Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
File: _Blb1oKo6aEk1YU9xekIquczm64.mft (raw, json)
Hash identifier: Xx6NK92sbsegyd9jaPzmE1bVv9RmEgUXrJYf2R+Po1A=
Subject key identifier: F8:32:9B:57:B5:86:8A:3B:2B:E6:47:26:8B:B0:49:B8:DD:B2:A7:AD
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial: 0199FB0EE5DF002BB1DFF758EAD04E8BBF3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
Manifest number: 1488
Signing time: Sun 19 Oct 2025 06:01:21 +0000
Manifest this update: Sun 19 Oct 2025 06:01:21 +0000
Manifest next update: Mon 20 Oct 2025 06:01:21 +0000
Files and hashes: 1: C0o6u4617ldzXCQhJDGF4IWONDQ.roa (hash: oggwBkJK9nhHHHUHaINutEQuhqdlfpUhFtxzmUm75kw=)
2: _Blb1oKo6aEk1YU9xekIquczm64.crl (hash: KoBO8hXQUjWgeuYRu9nPjpo9ThbKf0+G107FFpGiPCo=)
3: eFaXAXJtU1k2p2wxUd4r6QNwVqc.roa (hash: RkwbFEsvbm5cD3j9VERr9RV6cFSAdbYRW8TdBaZFLJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:e5:df:00:2b:b1:df:f7:58:ea:d0:4e:8b:bf:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Validity
Not Before: Oct 19 06:01:21 2025 GMT
Not After : Oct 20 06:01:21 2025 GMT
Subject: CN=f8329b57b5868a3b2be647268bb049b8ddb2a7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4b:b9:98:1f:db:a2:d2:c2:ed:df:48:d6:95:
c6:7d:eb:4f:69:84:2f:9d:84:a1:bb:58:e5:1c:62:
14:d7:e9:9e:a9:cb:31:42:88:d2:d7:8c:91:cf:8f:
38:d6:44:64:84:59:7c:46:70:a2:ad:9f:4b:b7:3a:
0c:39:93:80:ea:7e:17:47:92:a4:66:30:39:ce:de:
fc:a9:40:23:41:25:07:ba:13:d9:01:8d:37:81:be:
61:99:e9:f6:1a:7d:10:60:10:a0:e3:2d:64:60:a8:
b1:32:98:1c:02:0e:52:90:5b:3f:31:c0:a5:6b:f7:
d7:4e:99:20:ea:9b:df:e6:74:31:67:e1:9c:0b:7a:
97:11:5b:db:aa:be:62:b7:b9:86:94:17:a4:e1:bf:
a1:3b:e9:70:f7:ec:63:86:98:85:b2:f2:71:7e:41:
d8:a5:12:d2:7c:b9:6b:b4:2a:35:72:df:6d:4d:2b:
c7:0a:c9:a7:d8:cd:7e:22:20:2b:2f:ba:22:89:0a:
cd:8c:25:46:d1:47:83:1b:af:8f:de:ff:bd:3f:dc:
c2:88:10:fe:f4:4e:d0:89:82:8f:65:95:3f:31:fe:
d8:a9:57:a8:02:61:f0:c9:74:e3:38:9a:5c:1e:ae:
04:05:3a:0b:58:f3:95:a9:8f:18:ec:73:1f:73:51:
25:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:32:9B:57:B5:86:8A:3B:2B:E6:47:26:8B:B0:49:B8:DD:B2:A7:AD
X509v3 Authority Key Identifier:
keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a4:48:15:82:64:d9:bd:6d:5f:c8:45:6d:23:47:6c:3c:1a:
9b:74:15:96:6f:6c:1e:74:b4:ba:90:ef:2a:d1:a4:b5:11:4f:
0f:55:7e:a1:f2:86:6a:a5:49:e6:b6:94:62:68:a5:c3:82:5d:
