Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
File: bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft (raw, json)
Hash identifier: 6LzCuRLAl+ls7kvpIVlhXRYijHczYFOIzPlCZsBs5lM=
Subject key identifier: 84:7E:29:1A:0B:3C:60:3C:0B:9F:2D:5D:0C:51:D8:08:5C:C3:51:BC
Authority key identifier: 6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75
Certificate issuer: /CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675
Certificate serial: 0198D583DF662414D435C47702D95E859335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
Manifest number: 01DC
Signing time: Sat 23 Aug 2025 06:00:45 +0000
Manifest this update: Sat 23 Aug 2025 06:00:45 +0000
Manifest next update: Sun 24 Aug 2025 06:00:45 +0000
Files and hashes: 1: MB79B-8QZwUqYrXc2Ibwogq_qLQ.roa (hash: bNBfBbjDpqRStExCWEma6tP6lj9BYj7p2ZAmcoBXfmY=)
2: bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl (hash: aiD8qT7Iocx3R40LTVhdEbNWDXOEf9RJYebhKiGHMEQ=)
3: jf4WdQ24BygRnLqj51WchS5928k.roa (hash: /f6JdSqZIG39wyf+D4unjoQWcyolGzjFS4yjumA6E0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:df:66:24:14:d4:35:c4:77:02:d9:5e:85:93:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675
Validity
Not Before: Aug 23 06:00:45 2025 GMT
Not After : Aug 24 06:00:45 2025 GMT
Subject: CN=847e291a0b3c603c0b9f2d5d0c51d8085cc351bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b4:d0:1b:91:44:51:f2:02:1c:e8:e4:fb:5e:
d4:57:93:36:95:06:d7:71:a4:ea:f5:b2:ce:83:c0:
38:43:7e:4c:ff:98:53:fe:36:07:f7:99:7d:f0:7b:
63:b8:55:b2:cf:54:bd:e0:7d:0e:c7:73:9d:14:f1:
0a:b5:76:20:9a:8f:65:25:10:31:98:3d:0f:c1:8c:
20:e0:72:6b:ea:ed:3e:c3:83:7d:ec:26:ae:80:6d:
72:84:08:fc:e7:99:fc:80:c8:44:33:43:92:23:a7:
0b:1a:e6:3b:2a:49:a8:0a:04:6a:0e:cb:68:54:a4:
7d:fe:44:c1:86:32:a2:1c:be:84:70:ca:63:f5:40:
0c:12:33:ae:83:ee:b8:2c:ee:6b:d2:52:1f:f3:aa:
62:b8:04:db:df:77:5f:5f:d2:ce:3d:54:58:c8:2a:
39:33:27:21:2a:07:98:13:26:19:f7:a8:42:4b:7b:
02:8f:ec:fc:64:34:3f:63:2e:8e:88:d3:74:ac:7b:
9d:d5:d8:30:c0:31:2b:32:e0:70:c7:95:2b:b4:39:
5d:b7:de:5d:40:5b:51:a9:37:b5:fd:2a:0e:f2:fa:
fa:03:e8:40:99:ef:a6:d7:1a:cd:a7:12:e0:63:a0:
95:1c:5b:6a:04:5b:06:4a:5a:64:6c:8b:80:70:9e:
db:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7E:29:1A:0B:3C:60:3C:0B:9F:2D:5D:0C:51:D8:08:5C:C3:51:BC
X509v3 Authority Key Identifier:
keyid:6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c9:45:1b:4e:3e:17:a8:1d:9d:81:cb:52:c2:00:d9:c7:dc:
