Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
File: bLJy2h2BJrUXGeWjRWiArfqInKM.mft (raw, json)
Hash identifier: HVpFCbpjezfI//euMCvNq8hnOI8xTQF6tISY/KIq0Ro=
Subject key identifier: 7C:4E:E5:86:D8:AB:FC:9C:40:96:8B:CD:9D:CA:42:8A:02:12:BF:46
Authority key identifier: 6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3
Certificate issuer: /CN=6cb272da1d8126b51719e5a3456880adfa889ca3
Certificate serial: 0198D4044D171D69962203D4E2B166C84951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
Manifest number: 15DC
Signing time: Fri 22 Aug 2025 23:01:48 +0000
Manifest this update: Fri 22 Aug 2025 23:01:48 +0000
Manifest next update: Sat 23 Aug 2025 23:01:48 +0000
Files and hashes: 1: bLJy2h2BJrUXGeWjRWiArfqInKM.crl (hash: Kzp5HOvw1JVJS1pcsgx7ZsjtTLTD7HnVB31kWUy96EU=)
2: uOnSDaCjeMs1-L4eA8Ozs6UPSSA.roa (hash: qYSuZ8A4rf2Pqbl96n2xsZCX23fJfZc0cHfaDMSlIAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:4d:17:1d:69:96:22:03:d4:e2:b1:66:c8:49:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb272da1d8126b51719e5a3456880adfa889ca3
Validity
Not Before: Aug 22 23:01:48 2025 GMT
Not After : Aug 23 23:01:48 2025 GMT
Subject: CN=7c4ee586d8abfc9c40968bcd9dca428a0212bf46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7c:5f:bb:6d:63:2e:b3:a9:a9:0c:45:1d:06:
18:a9:6e:41:5c:29:27:8b:0d:53:70:d3:aa:35:dc:
96:b0:70:b2:b1:53:e5:6f:e7:ff:c3:35:a8:14:a7:
25:16:19:63:e3:46:22:46:76:b1:0c:94:c5:6a:3b:
17:10:70:eb:73:26:b8:ae:f2:96:36:0c:c7:e8:24:
92:1a:36:13:6d:15:97:cd:9d:cf:29:e0:70:69:5d:
ed:68:6c:3c:eb:61:8f:04:8c:c2:0f:ee:7c:e6:72:
ea:28:8c:b1:9e:fe:bc:7f:de:ed:01:72:2d:5e:27:
bf:a1:d9:d4:11:cc:38:96:91:80:fb:e7:61:b3:c7:
c8:24:5a:38:40:cc:15:75:72:f4:75:ef:c3:ea:47:
27:3d:3d:9a:b2:49:cd:9d:1d:78:7c:6b:22:d2:f6:
e3:44:59:c6:77:f7:a5:69:23:3c:c3:96:25:23:38:
60:53:85:aa:ec:a4:4a:e7:56:a0:bb:dc:37:44:99:
a9:19:d5:3b:63:10:27:7f:94:b0:9b:47:b2:d3:e7:
62:78:81:43:88:66:7e:78:f6:1f:7e:29:1e:36:cf:
c3:bd:f3:ce:c5:de:d2:ca:ac:02:c5:59:90:8b:f3:
fe:2c:06:83:42:03:81:40:c8:3c:7d:01:c9:6f:c0:
f5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4E:E5:86:D8:AB:FC:9C:40:96:8B:CD:9D:CA:42:8A:02:12:BF:46
X509v3 Authority Key Identifier:
keyid:6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:87:ce:36:50:6e:d1:13:3d:14:38:e2:2b:ce:7d:3d:86:e4:
87:cc:ea:35:c9:e2:35:57:c3:c7:15:db:68:66:65:13:2e:f3:
b3:8b:92:a0:d3:ab:f2:51:f5:71:83:ef:94:6a:69:83:74:bd:
e5:ac:2c:02:50:d1:03:14:6f:a0:fc:36:fa:55:08:06:6b:09:
05:d5:49:01:23:56:6d:22:43:64:5d:20:92:0d:26:60:fa:ce:
3a:a4:40:f7:1f:ad:9c:97:07:d0:28:4c:23:e5:43:7c:0f:45:
3c:54:94:4b:74:f3:b6:36:a4:bd:32:b1:03:c1:c2:67:59:4a:
6b:91:f8:7e:94:45:7b:81:db:13:4f:34:a2:1f:1d:72:cf:b2:
32:e2:c8:35:a4:52:1e:7a:88:b6:b4:93:59:d3:e3:0a:38:dc:
42:b1:73:dc:14:bf:5e:72:90:91:23:b7:44:76:7d:e9:8f:1f:
8e:4d:6e:fe:fb:c0:9a:5f:99:65:7d:13:eb:a0:14:e9:ae:85:
3d:00:9c:d4:76:37:b1:06:86:f9:cd:35:b5:bc:0d:a4:f1:6e:
26:7f:19:4c:2f:0c:ce:f8:b4:59:ea:78:79:c5:d1:48:5a:20:
db:d0:06:46:7b:74:61:81:c7:44:d7:a0:60:a8:c5:45:f9:59:
a0:8c:81:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:41 2025 by rpki-client