Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
File: bLu4HYIwad2CTY2Ngsjb-zBduY8.mft (raw, json)
Hash identifier: FTsbNHjS8zTOUZQSLlLyNa1gIHJ/42kyApn6nv/aRso=
Subject key identifier: 92:DD:4F:6C:26:C8:5B:2A:C9:A2:F6:80:A3:8D:70:81:AF:04:3F:74
Authority key identifier: 6C:BB:B8:1D:82:30:69:DD:82:4D:8D:8D:82:C8:DB:FB:30:5D:B9:8F
Certificate issuer: /CN=6cbbb81d823069dd824d8d8d82c8dbfb305db98f
Certificate serial: 0199FCFD4DCEFE0291D51841E5BAFBF0C961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
Manifest number: 1619
Signing time: Sun 19 Oct 2025 15:01:22 +0000
Manifest this update: Sun 19 Oct 2025 15:01:22 +0000
Manifest next update: Mon 20 Oct 2025 15:01:22 +0000
Files and hashes: 1: Kzmni7xeA7Gni0kYnHO5daJh5Mk.roa (hash: G+JlA/GfSH/1W28f9m1jif2MBvIydlQBDUO2Og4m/hU=)
2: bLu4HYIwad2CTY2Ngsjb-zBduY8.crl (hash: RawnfJOHrcJsffHfe7bpQDeVw+gq21RI/aLBCMMzPb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:4d:ce:fe:02:91:d5:18:41:e5:ba:fb:f0:c9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cbbb81d823069dd824d8d8d82c8dbfb305db98f
Validity
Not Before: Oct 19 15:01:22 2025 GMT
Not After : Oct 20 15:01:22 2025 GMT
Subject: CN=92dd4f6c26c85b2ac9a2f680a38d7081af043f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:df:ab:2c:34:c2:8f:c5:66:c0:3c:88:4c:3b:
7a:4f:f4:53:60:a1:2a:c7:49:23:43:cb:26:f1:d1:
3b:05:56:0c:59:09:73:08:0a:80:ad:c2:c0:b7:b4:
50:63:01:cb:11:75:b8:2c:9c:d1:9b:c7:7b:f6:d3:
ca:1a:72:0a:d0:e9:b0:61:24:3c:75:7b:53:23:a6:
b6:7d:ea:0a:b3:c5:40:a5:9e:03:b7:10:6e:f7:bc:
b0:db:10:f8:22:3c:19:81:9a:07:f6:ca:f5:cf:6f:
06:2b:5f:0a:de:2f:80:a8:62:ff:0e:7d:7c:a6:e8:
42:59:f3:c7:a0:c3:cc:79:7e:45:39:54:5f:d1:57:
1b:3a:fd:ae:ad:55:a9:32:99:13:69:e2:03:01:34:
7a:f1:57:3b:e3:ac:82:a8:15:12:40:24:cd:e2:af:
5b:bc:ec:80:8a:3c:e7:fb:f4:2a:2d:89:43:f4:0a:
9c:42:08:d4:5f:ba:37:a3:1a:6f:c4:76:01:d2:d2:
64:df:0b:bd:07:66:80:5b:b2:1b:79:e3:4d:9d:70:
d6:be:27:ee:61:6a:0b:4a:67:13:49:5c:61:aa:7b:
68:12:2b:3d:79:c1:14:0d:bc:80:e5:da:c3:c4:bc:
f0:bd:ff:f9:8c:b0:aa:8a:01:e2:6d:5a:41:99:bc:
43:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DD:4F:6C:26:C8:5B:2A:C9:A2:F6:80:A3:8D:70:81:AF:04:3F:74
X509v3 Authority Key Identifier:
keyid:6C:BB:B8:1D:82:30:69:DD:82:4D:8D:8D:82:C8:DB:FB:30:5D:B9:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:15:43:89:4d:40:a3:6c:c3:8f:37:ea:5e:82:43:7f:04:ca:
