Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
File: BLVuw7rwqesioTYUdj8YFF0M8Eo.mft (raw, json)
Hash identifier: RcafHqalV9AkBGRHtk7YWNOWxos8DdpG/RfU0yBdaNo=
Subject key identifier: D6:0D:8D:E8:10:6E:F2:DA:49:86:C7:F7:F7:D6:6B:86:4F:8B:6F:42
Authority key identifier: 04:B5:6E:C3:BA:F0:A9:EB:22:A1:36:14:76:3F:18:14:5D:0C:F0:4A
Certificate issuer: /CN=04b56ec3baf0a9eb22a13614763f18145d0cf04a
Certificate serial: 019A533EEE851C468862401FE8E647AC5253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
Manifest number: 0408
Signing time: Wed 05 Nov 2025 09:00:24 +0000
Manifest this update: Wed 05 Nov 2025 09:00:24 +0000
Manifest next update: Thu 06 Nov 2025 09:00:24 +0000
Files and hashes: 1: BLVuw7rwqesioTYUdj8YFF0M8Eo.crl (hash: tNAXdWnS1vUDEmROngOopAx98g2+88liirtg65SJpEU=)
2: CQgo9i7xKCKF-brlO7bOG3BNmVY.roa (hash: X8lPFkVQRlIn745XFiJL9ENZDguoL523rt5LMcrNdrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:ee:85:1c:46:88:62:40:1f:e8:e6:47:ac:52:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04b56ec3baf0a9eb22a13614763f18145d0cf04a
Validity
Not Before: Nov 5 09:00:24 2025 GMT
Not After : Nov 6 09:00:24 2025 GMT
Subject: CN=d60d8de8106ef2da4986c7f7f7d66b864f8b6f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cb:0c:94:37:f5:70:fc:bd:64:8a:8c:4e:df:
f7:ce:7f:9b:93:00:21:4d:37:cd:03:c8:4a:12:fd:
16:d0:73:64:47:6a:26:24:08:04:ac:7a:53:cf:1b:
43:b5:ba:b0:29:80:b8:d5:68:56:6a:7e:47:70:e6:
9a:44:52:15:9f:df:5a:11:27:9e:84:e5:f9:5d:b4:
27:24:ed:c3:4d:98:25:a1:f3:28:0b:7d:b9:e6:f5:
ac:6d:c1:d4:b5:c0:aa:89:b7:01:df:42:e4:4e:e3:
95:c2:0c:b5:4e:04:8b:aa:e8:a8:ad:31:a5:72:6d:
96:9d:7f:28:16:a6:88:08:32:84:8e:d9:47:1f:55:
18:33:41:39:20:3d:fd:05:62:4a:92:e8:47:7a:c3:
4f:77:8c:04:d2:cb:6a:e0:dc:b8:0b:c4:fa:cd:9d:
03:6d:1c:25:1b:d5:a3:82:8d:9b:49:2d:10:e9:80:
3d:e6:d4:b6:fb:18:a3:80:aa:5a:24:69:78:fc:ec:
3b:df:88:ce:91:e1:a5:b2:00:ce:5b:1f:19:21:39:
44:af:da:91:ac:2c:62:69:be:70:3a:f6:a7:54:8d:
19:a6:fc:7e:11:ed:c0:51:5f:e2:35:91:8a:c3:d6:
45:84:5f:93:ae:7e:36:65:22:38:90:b0:d1:10:11:
24:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:0D:8D:E8:10:6E:F2:DA:49:86:C7:F7:F7:D6:6B:86:4F:8B:6F:42
X509v3 Authority Key Identifier:
keyid:04:B5:6E:C3:BA:F0:A9:EB:22:A1:36:14:76:3F:18:14:5D:0C:F0:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:49:4c:16:04:92:0a:56:d7:9f:3e:5f:ef:a1:ad:5a:e9:28:
b3:5c:fb:56:a5:b0:bc:a3:6c:d5:d2:39:ba:72:93:57:93:7b:
90:c7:fa:6f:28:64:ee:0a:e3:85:42:1b:e3:4b:e4:89:3d:36:
fc:92:30:6d:b7:83:37:14:3e:3a:32:73:47:e9:b0:7f:7b:e8:
2a:15:d6:9c:3d:9b:3d:85:58:62:ba:e6:9b:bd:c3:be:c1:d8:
da:00:6d:0e:2d:3c:45:e5:af:dd:d9:a2:0b:69:9e:40:4d:a2:
23:77:77:e8:d7:42:66:de:9e:14:5f:3c:ba:44:eb:cc:27:2e:
c3:f4:ae:45:43:29:ac:e8:be:92:ac:34:cd:ce:7e:ee:29:c5:
cb:83:40:23:74:f1:5f:66:56:9f:23:48:14:22:54:8e:b0:87:
37:b9:0a:fe:cf:26:2c:5c:4f:60:88:82:d0:b7:11:50:2c:ab:
27:fc:df:8b:9b:17:25:53:38:a8:e5:7b:45:6a:c1:dd:f5:4d:
a8:d6:5b:5c:bc:9e:68:d6:f7:8b:04:86:02:d6:29:a4:71:55:
6c:ea:cb:c7:ea:4a:26:2d:d8:37:84:29:da:df:c8:e9:55:57:
07:4a:a3:75:c3:53:b0:24:32:13:2e:10:41:dd:8e:1a:42:94:
ee:d1:fc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:22:49 2025 by rpki-client