49:f2:7d:71:ed:5e:d7:c4:93:c5:00:b0:de:c5:32:ee:95:20:
27:12:a6:dc:44:4c:4b:12:03:2f:7f:44:6b:42:14:80:8c:fb:
29:f6:95:d5:12:99:7e:80:8e:75:c4:f0:05:0f:9d:75:63:ea:
57:fd:36:b1:e2:74:af:6d:d9:dd:70:66:a0:89:3c:95:bc:61:
3e:45:2a:e3:7a:9f:17:cf:fd:09:46:f0:c2:5c:ba:12:ec:08:
b3:8d:a0:af:c0:2f:a7:f6:32:a6:2e:db:71:42:a1:26:2a:fb:
63:60:36:c6:b8:02:a0:b9:23:59:95:57:e7:86:2f:2a:f9:86:
da:06:bc:f1:07:2c:32:06:e4:b6:e8:72:53:6d:51:db:5c:27:
b5:47:e2:81:87:ed:8e:89:da:c8:10:94:a3:30:35:5b:82:60:
94:9c:78:46:02:1a:f9:69:c5:36:42:83:43:e3:1e:d3:2f:17:
5c:77:60:87:85:b5:ff:ce:2c:5c:35:bd:bd:d0:f0:c2:0b:5d:
d9:42:45:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7DuXfACux3/dY6tBOi786MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMTk1YmQ2ODJhOGU5YTEyNGQ1ODUzZGM1ZTkwOGFhZTcz
MzliYWUwHhcNMjUxMDE5MDYwMTIxWhcNMjUxMDIwMDYwMTIxWjAzMTEwLwYDVQQD
EyhmODMyOWI1N2I1ODY4YTNiMmJlNjQ3MjY4YmIwNDliOGRkYjJhN2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUu5mB/botLC7d9I1pXGfetPaYQv
nYShu1jlHGIU1+meqcsxQojS14yRz4841kRkhFl8RnCirZ9LtzoMOZOA6n4XR5Kk
ZjA5zt78qUAjQSUHuhPZAY03gb5hmen2Gn0QYBCg4y1kYKixMpgcAg5SkFs/McCl
a/fXTpkg6pvf5nQxZ+GcC3qXEVvbqr5it7mGlBek4b+hO+lw9+xjhpiFsvJxfkHY
pRLSfLlrtCo1ct9tTSvHCsmn2M1+IiArL7oiiQrNjCVG0UeDG6+P3v+9P9zCiBD+
9E7QiYKPZZU/Mf7YqVeoAmHwyXTjOJpcHq4EBToLWPOVqY8Y7HMfc1ElswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPgym1e1hoo7K+ZHJouwSbjdsqetMB8GA1UdIwQY
MBaAFPwZW9aCqOmhJNWFPcXpCKrnM5uuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0JsYjFvS282YUVrMVlVOXhla0lxdWN6bTY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9kYjkxMmYtYmY2ZC00ZjI0LTk2YWUt
Y2M3YjI4OTkwYjgxLzEvX0JsYjFvS282YUVrMVlVOXhla0lxdWN6bTY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9kYjkxMmYtYmY2ZC00ZjI0LTk2YWUtY2M3YjI4OTkwYjgx
LzEvX0JsYjFvS282YUVrMVlVOXhla0lxdWN6bTY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPqRIFYJk
2b1tX8hFbSNHbDwam3QVlm9sHnS0upDvKtGktRFPD1V+ofKGaqVJ5raUYmilw4Jd
SfJ9ce1e18STxQCw3sUy7pUgJxKm3ERMSxIDL39Ea0IUgIz7KfaV1RKZfoCOdcTw
BQ+ddWPqV/02seJ0r23Z3XBmoIk8lbxhPkUq43qfF8/9CUbwwly6EuwIs42gr8Av
p/Yypi7bcUKhJir7Y2A2xrgCoLkjWZVX54YvKvmG2ga88QcsMgbktuhyU21R21wn
tUfigYftjonayBCUozA1W4JglJx4RgIa+WnFNkKDQ+Me0y8XXHdgh4W1/84sXDW9
vdDwwgtd2UJF+w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:14 2025 by rpki-client