Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft
File: bLm_6TNtoFV5BgineljMq8SWhpQ.mft (raw, json)
Hash identifier: cx5SfisTo5sJIgJt9zmFg1YnrVcgvkrmkhujObcg5oA=
Subject key identifier: 19:B9:20:30:75:BE:3D:2D:29:B8:3F:11:6B:34:35:8A:AD:99:86:51
Authority key identifier: 6C:B9:BF:E9:33:6D:A0:55:79:06:08:A7:7A:58:CC:AB:C4:96:86:94
Certificate issuer: /CN=6cb9bfe9336da055790608a77a58ccabc4968694
Certificate serial: 019A4F6281FE21F136C303DDF33D7253E581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLm_6TNtoFV5BgineljMq8SWhpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft
Manifest number: 0DB2
Signing time: Tue 04 Nov 2025 15:00:47 +0000
Manifest this update: Tue 04 Nov 2025 15:00:47 +0000
Manifest next update: Wed 05 Nov 2025 15:00:47 +0000
Files and hashes: 1: bLm_6TNtoFV5BgineljMq8SWhpQ.crl (hash: sEjvEdxXte+6RV+uspPXj6W+NyqtYoZv7+fJe+grgGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLm_6TNtoFV5BgineljMq8SWhpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:81:fe:21:f1:36:c3:03:dd:f3:3d:72:53:e5:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb9bfe9336da055790608a77a58ccabc4968694
Validity
Not Before: Nov 4 15:00:47 2025 GMT
Not After : Nov 5 15:00:47 2025 GMT
Subject: CN=19b9203075be3d2d29b83f116b34358aad998651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:db:bf:e2:76:8a:57:5a:59:86:52:fd:b0:ce:
e5:f1:4a:73:cc:8f:b5:25:c3:a6:94:40:c4:a3:0b:
b5:b2:ff:2c:3e:10:6d:2d:d3:1e:24:dd:a6:9f:8c:
45:a1:97:f6:b1:d0:71:28:86:34:89:72:d4:24:c4:
13:8e:f0:8f:03:ed:7d:a5:0b:98:8e:a3:83:ad:40:
4c:a9:02:e7:7f:5b:8a:ea:cd:79:84:69:d6:62:c4:
d8:c5:38:b5:67:98:a5:ce:68:25:f7:fc:4c:88:9d:
3c:7e:82:08:fc:6e:ef:77:6b:f7:1a:58:de:64:cf:
7b:69:f6:b9:9d:10:85:ab:c1:49:6a:5b:c1:ec:18:
44:4a:dd:5d:f4:7e:30:93:07:a6:85:e5:7e:fc:e1:
07:5e:97:73:f7:67:c2:f4:76:0f:ab:05:b9:5b:d3:
b9:6b:58:e1:34:f7:02:61:c2:e9:47:87:fa:f1:76:
fd:6b:50:f2:a4:24:a1:fb:40:69:29:34:d4:5b:fe:
98:65:da:72:c5:23:50:29:59:c1:66:6d:c1:0a:e7:
36:10:2f:da:fb:23:4c:a0:97:a4:9e:7e:10:1a:db:
1a:a5:33:6e:33:c7:88:44:a5:b8:87:84:73:61:fc:
e0:b6:d9:0d:6b:ea:0d:0b:10:b1:ad:8f:b2:87:d3:
09:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B9:20:30:75:BE:3D:2D:29:B8:3F:11:6B:34:35:8A:AD:99:86:51
X509v3 Authority Key Identifier:
keyid:6C:B9:BF:E9:33:6D:A0:55:79:06:08:A7:7A:58:CC:AB:C4:96:86:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLm_6TNtoFV5BgineljMq8SWhpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:0a:95:1c:7b:82:d0:d3:d2:4c:14:45:82:01:8f:79:be:db:
b4:e2:ce:a5:0e:b8:c6:fd:cc:36:11:00:e5:c9:e8:ac:a8:98:
3a:39:ad:87:0a:08:4a:10:15:21:a1:62:31:8a:fc:41:ad:8f:
b1:f9:44:32:41:c1:ce:b3:fd:bc:6c:de:eb:59:22:64:82:f3:
92:de:91:0a:f5:a1:28:49:60:33:b2:8e:7d:f3:b0:72:3a:9e:
02:5e:2d:3b:2f:bf:0f:ac:67:70:2b:bd:f8:9d:cd:1e:2f:6a:
c5:9a:bd:f3:fd:79:04:a5:e1:b5:cf:e0:6d:be:a0:86:d3:41:
a9:8e:e0:c1:a3:9d:59:f0:46:d1:ae:17:65:76:b5:1c:f6:94:
2a:06:99:59:40:0e:de:bd:56:07:bb:31:d8:de:e7:e4:53:9a:
95:f8:cb:fa:6b:1d:22:de:76:79:c4:eb:8b:98:0f:95:5e:02:
e2:d2:17:ae:b1:2d:3b:64:ef:33:b6:47:04:7b:12:bf:b9:a4:
c7:5d:05:54:3c:b6:9c:95:00:d2:57:be:a1:88:e7:ef:31:6f:
08:92:44:d5:d4:ed:79:10:3a:44:30:a8:37:60:a2:3e:57:1d:
94:26:32:e0:49:72:0e:7b:81:40:dc:6e:d5:98:d7:59:e4:9a:
8b:be:e6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:49 2025 by rpki-client