Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
File: BlpHDbq5wcM08PhfQXzRqkJenxM.mft (raw, json)
Hash identifier: HdLwZxnrsvZZ90h087mVv/BOSqR/oCTCMJ4actHHO84=
Subject key identifier: DD:D2:12:67:87:A1:A9:E0:82:3D:DE:91:05:14:25:04:FA:70:13:AC
Authority key identifier: 06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13
Certificate issuer: /CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13
Certificate serial: 0199FB7C963DF3BAF0D7F354F0E7C12479C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
Manifest number: 05EB
Signing time: Sun 19 Oct 2025 08:01:10 +0000
Manifest this update: Sun 19 Oct 2025 08:01:10 +0000
Manifest next update: Mon 20 Oct 2025 08:01:10 +0000
Files and hashes: 1: BlpHDbq5wcM08PhfQXzRqkJenxM.crl (hash: AFW7lJQ1Xw2mWoCgf6D9u6DRTi2TFHQ9hD5nTNsYJHI=)
2: riKZEG-JM0WQarPYpauDaEJJnfw.roa (hash: LQZ0TkZ5ipH4SRJe2Fiu7ctfwjxOT3UFQOvQA4Mual8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:96:3d:f3:ba:f0:d7:f3:54:f0:e7:c1:24:79:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13
Validity
Not Before: Oct 19 08:01:10 2025 GMT
Not After : Oct 20 08:01:10 2025 GMT
Subject: CN=ddd2126787a1a9e0823dde9105142504fa7013ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:37:20:d5:30:4f:c3:64:a7:1a:57:71:f3:75:
ac:9f:1a:d4:a8:f9:34:7e:3b:89:c3:80:5a:2c:54:
54:7b:bd:e7:5c:a4:10:95:b3:81:75:22:25:d0:88:
c5:5b:fb:c4:3b:78:55:11:4c:e5:2d:58:4c:4b:1a:
fa:61:d7:8d:a9:b3:ca:e9:a8:69:4f:4a:7f:64:11:
d4:b5:e7:89:a1:d6:89:b1:0a:3f:dd:6c:42:f7:99:
a4:8c:35:f8:02:3d:3c:8d:52:51:dc:28:59:e0:0c:
bb:5d:bb:18:e7:bf:72:7e:4f:92:3d:e0:79:78:65:
2c:df:16:73:cd:3c:87:88:e2:d9:98:dd:89:2e:b8:
cd:9f:82:4f:0b:80:f5:0d:38:cb:f2:29:61:7d:85:
4f:11:d2:eb:08:3b:9a:66:46:b0:b4:dd:ec:18:62:
28:37:99:a9:53:32:37:90:f7:fd:77:b1:7a:c3:06:
27:e3:13:67:9c:10:eb:27:e1:59:f8:31:bb:d9:2e:
cd:48:0f:b7:0a:ff:8b:1a:a4:a2:c6:35:5f:84:b7:
6e:f9:18:2e:74:74:01:22:05:3f:37:12:4a:df:ad:
47:8b:63:60:88:a6:fa:de:df:e0:81:a5:a2:0b:0e:
67:fa:48:87:06:a8:8c:86:ae:bc:dc:79:75:44:62:
3e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D2:12:67:87:A1:A9:E0:82:3D:DE:91:05:14:25:04:FA:70:13:AC
X509v3 Authority Key Identifier:
keyid:06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:5e:19:9d:18:06:48:ee:b4:0c:6b:66:2c:88:06:a3:bf:72:
a6:9f:76:b7:b5:9e:50:08:9d:af:5b:47:a8:c1:a3:f3:75:d7:
d9:a9:74:3c:19:d3:5f:ab:bd:ff:47:58:be:42:80:79:ad:e1:
13:25:47:a0:bd:81:b1:ea:6f:72:ce:23:28:7d:22:8d:32:86:
a4:0c:ad:c0:4e:42:04:22:ad:f8:d4:0f:71:09:5d:27:ad:53:
ce:d4:7d:11:f6:4c:31:9f:36:fa:83:9c:27:fb:cd:2d:6f:8f:
6d:b4:f8:61:2a:6b:4d:fa:f7:be:aa:f1:5b:7c:7c:60:e8:84:
ac:c0:d0:8a:4c:68:2d:d8:58:15:98:6b:af:52:d1:1c:1b:fb:
df:f4:28:df:6b:23:6a:e2:67:be:6b:a0:e3:84:78:40:4b:71:
28:20:a8:b0:bd:7f:5a:49:19:33:1c:50:27:d1:9f:00:98:7d:
de:32:0c:bb:f8:2b:2c:40:d5:a0:66:64:a5:39:f8:24:74:97:
5c:96:4c:ad:e6:ee:44:a6:a9:0b:29:05:5c:dd:50:f1:6a:16:
3f:dc:3b:9d:2c:df:49:61:47:d7:a9:01:3f:94:a6:83:41:e2:
76:28:7f:55:fe:b9:e0:56:de:23:99:90:4d:f8:37:50:50:d1:
cd:56:c4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:17 2025 by rpki-client