Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
File: bLJy2h2BJrUXGeWjRWiArfqInKM.mft (raw, json)
Hash identifier: vJuVWUZj5paZZB6BGd3yQ8AGTwAqcz9LwbiiYAEn7vQ=
Subject key identifier: 3C:34:A4:6B:4A:3B:EA:92:7B:DD:91:09:A7:94:A6:3A:EB:69:72:60
Authority key identifier: 6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3
Certificate issuer: /CN=6cb272da1d8126b51719e5a3456880adfa889ca3
Certificate serial: 019A4C9834081248067BF5F4084EDAECFA08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
Manifest number: 169F
Signing time: Tue 04 Nov 2025 02:00:34 +0000
Manifest this update: Tue 04 Nov 2025 02:00:34 +0000
Manifest next update: Wed 05 Nov 2025 02:00:34 +0000
Files and hashes: 1: bLJy2h2BJrUXGeWjRWiArfqInKM.crl (hash: 9vrAyfZUbzIV6VaSCOGhGI3sHTbQp6JiUQ4UggBnpXg=)
2: uOnSDaCjeMs1-L4eA8Ozs6UPSSA.roa (hash: qYSuZ8A4rf2Pqbl96n2xsZCX23fJfZc0cHfaDMSlIAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:34:08:12:48:06:7b:f5:f4:08:4e:da:ec:fa:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb272da1d8126b51719e5a3456880adfa889ca3
Validity
Not Before: Nov 4 02:00:34 2025 GMT
Not After : Nov 5 02:00:34 2025 GMT
Subject: CN=3c34a46b4a3bea927bdd9109a794a63aeb697260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ef:5f:82:f7:0b:8b:c6:f1:c2:ba:a8:4c:f1:
f1:14:11:50:a2:6f:dc:47:54:33:38:05:b9:4f:c5:
3a:cf:53:23:9a:00:8a:ea:ba:d1:7b:eb:46:4d:e6:
ff:b4:4a:e2:5e:e4:fc:5d:c5:8c:84:9b:da:73:c1:
99:ba:2e:39:77:e4:b0:9b:b3:cb:52:f5:bc:3c:f5:
fe:56:a1:f0:dd:bf:66:ef:cf:84:dd:13:38:0d:45:
ac:c2:ca:bf:21:b7:9b:f9:8b:df:ce:4a:47:51:eb:
75:39:50:56:ed:7e:82:b9:a6:70:10:32:e7:eb:67:
60:24:8a:a9:7e:37:d7:78:13:b0:18:8a:df:09:3c:
04:59:72:48:42:2d:cd:ad:27:84:25:ee:86:64:8f:
de:92:ff:00:46:00:98:28:e8:ea:bd:82:f6:d0:65:
f9:d7:e8:20:0f:a7:20:b8:16:d5:b0:c2:6b:fd:4c:
93:05:8a:1e:ba:bb:94:76:77:85:2a:2b:5f:de:34:
75:13:43:93:e4:64:28:dc:02:ce:e6:49:6d:ac:09:
59:46:30:b7:43:2a:2d:af:31:b0:30:0f:bd:8a:19:
78:66:fa:0a:dd:37:7e:a7:e9:9f:42:98:58:fc:dd:
eb:60:40:70:91:f9:0a:d4:61:07:82:4c:22:0a:64:
3c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:34:A4:6B:4A:3B:EA:92:7B:DD:91:09:A7:94:A6:3A:EB:69:72:60
X509v3 Authority Key Identifier:
keyid:6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:68:e2:db:3d:41:fb:63:75:33:a1:92:88:97:c9:38:16:c0:
bf:6a:e9:64:c7:08:2c:7b:ce:12:40:b1:d9:ec:16:a0:40:13:
25:23:20:86:3e:9f:9d:8b:3c:0a:c4:32:20:77:af:99:fd:82:
6e:ea:be:ed:5d:72:19:5c:13:af:8e:3d:94:8c:b1:bc:9c:37:
6e:25:da:47:fa:6d:05:1e:c0:e7:66:5f:6a:b2:c6:33:ae:d1:
59:c4:e9:7d:a7:28:1b:46:01:9e:8d:8e:f4:ce:62:dc:91:15:
b4:8d:7f:00:62:01:b9:c9:00:16:56:d2:53:7a:da:cb:9b:5f:
6b:d1:79:bd:99:35:4c:ea:0f:d0:b3:f8:e0:0c:6d:ca:e0:31:
35:33:02:63:c4:31:73:83:5a:6b:ca:ca:54:34:6f:b9:24:c5:
a2:92:c8:a9:05:35:8e:85:b9:48:b6:cf:8f:e7:9e:ff:30:db:
63:d1:53:27:0c:bd:d6:44:ae:a8:b8:34:95:9c:33:fc:fc:d1:
56:5d:e8:57:93:b9:b7:8c:27:eb:38:74:c0:89:f7:70:10:70:
38:b1:cf:9b:e1:94:07:a8:cc:c1:b2:e6:b2:63:08:13:ea:4a:
9a:c2:5c:e0:1e:15:9b:d5:4f:58:df:e1:4f:41:26:0c:09:2f:
11:73:ad:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:50:59 2025 by rpki-client