Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
File: blLhBfDoJucV9yzFywMSolNEJLo.mft (raw, json)
Hash identifier: t8UvRzeojUSyXWt2ui8CW9UHE9G+3j5pU8hxpd/Xcm0=
Subject key identifier: 6D:3C:1B:14:F0:69:E3:C7:1A:DB:7D:1E:4F:42:F7:C0:CA:FF:91:61
Authority key identifier: 6E:52:E1:05:F0:E8:26:E7:15:F7:2C:C5:CB:03:12:A2:53:44:24:BA
Certificate issuer: /CN=6e52e105f0e826e715f72cc5cb0312a2534424ba
Certificate serial: 019872CFF838E2CFA386C7C25C5317993E0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
Manifest number: 0746
Signing time: Mon 04 Aug 2025 02:01:28 +0000
Manifest this update: Mon 04 Aug 2025 02:01:28 +0000
Manifest next update: Tue 05 Aug 2025 02:01:28 +0000
Files and hashes: 1: blLhBfDoJucV9yzFywMSolNEJLo.crl (hash: JA5FSQs5fW3mBAeEDPWbYGXbM/9l3FLvD4ral0Pyjp8=)
2: u8V9QKBVG0Y86-vjzjyTisw0D_Y.roa (hash: KYGcbVwlMJi9uEEQnPMzkMYGof5+7MNCgFq2TVdNdS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:f8:38:e2:cf:a3:86:c7:c2:5c:53:17:99:3e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e52e105f0e826e715f72cc5cb0312a2534424ba
Validity
Not Before: Aug 4 02:01:28 2025 GMT
Not After : Aug 5 02:01:28 2025 GMT
Subject: CN=6d3c1b14f069e3c71adb7d1e4f42f7c0caff9161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:39:05:d5:c5:7e:eb:b5:f9:8a:29:fe:60:ee:
78:3a:80:1f:59:b3:f0:a2:cf:7b:13:b9:4c:91:18:
46:9b:91:28:1b:d2:f6:de:b2:bb:b3:fb:a8:3a:81:
ea:eb:15:57:97:1c:2e:c7:c9:b0:8d:04:10:aa:1d:
1e:a8:14:81:e9:c2:ea:73:6c:d3:8a:2a:41:48:27:
2e:7a:a7:ff:59:10:18:49:5e:c4:7d:2c:01:7a:ca:
02:d1:68:bb:b4:ab:d7:85:50:0b:ab:71:87:73:8c:
71:ff:4f:ec:f2:79:2e:b9:c1:a7:eb:ed:0b:a0:23:
1b:00:50:53:ba:34:07:a9:5f:c6:1b:c8:88:2d:cf:
b0:93:da:5f:9f:08:4f:4f:2e:3d:ae:9c:f8:54:65:
29:9b:ab:f6:5f:6d:cb:5f:12:06:b4:0e:e2:12:ae:
1c:94:28:f9:9a:d9:6d:d6:fe:b1:ca:91:ce:0f:58:
84:10:7a:db:b0:e4:02:ea:70:f5:9e:0c:46:e9:1c:
7a:2b:47:56:bf:67:b2:16:cd:3c:42:07:1d:a8:12:
e0:58:c3:1f:29:da:7f:ec:d8:2d:5a:ec:ec:72:de:
0a:4c:f9:37:18:6f:60:a9:87:ab:d5:80:60:e6:24:
8c:19:65:04:fb:8e:c1:c6:c3:7f:c1:65:d3:d3:a7:
9f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3C:1B:14:F0:69:E3:C7:1A:DB:7D:1E:4F:42:F7:C0:CA:FF:91:61
X509v3 Authority Key Identifier:
keyid:6E:52:E1:05:F0:E8:26:E7:15:F7:2C:C5:CB:03:12:A2:53:44:24:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:df:13:e5:19:2f:f6:5d:f1:a6:42:47:23:16:82:40:3e:d6:
59:f4:00:c1:8c:a9:ef:3c:70:f9:26:93:37:92:a2:1e:0a:5d:
bd:ef:38:cc:c8:bb:06:2e:11:90:e9:71:65:04:ad:db:78:e6:
d0:8b:18:4c:f8:40:e6:e4:16:f8:a1:14:a1:da:3a:41:a8:9e:
46:89:ad:c0:1a:41:53:43:f6:5e:e0:f2:ba:47:88:67:68:d9:
50:12:e6:8f:12:f2:40:c5:f7:4c:e7:69:eb:ae:a4:af:a6:84:
b3:1c:a4:b2:60:4c:34:03:c9:ad:90:1d:de:38:e1:e2:66:c4:
df:c6:c2:e6:f5:56:a3:6c:81:4b:5a:87:61:8f:cf:91:fa:7c:
9a:e2:58:cd:c5:17:34:80:9c:d0:8b:15:02:29:34:43:2d:81:
e6:b5:10:52:34:86:fe:d4:4c:14:35:b1:c0:7f:c8:df:26:04:
c6:dd:b3:f6:90:c0:3c:88:cc:a2:05:68:35:e0:14:91:b4:f1:
21:0b:7f:44:c6:f6:b7:23:8e:07:86:8f:15:98:8b:e6:25:1b:
8f:9b:04:68:1f:3e:63:24:37:3f:6f:05:94:b0:de:4c:3d:0e:
53:d9:45:2d:8f:49:94:95:e5:4c:25:74:31:e0:47:79:5d:74:
42:95:2d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:31 2025 by rpki-client