Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
File: bLJy2h2BJrUXGeWjRWiArfqInKM.mft (raw, json)
Hash identifier: BN3CGIKOFJELaTxuA2aG0+e7azUleyr37e5YPRazvc4=
Subject key identifier: B7:B8:4D:E8:2F:F7:F2:9B:F7:DC:B1:D0:3D:9C:F7:91:31:4C:9F:70
Authority key identifier: 6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3
Certificate issuer: /CN=6cb272da1d8126b51719e5a3456880adfa889ca3
Certificate serial: 019873744998D7B0207444F952D51EF62A9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
Manifest number: 15AA
Signing time: Mon 04 Aug 2025 05:00:57 +0000
Manifest this update: Mon 04 Aug 2025 05:00:57 +0000
Manifest next update: Tue 05 Aug 2025 05:00:57 +0000
Files and hashes: 1: bLJy2h2BJrUXGeWjRWiArfqInKM.crl (hash: z8Vxd4s9wJS5DpFfr0s+5jl3G7RoPU7y6iZxgnekVHY=)
2: uOnSDaCjeMs1-L4eA8Ozs6UPSSA.roa (hash: qYSuZ8A4rf2Pqbl96n2xsZCX23fJfZc0cHfaDMSlIAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:49:98:d7:b0:20:74:44:f9:52:d5:1e:f6:2a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb272da1d8126b51719e5a3456880adfa889ca3
Validity
Not Before: Aug 4 05:00:57 2025 GMT
Not After : Aug 5 05:00:57 2025 GMT
Subject: CN=b7b84de82ff7f29bf7dcb1d03d9cf791314c9f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:18:68:65:49:bb:16:f1:03:fa:08:e0:23:cd:
44:d9:32:c8:86:bd:48:61:8c:14:af:0b:24:d4:ea:
8c:0f:50:87:2c:36:1d:f3:80:60:e4:70:31:a9:36:
f5:9d:46:5f:83:f4:bf:c3:ac:cb:14:7e:da:04:1d:
6a:5d:47:29:75:b2:26:c4:fd:fa:55:59:bf:bd:2e:
9e:92:67:e2:b4:e4:9a:8d:ba:d7:e5:9f:65:cd:b4:
9d:79:30:15:e8:5c:64:9f:bd:25:b9:af:48:af:9d:
aa:de:45:20:38:54:f5:bf:f9:5b:4b:41:4d:2c:69:
37:06:7f:f6:45:d6:83:8f:ea:af:e9:a5:13:57:57:
ac:27:e4:f5:49:f9:01:6e:6d:d8:1a:ef:65:b6:6b:
26:1e:82:56:ff:1c:c9:1e:b6:f1:6c:62:4f:a6:af:
20:bc:31:77:7b:b2:02:cd:15:c1:d6:55:5d:00:95:
d4:66:c6:61:a1:68:0f:a5:89:08:a3:99:a9:5d:5e:
aa:f5:a4:29:c6:ba:f3:e4:fc:b5:f9:d3:8a:05:e6:
e8:c8:73:5d:95:de:1d:1a:c1:40:76:45:96:2c:4d:
2d:6d:22:85:c4:c0:94:84:0e:44:eb:e5:d9:09:56:
99:2e:c6:de:37:37:5f:60:fc:79:40:88:8c:0a:5a:
14:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B8:4D:E8:2F:F7:F2:9B:F7:DC:B1:D0:3D:9C:F7:91:31:4C:9F:70
X509v3 Authority Key Identifier:
keyid:6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:08:06:0a:1a:e6:1a:56:4b:aa:9c:ce:bd:f3:be:df:0c:0b:
0d:09:ac:93:74:66:97:14:0e:bb:7c:f6:66:c6:25:a2:86:31:
e5:be:d9:a0:fd:47:27:a7:62:92:17:ff:08:5b:07:7f:a4:46:
7c:e7:e0:c9:63:34:7c:7f:e4:93:3e:54:89:02:21:af:be:3f:
4a:6b:37:84:6e:9d:c3:3f:09:b7:a9:01:3b:7e:3d:e6:0e:fb:
7b:b2:f5:49:fe:70:90:70:54:40:c5:11:b8:53:2d:5e:00:82:
f3:63:23:8a:ae:69:77:a3:d8:40:97:36:c3:6a:b3:c7:a1:d6:
db:47:6d:34:bc:fc:27:a3:49:bf:b4:44:cc:df:24:0f:ad:be:
23:fe:be:42:fb:30:ab:66:99:ab:be:fa:0c:88:72:c1:c1:25:
28:92:75:48:4f:7b:70:bf:e2:ff:9a:c9:b3:59:79:15:5a:c6:
4d:30:4e:59:9c:05:e9:c9:32:a4:65:a2:86:ec:eb:f8:a2:bb:
36:5e:f6:ce:d0:89:8b:b5:c3:21:f9:e4:22:f0:1a:e9:c4:f7:
ee:26:b5:38:5c:ca:32:48:fb:32:a9:5b:d3:fc:cb:7f:c5:42:
d5:c8:b5:a0:d5:70:f1:6d:dd:c9:ae:cf:dc:23:f0:3d:80:11:
0c:78:12:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:51 2025 by rpki-client