73:fd:c6:00:c9:89:d3:88:7c:99:a9:21:2a:94:6a:7d:29:9b:
ae:6a:49:cd:2b:ed:bd:e0:6e:8a:2b:97:8b:46:75:8f:04:28:
74:79:3b:5e:0b:b4:11:47:d8:39:58:6b:b1:33:f9:b8:89:c6:
44:4c:7b:96:da:82:42:e2:68:5d:4c:4c:5e:2a:aa:c8:64:35:
1a:04:0c:d8:4d:f7:83:4e:08:57:b6:be:cc:64:91:c8:7d:73:
1a:b4:8a:8c:ad:77:40:e3:c9:74:47:31:7b:8b:5d:e1:5b:f2:
49:6f:70:64:40:d5:fc:fe:1a:0e:f6:07:79:58:0f:d0:89:9c:
d9:3e:e4:0b:77:e7:d5:53:eb:d2:67:1f:8e:7e:91:e1:2e:6c:
df:b2:3e:10:54:df:c2:60:80:42:d0:2f:25:50:7f:4c:b8:5d:
0d:df:a5:5d:c3:e1:c9:ae:f5:de:ff:e6:db:91:85:d9:b7:5d:
0b:96:0c:24:ca:42:99:4d:0c:5d:0c:48:ac:cf:65:e7:e4:cc:
20:1b:3a:b2:c8:03:fd:22:cd:0d:9e:c5:6e:2a:34:65:f7:f8:
ec:5b:39:8a:44:21:22:4c:2e:d8:31:19:98:c6:7d:dd:bc:3b:
d8:2d:9c:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg99mJBTUNcR3AtlehZM1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMTk1YjliZDQ3MDAxZWFiNTBmZGJhMWRlMGQyZDNmNDUy
N2Y2NzUwHhcNMjUwODIzMDYwMDQ1WhcNMjUwODI0MDYwMDQ1WjAzMTEwLwYDVQQD
Eyg4NDdlMjkxYTBiM2M2MDNjMGI5ZjJkNWQwYzUxZDgwODVjYzM1MWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprTQG5FEUfICHOjk+17UV5M2lQbX
caTq9bLOg8A4Q35M/5hT/jYH95l98HtjuFWyz1S94H0Ox3OdFPEKtXYgmo9lJRAx
mD0PwYwg4HJr6u0+w4N97CaugG1yhAj855n8gMhEM0OSI6cLGuY7KkmoCgRqDsto
VKR9/kTBhjKiHL6EcMpj9UAMEjOug+64LO5r0lIf86piuATb33dfX9LOPVRYyCo5
MychKgeYEyYZ96hCS3sCj+z8ZDQ/Yy6OiNN0rHud1dgwwDErMuBwx5UrtDldt95d
QFtRqTe1/SoO8vr6A+hAme+m1xrNpxLgY6CVHFtqBFsGSlpkbIuAcJ7b5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIR+KRoLPGA8C58tXQxR2Ahcw1G8MB8GA1UdIwQY
MBaAFGwZW5vUcAHqtQ/bod4NLT9FJ/Z1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkJsYm05UndBZXExRDl1aDNnMHRQMFVuOW5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8wMTBkM2QtMWJhOC00YTk2LTgyMTIt
OTRhYzhhZjFiZmNmLzEvYkJsYm05UndBZXExRDl1aDNnMHRQMFVuOW5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8wMTBkM2QtMWJhOC00YTk2LTgyMTItOTRhYzhhZjFiZmNm
LzEvYkJsYm05UndBZXExRDl1aDNnMHRQMFVuOW5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF8lFG04+
F6gdnYHLUsIA2cfcc/3GAMmJ04h8makhKpRqfSmbrmpJzSvtveBuiiuXi0Z1jwQo
dHk7Xgu0EUfYOVhrsTP5uInGREx7ltqCQuJoXUxMXiqqyGQ1GgQM2E33g04IV7a+
zGSRyH1zGrSKjK13QOPJdEcxe4td4VvySW9wZEDV/P4aDvYHeVgP0Imc2T7kC3fn
1VPr0mcfjn6R4S5s37I+EFTfwmCAQtAvJVB/TLhdDd+lXcPhya713v/m25GF2bdd
C5YMJMpCmU0MXQxIrM9l5+TMIBs6ssgD/SLNDZ7Fbio0Zff47Fs5ikQhIkwu2DEZ
mMZ93bw72C2c9g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:08 2025 by rpki-client