Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
File: Blyf7bW1RPaW7U2vE1sC3ubZevY.mft (raw, json)
Hash identifier: Ufj0MtASPA8VKCtfiqErC0Uvmcr5/rsDrXAQp93AE4U=
Subject key identifier: 47:49:BA:C9:9D:68:D6:DD:9E:3A:94:58:DA:7D:37:64:9B:7C:8E:AD
Authority key identifier: 06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6
Certificate issuer: /CN=065c9fedb5b544f696ed4daf135b02dee6d97af6
Certificate serial: 0198D5F1D795928F3DFA62AB220FE9900B0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 08:00:52 +0000
Manifest this update: Sat 23 Aug 2025 08:00:52 +0000
Manifest next update: Sun 24 Aug 2025 08:00:52 +0000
Files and hashes: 1: Blyf7bW1RPaW7U2vE1sC3ubZevY.crl (hash: xCMexjzP7iPbJnS0XMK8CzoJxI3Iiq/ZQGZ+QZBiO/w=)
2: UVnhMz4Jh2elkuvmMPm7Jt9svi8.roa (hash: he6S2b9IPHmcJG3wUgyxY2EilJ7c6oeB4o0eAPgBdLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:d7:95:92:8f:3d:fa:62:ab:22:0f:e9:90:0b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=065c9fedb5b544f696ed4daf135b02dee6d97af6
Validity
Not Before: Aug 23 08:00:52 2025 GMT
Not After : Aug 24 08:00:52 2025 GMT
Subject: CN=4749bac99d68d6dd9e3a9458da7d37649b7c8ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2b:ab:ac:95:0d:1c:6b:70:af:bb:cb:89:35:
11:3f:d4:8b:b3:26:c8:22:81:c7:4b:5c:5f:4b:32:
ce:2d:0d:ba:4b:ea:5b:10:34:51:c9:ba:3c:43:b3:
b4:e1:78:9e:1b:5a:94:8a:81:75:b9:d6:cd:ff:33:
51:46:42:12:87:7c:17:11:18:ec:a4:f4:4c:ac:92:
1a:6f:17:fa:f3:1d:2c:a3:84:fc:2f:7b:17:72:84:
c0:a5:8c:3e:b9:b1:4a:46:94:0d:f9:00:e7:6e:42:
a0:64:91:bc:04:71:a7:9f:9c:3d:3f:5b:5e:f8:e4:
d5:8f:70:fc:a1:66:2b:49:ba:32:2c:1b:07:13:6a:
d8:c1:4d:a2:b7:84:63:68:3d:72:bf:69:e8:6c:ba:
9c:d3:0a:3b:fe:d6:4a:bd:07:48:de:5e:67:2b:8c:
8f:f5:24:13:72:f9:af:89:96:0c:28:74:48:81:b2:
b1:ab:b0:8c:5a:a0:d1:cd:b1:95:01:c7:0a:53:16:
01:45:e3:f7:42:57:4f:1f:96:71:56:c9:79:54:4f:
8c:61:65:9d:df:29:30:d1:fb:9e:2b:06:36:00:a1:
25:73:d2:42:90:69:c6:a3:81:58:fb:07:3f:05:6b:
97:7c:fb:88:0a:6e:13:8e:0f:34:fb:ab:55:48:fa:
e0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:49:BA:C9:9D:68:D6:DD:9E:3A:94:58:DA:7D:37:64:9B:7C:8E:AD
X509v3 Authority Key Identifier:
keyid:06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:0c:0b:3d:ab:98:d2:82:68:d6:ce:15:30:49:a9:d8:41:48:
b7:24:7c:04:ba:62:f5:3e:59:1e:1c:2d:84:1e:59:60:88:bd:
d2:d8:c4:a5:a7:a5:6e:01:4d:d3:dc:b1:f9:42:a1:33:56:a7:
4d:6a:a6:2c:70:47:68:6e:6d:e3:8a:ed:86:93:52:3b:7c:e6:
d1:d7:21:06:4f:07:be:0d:a9:21:ad:fe:62:50:ec:87:8e:ab:
b4:3b:fc:cc:56:68:92:79:d9:fe:56:9c:94:82:55:53:8f:af:
3a:7c:04:d7:bf:71:20:b1:f3:89:6d:7c:54:ff:da:a6:b3:92:
5c:24:be:4d:e3:55:8e:24:f6:4c:84:39:cc:3e:2d:3f:fd:25:
ea:bc:c3:e9:d9:48:68:7d:4c:d0:d5:3d:16:4f:5b:ae:e9:da:
ef:b6:80:2c:0a:d3:b4:ba:1d:f6:b7:ff:2c:3b:1a:85:b3:1d:
e3:0c:1e:e2:49:32:87:44:3a:a8:84:7b:46:50:6d:06:8b:b9:
54:36:07:93:33:d6:cb:80:b7:08:8f:24:97:4b:64:aa:81:c8:
c8:d6:49:4c:a5:ef:3c:29:fa:91:85:e6:81:df:95:32:1f:b9:
b8:d3:5d:a1:ff:49:35:5e:3e:1d:20:c7:3d:2d:8c:15:ef:98:
d9:19:e7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:21:28 2025 by rpki-client