72:20:18:8e:0f:00:03:c7:b8:b1:b7:93:04:50:62:89:26:fb:
6e:ad:03:73:68:42:69:61:c9:aa:67:ce:00:2f:a5:51:e7:08:
a2:bb:55:0a:3d:85:a5:58:0c:4a:40:bc:f5:e1:32:b5:78:19:
0b:96:2e:fa:28:39:74:f2:57:94:ab:71:b2:9a:7d:98:6e:24:
08:16:53:62:7c:3c:b1:73:31:94:b0:2e:4a:7b:bc:a7:05:34:
ea:97:0f:b9:7d:fc:f0:4b:18:ed:5f:05:c5:3f:dd:1e:b5:03:
3b:7b:30:61:be:5f:1a:02:29:88:14:43:48:4f:99:06:fd:03:
82:13:df:73:d5:ca:8b:21:6f:af:59:28:01:9d:0c:d0:e3:a0:
40:d0:30:08:75:af:39:90:3b:45:7a:c6:5b:bb:dc:8e:bd:9c:
9a:4c:a5:1c:bb:cd:fd:7e:1a:fc:06:f7:f3:a3:c8:87:b1:a4:
62:f6:38:0a:b8:7a:e5:f1:b8:29:df:fe:bf:7b:2e:36:fe:3f:
d6:2a:b4:c9:f1:75:62:f4:4f:36:af:ae:0b:30:90:dd:dd:57:
a3:ee:13:e7:b4:e4:87:53:ac:7a:03:3f:b6:a0:70:e5:92:7a:
99:59:01:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/U3O/gKR1RhB5br78MlhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYmJiODFkODIzMDY5ZGQ4MjRkOGQ4ZDgyYzhkYmZiMzA1
ZGI5OGYwHhcNMjUxMDE5MTUwMTIyWhcNMjUxMDIwMTUwMTIyWjAzMTEwLwYDVQQD
Eyg5MmRkNGY2YzI2Yzg1YjJhYzlhMmY2ODBhMzhkNzA4MWFmMDQzZjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd+rLDTCj8VmwDyITDt6T/RTYKEq
x0kjQ8sm8dE7BVYMWQlzCAqArcLAt7RQYwHLEXW4LJzRm8d79tPKGnIK0OmwYSQ8
dXtTI6a2feoKs8VApZ4DtxBu97yw2xD4IjwZgZoH9sr1z28GK18K3i+AqGL/Dn18
puhCWfPHoMPMeX5FOVRf0VcbOv2urVWpMpkTaeIDATR68Vc746yCqBUSQCTN4q9b
vOyAijzn+/QqLYlD9AqcQgjUX7o3oxpvxHYB0tJk3wu9B2aAW7IbeeNNnXDWvifu
YWoLSmcTSVxhqntoEis9ecEUDbyA5drDxLzwvf/5jLCqigHibVpBmbxDGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLdT2wmyFsqyaL2gKONcIGvBD90MB8GA1UdIwQY
MBaAFGy7uB2CMGndgk2NjYLI2/swXbmPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkx1NEhZSXdhZDJDVFkyTmdzamItekJkdVk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jMjVkYzItZjU0ZC00MTRkLTg3Njkt
OGQ2NWY0ZWU5MWRmLzEvYkx1NEhZSXdhZDJDVFkyTmdzamItekJkdVk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9jMjVkYzItZjU0ZC00MTRkLTg3NjktOGQ2NWY0ZWU5MWRm
LzEvYkx1NEhZSXdhZDJDVFkyTmdzamItekJkdVk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABRVDiU1A
o2zDjzfqXoJDfwTKciAYjg8AA8e4sbeTBFBiiSb7bq0Dc2hCaWHJqmfOAC+lUecI
ortVCj2FpVgMSkC89eEytXgZC5Yu+ig5dPJXlKtxspp9mG4kCBZTYnw8sXMxlLAu
Snu8pwU06pcPuX388EsY7V8FxT/dHrUDO3swYb5fGgIpiBRDSE+ZBv0DghPfc9XK
iyFvr1koAZ0M0OOgQNAwCHWvOZA7RXrGW7vcjr2cmkylHLvN/X4a/Ab386PIh7Gk
YvY4Crh65fG4Kd/+v3suNv4/1iq0yfF1YvRPNq+uCzCQ3d1Xo+4T57Tkh1OsegM/
tqBw5ZJ6mVkBVA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:29:43 2025 by rpki-client