Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
File: _Blb1oKo6aEk1YU9xekIquczm64.mft (raw, json)
Hash identifier: 4k6hsZ+O7KoMirKQCh9Ir6ISe0phWzHe+BkbQIktdB0=
Subject key identifier: 7F:8E:73:6A:15:A1:2C:ED:42:24:52:89:DB:62:65:6C:5E:29:92:B2
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial: 0198D5838520AC22D61591E45587C2DDB0A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
Manifest number: 13F0
Signing time: Sat 23 Aug 2025 06:00:22 +0000
Manifest this update: Sat 23 Aug 2025 06:00:22 +0000
Manifest next update: Sun 24 Aug 2025 06:00:22 +0000
Files and hashes: 1: C0o6u4617ldzXCQhJDGF4IWONDQ.roa (hash: oggwBkJK9nhHHHUHaINutEQuhqdlfpUhFtxzmUm75kw=)
2: _Blb1oKo6aEk1YU9xekIquczm64.crl (hash: /MHEhEJk6VJjdX+y3nUXu9IoX0KTpXhZk/r26530kUc=)
3: eFaXAXJtU1k2p2wxUd4r6QNwVqc.roa (hash: RkwbFEsvbm5cD3j9VERr9RV6cFSAdbYRW8TdBaZFLJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:85:20:ac:22:d6:15:91:e4:55:87:c2:dd:b0:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Validity
Not Before: Aug 23 06:00:22 2025 GMT
Not After : Aug 24 06:00:22 2025 GMT
Subject: CN=7f8e736a15a12ced42245289db62656c5e2992b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5d:46:d4:08:8d:d3:ce:26:e9:47:3f:49:a6:
44:e3:87:85:55:6e:ca:d6:db:fd:e0:f3:60:bd:6e:
d4:5a:34:0a:a8:dd:e2:53:b8:bb:22:df:84:c5:39:
28:35:bc:c5:99:24:ee:d9:99:a4:59:e7:75:d0:69:
ae:b6:40:01:33:8a:1c:f3:6d:54:b3:f1:d8:9c:09:
69:a4:31:24:d0:4e:cd:f9:a6:7a:ae:7d:78:9e:e2:
30:87:1b:54:95:66:14:36:ed:16:70:d2:7a:96:43:
28:2b:06:0a:9f:5c:39:de:95:65:74:6e:46:c2:75:
59:a3:8a:d2:04:50:18:3c:37:64:91:fb:41:43:24:
d5:c4:6e:08:2d:81:18:be:4e:a2:92:64:ec:92:d0:
a1:11:ad:8b:26:ed:f6:39:21:a3:2d:c3:24:81:dc:
45:b1:7b:4a:50:5b:fa:1a:56:f1:86:fb:2d:78:22:
ea:92:38:18:50:73:4c:8e:1d:4a:79:63:4a:15:f7:
ae:27:6e:de:61:2e:71:e1:35:10:14:61:b4:42:8e:
4b:4d:f4:1f:16:3e:da:ea:0b:ae:6f:62:ee:27:bf:
b4:05:30:51:b9:18:37:b2:35:0e:57:62:02:7e:3b:
47:8f:5c:c1:7f:47:f9:a7:ce:9b:90:d5:43:7a:70:
3a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8E:73:6A:15:A1:2C:ED:42:24:52:89:DB:62:65:6C:5E:29:92:B2
X509v3 Authority Key Identifier:
keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:55:a4:0f:03:aa:54:0b:89:36:bc:02:fa:f2:ad:26:8d:e4:
67:64:8f:c0:cd:d5:9b:0f:19:bb:11:64:d1:a3:f6:17:a8:c7:
85:d7:3e:8e:c8:0a:9c:6b:d8:4c:44:18:fd:24:fc:f1:82:9b:
97:81:55:31:d0:b1:ba:fd:de:8d:02:38:1b:4b:a5:82:c7:ed:
15:8f:a3:79:2d:97:d7:fd:aa:03:39:36:2b:6c:64:ea:4a:fc:
9f:ab:71:01:ee:e3:2b:d3:14:2a:65:32:09:88:2e:c3:21:53:
f6:65:07:af:a3:0a:2a:c0:41:0d:54:6a:62:fb:2e:7c:63:15:
07:9e:7c:6c:cc:ef:a1:cf:19:08:11:3f:44:a8:45:f0:72:37:
d4:40:c6:67:21:2d:b2:f1:39:5e:6c:a4:88:8e:99:4b:90:0b:
48:50:ad:99:2e:85:9d:fa:75:90:2c:03:5d:04:d2:78:8c:92:
3f:a2:df:a4:22:33:59:46:06:95:39:d6:76:81:4b:13:7a:44:
51:19:cb:48:2e:4c:86:5a:3f:b0:01:dc:66:28:f5:b8:dc:0b:
a0:c7:bb:2b:bf:86:51:18:ef:94:eb:fc:cd:86:d5:9c:24:92:
34:c9:78:cf:75:d7:ea:1d:86:aa:a7:c0:62:99:20:9b:06:27:
2f:fd:be:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:56 2025 by rpki-client