Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
File: BLw664svC0huXIwMec6djWixj5Y.mft (raw, json)
Hash identifier: pRRV/S35m+ZWXbI47hRg5dIFJSAS1bU5bBoWZdaMFiQ=
Subject key identifier: 53:12:EE:20:98:EA:78:1F:79:0F:CC:00:C5:90:0E:C0:8F:D4:52:03
Authority key identifier: 04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
Certificate issuer: /CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Certificate serial: 019A4D3D42BCEE9EC51F3622252696E3F79F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
Manifest number: 06B7
Signing time: Tue 04 Nov 2025 05:00:51 +0000
Manifest this update: Tue 04 Nov 2025 05:00:51 +0000
Manifest next update: Wed 05 Nov 2025 05:00:51 +0000
Files and hashes: 1: BLw664svC0huXIwMec6djWixj5Y.crl (hash: aG94lMI9iW8Dl1zNbCSzhm1iPG/ZaAB/wIlS1JuW4wk=)
2: RLDEvA5lT3OJsuLbbmV0pyamz6M.roa (hash: 08l04RNVeM6otYs3DB4mk2Ka+Bd48a32zNdlW+piPQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:42:bc:ee:9e:c5:1f:36:22:25:26:96:e3:f7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Validity
Not Before: Nov 4 05:00:51 2025 GMT
Not After : Nov 5 05:00:51 2025 GMT
Subject: CN=5312ee2098ea781f790fcc00c5900ec08fd45203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:e3:1d:c6:4b:de:0d:5a:f0:af:58:2e:83:8d:
1d:c2:fd:4a:13:d0:57:ae:88:fa:0f:8e:44:57:fb:
30:6c:e5:0b:38:90:3b:cd:e8:42:a7:65:f5:e7:24:
a5:be:71:17:b8:85:42:a7:ce:0f:82:f1:27:44:23:
15:ae:d2:69:26:3e:f5:14:13:99:7b:a5:95:7d:9f:
06:31:3f:da:53:80:32:85:a0:c4:e6:65:00:7e:eb:
3f:10:49:81:36:8b:05:a9:91:54:52:4f:2f:1f:f0:
7d:a7:4d:51:74:be:e2:bd:95:f0:ac:37:e8:46:71:
3c:32:b6:8f:ac:a1:f7:9a:b8:2d:37:34:79:6d:88:
d2:2d:5a:ec:1c:d8:c6:7b:7c:33:97:64:8f:be:da:
ef:fe:42:41:e3:21:f7:04:6c:6f:ee:c9:bd:f5:bc:
dc:4c:e1:35:2e:df:a6:82:37:4b:ef:90:df:b3:07:
1f:10:be:8a:b9:62:ef:43:46:1f:0e:d7:2a:17:3b:
68:ed:42:2f:a6:7b:63:f7:34:c6:54:06:6a:98:28:
40:7e:fa:59:e5:40:16:d0:5a:fe:e9:72:07:1e:26:
99:aa:f3:31:bc:6a:d4:34:69:56:97:91:7d:ea:cd:
4f:e6:3f:16:9b:4b:b8:e6:f0:47:8d:1c:c4:f6:61:
ab:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:12:EE:20:98:EA:78:1F:79:0F:CC:00:C5:90:0E:C0:8F:D4:52:03
X509v3 Authority Key Identifier:
keyid:04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:10:c9:a7:90:c0:08:30:cc:35:9b:fa:00:c1:55:85:ba:cc:
18:a5:1b:f1:98:8a:10:75:00:06:67:11:ed:af:15:ed:0c:3d:
83:95:94:ca:3b:e9:8f:b7:b2:9b:b5:66:11:9a:ad:81:b1:64:
d0:b7:87:dd:ce:ac:b1:0b:b2:7c:7e:9d:8c:4e:0f:d8:02:b1:
d9:38:88:e0:04:58:96:06:11:57:6f:55:73:b2:f9:68:40:cc:
47:20:2c:a9:24:2a:8b:b1:4d:15:48:de:16:c7:98:b3:db:b0:
42:80:63:5c:62:09:df:b2:34:60:a4:06:c9:87:b2:8e:38:9b:
6e:06:e8:ea:b8:cf:0d:80:a8:d2:a5:15:3c:7b:f6:2b:98:71:
77:96:b7:98:a2:a4:c2:28:2e:c3:8f:ca:02:02:60:98:a7:b5:
9f:93:4f:42:f8:0b:60:6f:06:c9:70:d1:34:99:23:ac:ed:38:
06:50:14:ec:82:f0:71:1f:85:ba:b9:15:fc:45:91:6b:de:fe:
e0:1e:a3:8c:b0:01:78:91:2f:db:49:a1:c0:fa:e9:07:b9:27:
63:61:6f:95:57:86:fb:9b:74:fc:46:61:3f:8d:59:04:bd:22:
66:2c:2d:64:4a:0d:5f:79:e5:48:d9:d3:42:63:a4:0b:21:cd:
88:86:bd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:57:18 2025 by rpki-client