Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
File: BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft (raw, json)
Hash identifier: jOrXGarHpypSQ5DEHTJbi92L1waw66nFD+pUP/+P3P4=
Subject key identifier: 6C:48:09:D1:B8:B8:A8:2F:C6:56:11:96:00:CE:94:D2:DA:4B:5A:A4
Authority key identifier: 04:BE:DB:61:54:A8:79:5D:C4:CE:EF:A6:7A:18:FE:DF:C6:52:15:94
Certificate issuer: /CN=04bedb6154a8795dc4ceefa67a18fedfc6521594
Certificate serial: 01987ED3CB69177B82CDC113AA0A9B6961A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
Manifest number: 04AD
Signing time: Wed 06 Aug 2025 10:01:05 +0000
Manifest this update: Wed 06 Aug 2025 10:01:05 +0000
Manifest next update: Thu 07 Aug 2025 10:01:05 +0000
Files and hashes: 1: BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl (hash: g0QHzXn4OHtJLvztkTV3mmwJ5ITpUfkM6gT+umC1BOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:cb:69:17:7b:82:cd:c1:13:aa:0a:9b:69:61:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04bedb6154a8795dc4ceefa67a18fedfc6521594
Validity
Not Before: Aug 6 10:01:05 2025 GMT
Not After : Aug 7 10:01:05 2025 GMT
Subject: CN=6c4809d1b8b8a82fc656119600ce94d2da4b5aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:44:0c:ee:2a:0a:93:84:0d:75:65:63:40:a4:
11:1c:99:13:b1:b1:30:33:8f:4c:28:9d:f2:95:20:
6a:f0:0d:5a:9c:2b:c7:eb:26:59:f6:45:2c:47:0d:
3f:20:de:0a:46:85:b7:b9:b1:b6:58:7d:a4:92:95:
db:4a:7f:e1:0e:ac:e9:40:b5:b7:05:c4:14:e5:2d:
85:70:5e:7f:99:35:6d:1a:da:7b:c5:ff:3f:fa:bb:
59:54:84:63:0f:3f:7b:e3:d4:a6:f5:12:08:10:05:
57:30:f9:61:b7:bc:77:e7:7a:38:b5:57:a9:4c:8f:
0f:06:32:c5:05:e8:b6:f2:48:0d:d7:ea:83:5e:ef:
8d:61:a8:f5:3a:ec:25:6c:f4:aa:03:78:ef:cf:14:
a9:54:51:42:4f:1c:55:3f:74:e0:44:9d:b9:55:6d:
86:ab:44:b4:78:a1:3e:a4:cd:af:7b:61:bb:7a:45:
97:9d:b1:88:97:6b:7d:fd:2a:5a:41:db:3f:28:ca:
e5:af:46:90:54:55:7a:f8:8a:e5:24:b0:2c:80:1b:
34:59:77:d5:18:6b:e7:4d:92:4e:68:aa:82:48:0d:
ed:61:b0:09:fb:14:10:74:80:01:85:4d:c0:1c:93:
6b:f8:21:67:15:26:1c:db:02:ac:41:c2:15:30:42:
fb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:48:09:D1:B8:B8:A8:2F:C6:56:11:96:00:CE:94:D2:DA:4B:5A:A4
X509v3 Authority Key Identifier:
keyid:04:BE:DB:61:54:A8:79:5D:C4:CE:EF:A6:7A:18:FE:DF:C6:52:15:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:5d:2e:6f:0f:c8:ad:44:31:45:b0:e7:c3:b3:b6:cb:ae:e2:
b9:59:19:05:af:ac:ec:89:15:bf:3b:e8:b9:3a:e5:72:ca:18:
3b:1b:3b:66:fd:f6:7a:6f:97:c2:e2:c3:6b:ba:be:bf:ef:b5:
5b:41:d0:cf:0f:82:95:84:ac:96:19:3b:85:56:3b:a5:f2:6c:
2b:3a:f2:66:b8:db:09:f1:02:0d:8c:9e:b3:b0:6e:a5:74:64:
3b:22:98:fe:b4:82:02:f3:47:3f:aa:fb:60:01:47:ed:bc:8d:
49:46:8f:d0:f6:9f:c6:68:f3:95:4c:04:50:34:ff:b0:be:b6:
57:fd:92:7e:d9:75:50:01:32:c9:d2:c1:12:98:20:d1:32:a9:
31:6f:ec:1f:21:bb:76:e9:bc:12:d6:ff:6c:86:cd:38:3d:4e:
d0:84:5c:d7:d9:4a:ca:46:02:01:eb:f2:4e:51:ba:d8:a2:df:
49:7b:7b:e5:43:48:3b:c8:00:2c:2a:e9:d1:f9:0e:9b:b6:d7:
93:16:78:a6:a3:fb:b9:78:91:42:53:66:fd:a4:22:56:37:7e:
8a:e1:d3:3b:c3:9d:b8:60:5c:c1:0b:5e:c8:d4:b0:d3:d3:ac:
40:7f:85:26:95:df:a2:a6:78:a2:a5:9c:3b:6d:90:40:8d:8a:
78:3d:f8:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+08tpF3uCzcETqgqbaWGpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YmVkYjYxNTRhODc5NWRjNGNlZWZhNjdhMThmZWRmYzY1
MjE1OTQwHhcNMjUwODA2MTAwMTA1WhcNMjUwODA3MTAwMTA1WjAzMTEwLwYDVQQD
Eyg2YzQ4MDlkMWI4YjhhODJmYzY1NjExOTYwMGNlOTRkMmRhNGI1YWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskQM7ioKk4QNdWVjQKQRHJkTsbEw
M49MKJ3ylSBq8A1anCvH6yZZ9kUsRw0/IN4KRoW3ubG2WH2kkpXbSn/hDqzpQLW3
BcQU5S2FcF5/mTVtGtp7xf8/+rtZVIRjDz9749Sm9RIIEAVXMPlht7x353o4tVep
TI8PBjLFBei28kgN1+qDXu+NYaj1OuwlbPSqA3jvzxSpVFFCTxxVP3TgRJ25VW2G
q0S0eKE+pM2ve2G7ekWXnbGIl2t9/SpaQds/KMrlr0aQVFV6+IrlJLAsgBs0WXfV
GGvnTZJOaKqCSA3tYbAJ+xQQdIABhU3AHJNr+CFnFSYc2wKsQcIVMEL7wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxICdG4uKgvxlYRlgDOlNLaS1qkMB8GA1UdIwQY
MBaAFAS+22FUqHldxM7vpnoY/t/GUhWUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkw3YllWU29lVjNFenUtbWVoai0zOFpTRlpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8zMTczZTItNmM2ZS00MjdmLTljYWQt
M2M4NzA4ODczNGY2LzEvQkw3YllWU29lVjNFenUtbWVoai0zOFpTRlpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8zMTczZTItNmM2ZS00MjdmLTljYWQtM2M4NzA4ODczNGY2
LzEvQkw3YllWU29lVjNFenUtbWVoai0zOFpTRlpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMV0ubw/I
rUQxRbDnw7O2y67iuVkZBa+s7IkVvzvouTrlcsoYOxs7Zv32em+XwuLDa7q+v++1
W0HQzw+ClYSslhk7hVY7pfJsKzryZrjbCfECDYyes7BupXRkOyKY/rSCAvNHP6r7
YAFH7byNSUaP0PafxmjzlUwEUDT/sL62V/2Sftl1UAEyydLBEpgg0TKpMW/sHyG7
dum8Etb/bIbNOD1O0IRc19lKykYCAevyTlG62KLfSXt75UNIO8gALCrp0fkOm7bX
kxZ4pqP7uXiRQlNm/aQiVjd+iuHTO8OduGBcwQteyNSw09OsQH+FJpXfoqZ4oqWc
O22QQI2KeD34DQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:15:34 2025 by rpki-client