Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
File: _Blb1oKo6aEk1YU9xekIquczm64.mft (raw, json)
Hash identifier: 6iFGCJAVO3uRcnXbCUq5CFNV6V9ylnkjfAq4TFqZnVc=
Subject key identifier: 3A:D7:09:DF:7A:71:90:82:30:DE:D6:FF:9E:01:6B:D2:AE:1C:1A:3C
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial: 0197B7B307E99CC4443877217B1D6BE61220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
Manifest number: 135C
Signing time: Sat 28 Jun 2025 18:00:52 +0000
Manifest this update: Sat 28 Jun 2025 18:00:52 +0000
Manifest next update: Sun 29 Jun 2025 18:00:52 +0000
Files and hashes: 1: C0o6u4617ldzXCQhJDGF4IWONDQ.roa (hash: oggwBkJK9nhHHHUHaINutEQuhqdlfpUhFtxzmUm75kw=)
2: _Blb1oKo6aEk1YU9xekIquczm64.crl (hash: ud2DFgdttm13Xp1bNhOyLoieI8afknAjO6ItibRonJs=)
3: eFaXAXJtU1k2p2wxUd4r6QNwVqc.roa (hash: RkwbFEsvbm5cD3j9VERr9RV6cFSAdbYRW8TdBaZFLJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:07:e9:9c:c4:44:38:77:21:7b:1d:6b:e6:12:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Validity
Not Before: Jun 28 18:00:52 2025 GMT
Not After : Jun 29 18:00:52 2025 GMT
Subject: CN=3ad709df7a71908230ded6ff9e016bd2ae1c1a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d9:2b:6b:50:f3:8a:ff:d9:cf:9f:10:ce:cb:
84:d6:68:17:7f:65:67:98:5b:6a:eb:52:ce:83:dd:
23:43:d0:56:f5:c2:7a:05:24:35:58:92:40:e0:4c:
41:1b:44:7a:f6:58:91:14:97:7a:c2:70:31:87:da:
66:61:cf:06:32:cc:12:7b:dc:92:00:d2:70:d2:7a:
36:11:dc:79:d5:ce:94:94:20:46:97:1e:67:7d:d0:
23:c5:bc:75:bb:41:4a:ac:db:1b:0d:e3:87:1d:e3:
cf:53:a9:fb:2b:bb:52:f6:26:3a:e4:86:ee:f1:8b:
90:97:8e:4b:db:27:b6:be:b6:3b:34:8a:b8:97:95:
67:0e:79:70:4c:a3:4e:c5:a5:4e:96:cb:9d:a6:96:
0c:07:4d:fe:7f:a6:a9:e3:9c:8e:5f:c8:86:d0:b1:
42:00:4f:c3:9a:79:a2:7b:30:cc:43:57:9d:fb:0e:
30:45:41:59:b9:52:4e:76:a9:71:63:e5:3b:96:02:
6a:e1:d8:85:27:9e:8a:79:f2:5f:7c:27:42:25:3c:
2f:ab:69:c0:c5:bd:bd:b2:a5:9b:9f:78:e7:bb:ab:
8a:d7:1c:2c:bc:6b:90:d1:e6:50:4c:92:35:bd:0d:
5c:7e:58:90:b9:1b:cb:f5:b7:a6:52:29:b2:dc:63:
06:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D7:09:DF:7A:71:90:82:30:DE:D6:FF:9E:01:6B:D2:AE:1C:1A:3C
X509v3 Authority Key Identifier:
keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:73:f7:eb:2e:f4:4d:de:a9:c8:5a:ee:87:5c:3d:3d:66:26:
7c:64:e5:79:82:22:d5:9d:f0:38:87:18:53:25:c9:0b:2e:70:
1c:2d:c4:0e:15:31:69:79:31:04:38:d5:0e:79:0f:12:5b:e5:
9e:70:88:48:26:f0:a6:53:2d:54:04:68:ac:da:e5:4f:47:12:
05:9c:83:4e:02:02:b6:80:d1:b1:74:50:cf:e3:b4:6b:48:9a:
6b:c9:bb:81:c4:c0:aa:7b:f7:54:91:a7:11:e6:ee:15:63:35:
03:74:ab:c2:8f:03:3e:3b:60:cf:86:b0:e4:9a:53:cf:b0:fd:
50:55:b6:30:b2:12:c3:9c:a9:3a:ea:25:a9:ce:44:c8:4d:45:
a2:50:f7:9a:e8:5a:42:34:60:d3:af:92:f0:b4:c7:6f:0c:2e:
bf:0d:2e:1b:fc:3a:26:4f:92:5b:51:3f:ac:19:83:b8:6d:28:
b4:d6:ad:f0:21:80:6f:a5:84:c3:12:d6:c1:b6:6a:dd:cb:96:
94:3c:71:2a:94:04:89:f2:01:48:a5:2f:3e:2d:2f:6a:6c:87:
c0:44:e0:72:92:03:f3:46:c2:2f:ba:74:97:c1:2b:73:1b:66:
f0:e0:95:e5:94:f9:59:1e:bc:6d:11:11:61:50:4d:87:f3:fc:
31:7f:ba:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:07:31 2025 by rpki-client