Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
File: blLhBfDoJucV9yzFywMSolNEJLo.mft (raw, json)
Hash identifier: mz9yZpY/VrI+jk6JPO2Ny4mXJZ/dSr+8FEFtAZd60CY=
Subject key identifier: DA:F9:DC:9A:1E:64:D1:55:3F:2E:32:62:77:FC:A8:CD:1E:5A:42:F9
Authority key identifier: 6E:52:E1:05:F0:E8:26:E7:15:F7:2C:C5:CB:03:12:A2:53:44:24:BA
Certificate issuer: /CN=6e52e105f0e826e715f72cc5cb0312a2534424ba
Certificate serial: 019771F638509F8E189247DE7C35C5E6D3F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
Manifest number: 06C1
Signing time: Sun 15 Jun 2025 05:00:51 +0000
Manifest this update: Sun 15 Jun 2025 05:00:51 +0000
Manifest next update: Mon 16 Jun 2025 05:00:51 +0000
Files and hashes: 1: blLhBfDoJucV9yzFywMSolNEJLo.crl (hash: OIkI2cyJuAFJwe9K9v8ADEUWdKkItjcZS5WQhwuUDM8=)
2: u8V9QKBVG0Y86-vjzjyTisw0D_Y.roa (hash: KYGcbVwlMJi9uEEQnPMzkMYGof5+7MNCgFq2TVdNdS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f6:38:50:9f:8e:18:92:47:de:7c:35:c5:e6:d3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e52e105f0e826e715f72cc5cb0312a2534424ba
Validity
Not Before: Jun 15 05:00:51 2025 GMT
Not After : Jun 16 05:00:51 2025 GMT
Subject: CN=daf9dc9a1e64d1553f2e326277fca8cd1e5a42f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:82:8a:25:e7:94:47:51:80:56:25:1c:d7:1e:
97:cd:11:0b:f4:ca:e1:9f:84:65:51:0f:17:fa:78:
d4:e6:80:0d:f7:c5:4f:1f:65:39:cd:c4:28:2a:9a:
5e:ad:0b:1e:54:e8:57:4d:0c:8f:3b:b2:97:c3:fe:
bf:50:61:5a:5b:67:4b:c3:14:3d:b2:fa:0b:a5:85:
38:20:a5:85:86:51:78:fb:25:37:0d:f8:46:53:ab:
b7:ff:fc:76:8f:e6:8b:63:6a:32:d8:71:6b:2b:fc:
ce:7d:46:02:10:eb:05:c5:04:d2:4d:f8:43:b5:91:
be:f5:60:2a:ed:1a:16:63:16:72:a4:24:b8:98:e4:
d3:ca:dd:82:bc:a7:d3:f9:f6:2f:c0:15:c3:70:72:
63:71:7e:ca:a4:6f:7f:36:e5:3c:b1:5b:a0:9e:32:
a5:bb:c7:19:c0:66:6f:2f:0b:d9:68:4c:dd:02:b4:
49:57:c8:75:48:12:0e:db:fb:aa:74:af:52:45:9c:
d0:5e:fa:c9:05:f2:ed:3a:7d:1e:3f:68:fd:12:f8:
96:17:c8:63:0b:b5:95:04:74:87:f7:e0:a2:41:e0:
10:eb:43:64:6e:86:3f:d9:d5:da:ae:8d:4e:73:d8:
06:9f:ff:66:2e:c5:72:88:3c:d6:64:d4:52:6f:02:
7f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F9:DC:9A:1E:64:D1:55:3F:2E:32:62:77:FC:A8:CD:1E:5A:42:F9
X509v3 Authority Key Identifier:
keyid:6E:52:E1:05:F0:E8:26:E7:15:F7:2C:C5:CB:03:12:A2:53:44:24:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:4a:49:e3:2d:37:10:63:dd:04:f1:e8:99:b2:91:29:30:13:
8e:00:c9:05:28:03:35:1f:da:c9:09:f3:b8:14:11:8f:b5:53:
4e:c4:eb:5e:71:83:df:bf:38:62:8a:79:25:f7:0f:c1:00:e8:
e4:0f:46:95:f8:0f:28:34:1a:66:59:c2:1f:1c:7c:f4:1b:02:
8c:b6:bc:58:8a:3f:d9:d3:8a:d3:55:d1:80:4c:42:a0:11:92:
46:8c:4c:9d:0d:53:e5:85:f2:af:07:53:e9:3c:15:9f:47:d3:
b8:a5:ff:f7:92:20:b7:75:0d:ab:fc:d0:fa:4f:7a:70:5e:0a:
20:e5:0e:15:96:c2:c7:5f:fb:b2:ef:af:9b:db:f0:8f:1a:f0:
67:4f:60:51:f3:c9:18:78:eb:a9:81:ac:d7:95:18:9d:66:82:
64:76:f7:62:d5:58:0e:01:02:9e:cc:3e:50:65:43:de:88:d2:
fa:77:24:d6:19:2c:69:7a:91:3c:51:88:d7:ef:1a:14:08:02:
8c:cd:68:b5:99:db:14:6a:23:b2:2c:ce:4f:3b:cd:d9:50:ec:
49:7f:51:2f:ae:66:6c:db:c9:d9:6d:e2:0b:0e:c0:3e:9a:ae:
f3:23:3c:0a:aa:07:c7:e2:68:7c:a8:a8:59:39:c8:df:19:1a:
7a:08:53:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdx9jhQn44YkkfefDXF5tP5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNTJlMTA1ZjBlODI2ZTcxNWY3MmNjNWNiMDMxMmEyNTM0
NDI0YmEwHhcNMjUwNjE1MDUwMDUxWhcNMjUwNjE2MDUwMDUxWjAzMTEwLwYDVQQD
EyhkYWY5ZGM5YTFlNjRkMTU1M2YyZTMyNjI3N2ZjYThjZDFlNWE0MmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoKKJeeUR1GAViUc1x6XzREL9Mrh
n4RlUQ8X+njU5oAN98VPH2U5zcQoKpperQseVOhXTQyPO7KXw/6/UGFaW2dLwxQ9
svoLpYU4IKWFhlF4+yU3DfhGU6u3//x2j+aLY2oy2HFrK/zOfUYCEOsFxQTSTfhD
tZG+9WAq7RoWYxZypCS4mOTTyt2CvKfT+fYvwBXDcHJjcX7KpG9/NuU8sVugnjKl
u8cZwGZvLwvZaEzdArRJV8h1SBIO2/uqdK9SRZzQXvrJBfLtOn0eP2j9EviWF8hj
C7WVBHSH9+CiQeAQ60NkboY/2dXaro1Oc9gGn/9mLsVyiDzWZNRSbwJ/0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNr53JoeZNFVPy4yYnf8qM0eWkL5MB8GA1UdIwQY
MBaAFG5S4QXw6CbnFfcsxcsDEqJTRCS6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmxMaEJmRG9KdWNWOXl6Rnl3TVNvbE5FSkxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9kMTU0YzEtOWQxMy00MzQwLWEzNjIt
NWRlZTFlYTI5NzNiLzEvYmxMaEJmRG9KdWNWOXl6Rnl3TVNvbE5FSkxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9kMTU0YzEtOWQxMy00MzQwLWEzNjItNWRlZTFlYTI5NzNi
LzEvYmxMaEJmRG9KdWNWOXl6Rnl3TVNvbE5FSkxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjEpJ4y03
EGPdBPHombKRKTATjgDJBSgDNR/ayQnzuBQRj7VTTsTrXnGD3784Yop5JfcPwQDo
5A9GlfgPKDQaZlnCHxx89BsCjLa8WIo/2dOK01XRgExCoBGSRoxMnQ1T5YXyrwdT
6TwVn0fTuKX/95Igt3UNq/zQ+k96cF4KIOUOFZbCx1/7su+vm9vwjxrwZ09gUfPJ
GHjrqYGs15UYnWaCZHb3YtVYDgECnsw+UGVD3ojS+nck1hksaXqRPFGI1+8aFAgC
jM1otZnbFGojsizOTzvN2VDsSX9RL65mbNvJ2W3iCw7APpqu8yM8CqoHx+JofKio
WTnI3xkaeghTDQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:34:41 2025 by rpki-client