Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
File: blLhBfDoJucV9yzFywMSolNEJLo.mft (raw, json)
Hash identifier: N+bXpTgAkiYuoKnvYLwzyFRd9HbVC16F4cbvslWBaUA=
Subject key identifier: BC:12:23:02:81:55:C6:69:CD:7B:5A:0C:97:F2:3F:06:98:B4:64:CB
Authority key identifier: 6E:52:E1:05:F0:E8:26:E7:15:F7:2C:C5:CB:03:12:A2:53:44:24:BA
Certificate issuer: /CN=6e52e105f0e826e715f72cc5cb0312a2534424ba
Certificate serial: 019A4DE2369F6C6DD3769D976C3A2A17BEB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
Manifest number: 083C
Signing time: Tue 04 Nov 2025 08:01:01 +0000
Manifest this update: Tue 04 Nov 2025 08:01:01 +0000
Manifest next update: Wed 05 Nov 2025 08:01:01 +0000
Files and hashes: 1: blLhBfDoJucV9yzFywMSolNEJLo.crl (hash: Is5huLP0HHdIbslGqwN6cu82PgL3zMDXKA6nJuUqm20=)
2: u8V9QKBVG0Y86-vjzjyTisw0D_Y.roa (hash: KYGcbVwlMJi9uEEQnPMzkMYGof5+7MNCgFq2TVdNdS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:36:9f:6c:6d:d3:76:9d:97:6c:3a:2a:17:be:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e52e105f0e826e715f72cc5cb0312a2534424ba
Validity
Not Before: Nov 4 08:01:01 2025 GMT
Not After : Nov 5 08:01:01 2025 GMT
Subject: CN=bc1223028155c669cd7b5a0c97f23f0698b464cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:20:c4:a9:d8:3b:29:5e:8c:14:b6:35:ff:e9:
4a:04:04:a9:f6:a6:65:2b:01:a1:21:12:2c:cb:ec:
c2:21:d7:1b:7f:05:ba:49:d9:17:92:33:48:05:eb:
e5:a9:3a:8c:1f:57:91:ae:e8:d8:8e:c6:bf:bf:81:
68:61:98:9d:17:5c:c1:c1:db:83:3c:3a:bf:f4:20:
f0:01:98:f1:db:c9:f3:79:48:39:05:aa:ba:b1:4a:
98:2b:55:9a:3f:d3:0a:b3:a8:3b:14:7a:93:dc:ca:
14:76:91:5f:65:80:77:3a:ac:14:6a:17:15:5a:e2:
8c:d4:50:2e:e0:c6:1e:c1:0e:c1:c0:d1:6f:a6:26:
00:bb:8b:95:ee:bc:dc:31:66:04:c5:d7:fc:c2:5e:
c3:e8:62:e3:bd:8b:b9:af:cf:a3:b1:ea:b3:0a:97:
49:39:23:d0:e2:b3:ae:81:ed:71:94:a2:b3:75:68:
5a:e8:06:ff:a4:cd:d2:9b:27:64:c5:d5:ae:ab:e4:
86:dc:e4:38:81:16:23:67:06:98:d7:c1:58:79:6e:
07:0a:47:34:9c:f7:3d:98:3d:1c:44:6d:92:d1:a5:
68:f0:04:cd:ad:c7:59:55:3b:93:c5:1b:f6:99:92:
c3:27:e4:21:f2:1b:14:c6:3c:fe:66:bc:46:3f:d5:
5f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:12:23:02:81:55:C6:69:CD:7B:5A:0C:97:F2:3F:06:98:B4:64:CB
X509v3 Authority Key Identifier:
keyid:6E:52:E1:05:F0:E8:26:E7:15:F7:2C:C5:CB:03:12:A2:53:44:24:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:4d:a4:e8:24:af:00:f2:85:d5:ae:b2:3f:8a:4f:d6:85:c0:
