:ea:c7:79:82:f3:94:22:8b:a3:99:e0:59:d3:66:49:
80:74:16:e9:e4:17:11:11:92:26:dc:c0:1a:eb:07:1c:02:cf:
36:4c:33:4b:d5:b6:8c:12:de:bd:b7:f8:a8:d2:53:e8:ab:fa:
c3:71:51:73:80:3b:8f:bd:bf:da:90:b9:cc:76:74:a4:56:ce:
e6:1b:f6:c0:df:a4:4a:1a:a4:da:57:1f:d7:9e:e7:34:6d:55:
b2:11:56:f4:86:af:ea:a1:b8:4d:04:d8:09:ab:de:ce:e7:6d:
52:2c:2e:ee:4c:d1:1d:0a:9f:55:59:47:d6:dc:05:31:59:6a:
aa:10:37:3f:97:fa:7d:67:c8:a1:c8:28:81:b3:c4:48:b6:29:
06:b4:db:5e:37:76:f7:1e:eb:3e:51:7b:db:94:7c:72:c0:fb:
16:05:98:ee:c3:9f:9b:5c:04:56:f7:da:3f:37:d3:5f:52:d1:
e4:2c:bc:49:d6:04:46:7d:e1:f7:d1:0c:76:21:94:89:d8:41:
d7:85:7f:97:44:ca:34:57:39:16:26:bb:91:6b:0e:9f:3e:3e:
84:c1:d8:e9:bc:75:03:e1:c0:c4:64:0f:71:1c:c9:cc:09:19:
3f:b5:cd:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT8jWNo1IiKOFZUx6eJ0jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YmVkYjYxNTRhODc5NWRjNGNlZWZhNjdhMThmZWRmYzY1
MjE1OTQwHhcNMjUxMTA0MTAwMDQyWhcNMjUxMTA1MTAwMDQyWjAzMTEwLwYDVQQD
Eyg3YWEwMTZhYjUwYmM0MWFlN2FmNjEyYzgyMDc3YjA4MDAxYWYxMWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaeHb5UVepEA+g+x3UL7eV9aI1Yt
GcRDBVoIHgfKrsyS338DAGZySqMNh9dgVfuUiV0feDQ0k0mBiy4o5d8hRvyKneRN
ai6SOA6NQmWknUixAZV6kPBzlbXdbk5rTt3esBLiBBSNAukXBCU+UIAYVJpxluwq
WeUzlc2dJ1K9z7b5Q6DVAq2r9nSrnZ8K6rnn2OGeDlE5sIDuS6PCjjBODpPvyTkr
nEyUYvzqgw/w/x9YlKV9soq70KyFjpSC/dEeS2376miSOcrv2I5KRC/X944Yikma
xuhXtoYDJtLq6bAdBe9GSltCdSU8k6vPRUAf51zT1s7Z/IKA2v2m3IThRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqgFqtQvEGuevYSyCB3sIABrxHGMB8GA1UdIwQY
MBaAFAS+22FUqHldxM7vpnoY/t/GUhWUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkw3YllWU29lVjNFenUtbWVoai0zOFpTRlpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8zMTczZTItNmM2ZS00MjdmLTljYWQt
M2M4NzA4ODczNGY2LzEvQkw3YllWU29lVjNFenUtbWVoai0zOFpTRlpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8zMTczZTItNmM2ZS00MjdmLTljYWQtM2M4NzA4ODczNGY2
LzEvQkw3YllWU29lVjNFenUtbWVoai0zOFpTRlpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATn0KCc4H
o+1rLH0hoc9zerIdZqlP6sd5gvOUIoujmeBZ02ZJgHQW6eQXERGSJtzAGusHHALP
NkwzS9W2jBLevbf4qNJT6Kv6w3FRc4A7j72/2pC5zHZ0pFbO5hv2wN+kShqk2lcf
157nNG1VshFW9Iav6qG4TQTYCavezudtUiwu7kzRHQqfVVlH1twFMVlqqhA3P5f6
fWfIocgogbPESLYpBrTbXjd29x7rPlF725R8csD7FgWY7sOfm1wEVvfaPzfTX1LR
5Cy8SdYERn3h99EMdiGUidhB14V/l0TKNFc5Fia7kWsOnz4+hMHY6bx1A+HAxGQP
cRzJzAkZP7XN/g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:49:18 2025 by rpki-client