Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
File: blQs7eU6DFcUWmr_L1gZbwLUoS4.mft (raw, json)
Hash identifier: TmfKI1h8QMb3JxZn6jgD6EtXrXKqEKJQ6TMztRWPwXY=
Subject key identifier: 49:72:73:84:2E:CA:AC:75:3C:47:59:D3:44:D8:4C:82:E1:8A:93:A5
Authority key identifier: 6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E
Certificate issuer: /CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
Certificate serial: 019A5187833B8BB3833CDFDD9943D49E95B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
Manifest number: 16ED
Signing time: Wed 05 Nov 2025 01:00:26 +0000
Manifest this update: Wed 05 Nov 2025 01:00:26 +0000
Manifest next update: Thu 06 Nov 2025 01:00:26 +0000
Files and hashes: 1: blQs7eU6DFcUWmr_L1gZbwLUoS4.crl (hash: f5pNBGnvO73Xc82NJRSZ4F95IIhng2GqXjqOTaJ04D8=)
2: pXv8FGbLwxECE7IPZwLe-oIEhlQ.roa (hash: lA0EoJbAgOHytg/Q3yX/rveAnxbQAYlQALMvfLmzZeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:83:3b:8b:b3:83:3c:df:dd:99:43:d4:9e:95:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
Validity
Not Before: Nov 5 01:00:26 2025 GMT
Not After : Nov 6 01:00:26 2025 GMT
Subject: CN=497273842ecaac753c4759d344d84c82e18a93a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:51:e0:0e:90:55:c6:87:a9:9e:d1:54:bc:9a:
2d:01:45:42:53:4b:1c:67:1a:5e:c2:13:31:67:1a:
c3:0f:7c:b3:d6:70:4e:29:00:fb:be:dc:db:ac:10:
be:95:02:0d:a3:c0:4b:8a:84:1d:5d:c3:13:8e:0d:
68:2a:b3:38:3d:32:74:6c:e2:4e:3b:c5:fe:8a:d4:
67:c6:f4:cb:3d:28:73:40:47:25:7e:48:16:5a:71:
7e:c1:ce:5e:d3:ef:f8:b3:6c:0e:fb:13:c8:1d:64:
0d:97:41:3e:b3:49:a3:8a:dc:df:f8:31:7c:42:0f:
d7:50:80:5c:1e:72:a4:44:7c:0d:bf:04:14:09:a1:
d5:2d:07:7b:b8:93:c5:3f:1d:14:36:3e:02:86:90:
d7:10:84:65:d5:ac:61:57:e9:cd:45:d9:e9:75:3e:
02:11:33:9a:32:55:d8:dd:41:92:6f:b5:e5:3f:d0:
a2:88:01:36:9f:9a:22:fb:78:26:bf:de:90:6d:ce:
50:85:dd:fe:8a:2f:3f:a4:dc:98:7a:b6:b8:a1:7c:
94:30:04:7e:cf:2a:f0:61:a0:12:a2:e6:6a:72:93:
c4:3c:ef:42:cb:eb:ca:ea:4d:85:68:e7:89:e3:52:
1d:dc:92:c2:1d:d2:cb:49:d6:e1:00:c5:e1:1a:6c:
16:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:72:73:84:2E:CA:AC:75:3C:47:59:D3:44:D8:4C:82:E1:8A:93:A5
X509v3 Authority Key Identifier:
keyid:6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:84:44:9c:eb:b7:12:62:c8:50:51:7d:a0:79:11:5c:00:bd:
7e:e2:56:2b:d8:d8:c8:dd:d3:b1:5e:42:d9:a1:a4:48:e1:a2:
ba:5d:b7:6c:73:4a:f3:73:9e:c1:14:0d:93:f2:01:69:88:8f:
f1:85:d9:88:d4:76:45:66:91:50:9e:d2:fc:75:61:fe:91:78:
6e:e6:b4:ff:d0:06:6a:d5:bf:dc:74:81:41:46:cf:fa:d5:82:
db:38:fa:7c:a4:c3:72:10:cc:7e:3a:48:2f:c3:e5:6e:02:72:
64:78:29:e8:7b:05:bb:63:99:48:04:51:7f:d5:07:a6:35:e2:
f6:8b:7b:46:e3:cb:23:ba:b9:b4:76:40:d5:cc:a3:c7:10:cc:
12:aa:9d:49:92:7b:62:c4:c2:4b:40:87:58:74:bb:4c:c9:91:
99:e1:31:3a:5f:03:8a:8c:9b:c4:d5:7e:9b:92:85:98:25:13:
94:40:b2:6c:49:2d:cb:2f:7e:8d:62:5b:4b:82:50:8d:f4:57:
70:1a:a8:18:09:38:dc:23:9c:f6:1d:0f:e3:22:8a:4b:a9:ea:
2d:73:4e:c7:d9:df:66:4e:0e:25:e3:52:7b:d9:3c:6f:59:71:
4b:f1:eb:17:37:62:a6:d3:e8:6b:ea:ac:38:6c:dd:99:17:63:
3c:e6:11:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRh4M7i7ODPN/dmUPUnpWyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNTQyY2VkZTUzYTBjNTcxNDVhNmFmZjJmNTgxOTZmMDJk
NGExMmUwHhcNMjUxMTA1MDEwMDI2WhcNMjUxMTA2MDEwMDI2WjAzMTEwLwYDVQQD
Eyg0OTcyNzM4NDJlY2FhYzc1M2M0NzU5ZDM0NGQ4NGM4MmUxOGE5M2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31HgDpBVxoepntFUvJotAUVCU0sc
ZxpewhMxZxrDD3yz1nBOKQD7vtzbrBC+lQINo8BLioQdXcMTjg1oKrM4PTJ0bOJO
O8X+itRnxvTLPShzQEclfkgWWnF+wc5e0+/4s2wO+xPIHWQNl0E+s0mjitzf+DF8
Qg/XUIBcHnKkRHwNvwQUCaHVLQd7uJPFPx0UNj4ChpDXEIRl1axhV+nNRdnpdT4C
ETOaMlXY3UGSb7XlP9CiiAE2n5oi+3gmv96Qbc5Qhd3+ii8/pNyYera4oXyUMAR+
zyrwYaASouZqcpPEPO9Cy+vK6k2FaOeJ41Id3JLCHdLLSdbhAMXhGmwW8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFElyc4Quyqx1PEdZ00TYTILhipOlMB8GA1UdIwQY
MBaAFG5ULO3lOgxXFFpq/y9YGW8C1KEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmxRczdlVTZERmNVV21yX0wxZ1pid0xVb1M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zMjE2OWEtNGE1YS00MTFiLWIwMDYt
MzE4YzcxYjExOWY3LzEvYmxRczdlVTZERmNVV21yX0wxZ1pid0xVb1M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8zMjE2OWEtNGE1YS00MTFiLWIwMDYtMzE4YzcxYjExOWY3
LzEvYmxRczdlVTZERmNVV21yX0wxZ1pid0xVb1M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXYREnOu3
EmLIUFF9oHkRXAC9fuJWK9jYyN3TsV5C2aGkSOGiul23bHNK83OewRQNk/IBaYiP
8YXZiNR2RWaRUJ7S/HVh/pF4bua0/9AGatW/3HSBQUbP+tWC2zj6fKTDchDMfjpI
L8PlbgJyZHgp6HsFu2OZSARRf9UHpjXi9ot7RuPLI7q5tHZA1cyjxxDMEqqdSZJ7
YsTCS0CHWHS7TMmRmeExOl8DioybxNV+m5KFmCUTlECybEktyy9+jWJbS4JQjfRX
cBqoGAk43COc9h0P4yKKS6nqLXNOx9nfZk4OJeNSe9k8b1lxS/HrFzdiptPoa+qs
OGzdmRdjPOYR8A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:03:58 2025 by rpki-client