aa:89:1a:93:54:6c:ea:b5:1f:c0:7e:4d:ad:46:bb:48:ee:bd:
99:8e:1f:25:80:29:86:f9:37:a5:47:ef:77:fe:22:26:c0:e2:
f9:b5:15:09:b4:e7:76:8d:ca:67:8a:09:e0:f5:29:9b:fc:0e:
98:e7:60:2a:5d:48:56:e0:97:fb:95:8b:b5:cb:35:6e:d8:bb:
f1:d2:96:98:f4:16:29:5a:7a:97:6b:de:0a:5d:f6:44:1d:ad:
29:31:e7:0b:78:dc:3c:e5:7c:b1:06:ab:73:ba:56:2f:dd:88:
11:a4:0b:d7:14:4f:7a:25:98:5c:a6:99:b2:e2:71:b6:79:05:
e7:76:00:f3:cd:34:f7:b6:2f:f0:f9:4f:e0:b0:3b:5b:79:6e:
e5:02:cd:1d:df:cf:13:1a:17:f5:ba:c1:c7:d6:fe:af:dc:0d:
41:28:b5:82:a1:d6:35:75:cb:77:e7:d2:9f:58:be:ec:0e:64:
51:aa:bb:e1:c1:62:08:6e:c8:0a:a4:22:bb:e4:9c:10:4d:8a:
6c:2f:2a:dd:ea:51:53:5c:9f:8e:39:6c:3f:f7:e1:92:05:a2:
c6:0f:dc:6e:c0:6b:3a:7b:25:1e:cc:61:87:1f:fa:a5:a4:a5:
45:6f:5d:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4jafbG3Tdp2XbDoqF762MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNTJlMTA1ZjBlODI2ZTcxNWY3MmNjNWNiMDMxMmEyNTM0
NDI0YmEwHhcNMjUxMTA0MDgwMTAxWhcNMjUxMTA1MDgwMTAxWjAzMTEwLwYDVQQD
EyhiYzEyMjMwMjgxNTVjNjY5Y2Q3YjVhMGM5N2YyM2YwNjk4YjQ2NGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCDEqdg7KV6MFLY1/+lKBASp9qZl
KwGhIRIsy+zCIdcbfwW6SdkXkjNIBevlqTqMH1eRrujYjsa/v4FoYZidF1zBwduD
PDq/9CDwAZjx28nzeUg5Baq6sUqYK1WaP9MKs6g7FHqT3MoUdpFfZYB3OqwUahcV
WuKM1FAu4MYewQ7BwNFvpiYAu4uV7rzcMWYExdf8wl7D6GLjvYu5r8+jseqzCpdJ
OSPQ4rOuge1xlKKzdWha6Ab/pM3SmydkxdWuq+SG3OQ4gRYjZwaY18FYeW4HCkc0
nPc9mD0cRG2S0aVo8ATNrcdZVTuTxRv2mZLDJ+Qh8hsUxjz+ZrxGP9VfvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwSIwKBVcZpzXtaDJfyPwaYtGTLMB8GA1UdIwQY
MBaAFG5S4QXw6CbnFfcsxcsDEqJTRCS6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmxMaEJmRG9KdWNWOXl6Rnl3TVNvbE5FSkxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9kMTU0YzEtOWQxMy00MzQwLWEzNjIt
NWRlZTFlYTI5NzNiLzEvYmxMaEJmRG9KdWNWOXl6Rnl3TVNvbE5FSkxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9kMTU0YzEtOWQxMy00MzQwLWEzNjItNWRlZTFlYTI5NzNi
LzEvYmxMaEJmRG9KdWNWOXl6Rnl3TVNvbE5FSkxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATk2k6CSv
APKF1a6yP4pP1oXAqokak1Rs6rUfwH5NrUa7SO69mY4fJYAphvk3pUfvd/4iJsDi
+bUVCbTndo3KZ4oJ4PUpm/wOmOdgKl1IVuCX+5WLtcs1bti78dKWmPQWKVp6l2ve
Cl32RB2tKTHnC3jcPOV8sQarc7pWL92IEaQL1xRPeiWYXKaZsuJxtnkF53YA8800
97Yv8PlP4LA7W3lu5QLNHd/PExoX9brBx9b+r9wNQSi1gqHWNXXLd+fSn1i+7A5k
Uaq74cFiCG7ICqQiu+ScEE2KbC8q3epRU1yfjjlsP/fhkgWixg/cbsBrOnslHsxh
hx/6paSlRW9ddw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:36 2025 by rpki-client