
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
File: BLw664svC0huXIwMec6djWixj5Y.mft (raw, json)
Hash identifier: knFj8Mj2dgFEsEeh2BXyxnCWqkkgtjmZXHCuRgQbS/w=
Subject key identifier: ED:D8:48:E0:56:13:7C:24:5D:22:9D:95:D2:E6:6E:1D:60:49:07:94
Authority key identifier: 04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
Certificate issuer: /CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Certificate serial: 0199FC213F2C3EE12CD3E5B714808F7F5E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
Manifest number: 068D
Signing time: Sun 19 Oct 2025 11:01:01 +0000
Manifest this update: Sun 19 Oct 2025 11:01:01 +0000
Manifest next update: Mon 20 Oct 2025 11:01:01 +0000
Files and hashes: 1: BLw664svC0huXIwMec6djWixj5Y.crl (hash: oVk1c8dqslEs6Ua4P9We5Fw/5VEY73wrrRneZbGzdsQ=)
2: RLDEvA5lT3OJsuLbbmV0pyamz6M.roa (hash: 08l04RNVeM6otYs3DB4mk2Ka+Bd48a32zNdlW+piPQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:3f:2c:3e:e1:2c:d3:e5:b7:14:80:8f:7f:5e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Validity
Not Before: Oct 19 11:01:01 2025 GMT
Not After : Oct 20 11:01:01 2025 GMT
Subject: CN=edd848e056137c245d229d95d2e66e1d60490794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7a:d0:4c:45:56:24:12:1e:d2:68:c8:0f:4b:
b3:63:f7:9f:3b:2d:cc:33:e4:0e:95:de:f1:71:a9:
e3:60:80:26:a5:33:e5:d9:b4:d4:53:7e:59:31:5b:
85:5a:b4:ce:9f:ca:eb:d5:46:10:f1:da:a1:69:ee:
45:bd:c5:de:ef:46:3d:70:cd:ad:44:b2:bf:38:a2:
a8:4d:48:57:56:cc:35:0b:71:05:1e:6f:e8:75:2d:
91:23:e8:d1:b5:f1:cd:f5:e0:39:f8:99:f9:a8:9c:
25:88:79:7a:b0:f8:a6:6d:7a:57:2f:fd:ae:5f:07:
8b:53:50:b9:b7:f1:49:f6:2e:55:5a:ca:6c:fe:f1:
8b:4f:2f:27:79:8d:3d:d0:bd:03:bd:ec:14:a7:c9:
82:04:3c:74:de:1d:5f:8e:3e:b5:9e:7e:da:18:07:
32:70:fb:c9:d1:36:b8:72:bd:1a:4d:40:84:56:9a:
2f:fc:7d:fd:84:fd:31:4e:68:28:12:c9:fd:5f:bd:
3d:0c:79:f0:29:e4:58:6c:dc:18:11:0e:fd:89:2b:
0e:ba:d7:59:6d:67:15:a3:34:5c:5a:2a:08:b7:bf:
83:42:d2:3a:ca:a4:33:d9:92:92:52:54:78:25:1c:
c8:b5:b6:a0:4f:3f:0b:75:87:17:77:c8:fd:b0:62:
23:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D8:48:E0:56:13:7C:24:5D:22:9D:95:D2:E6:6E:1D:60:49:07:94
X509v3 Authority Key Identifier:
keyid:04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:b2:ce:5b:60:eb:22:47:52:e4:c5:2d:31:f9:92:5e:a2:6f:
3d:19:70:d4:eb:a8:0a:e7:8f:37:2b:ce:88:27:ab:44:a8:fa:
c4:c2:f9:ed:59:16:f8:9f:02:b6:7b:b2:27:30:1a:d0:0c:ff:
d1:da:ab:46:eb:31:6f:6e:3f:9f:ba:c1:2a:1d:2a:22:a2:8e:
af:1c:8b:14:fb:2b:41:d0:f8:cc:fa:68:c8:33:4a:b4:a0:a8:
56:4f:e4:12:e4:e3:35:32:97:f9:a9:45:f1:c7:77:c4:66:32:
85:a1:b6:4d:51:df:36:de:f2:bd:0c:9f:ec:a3:b2:7c:8b:2a:
49:5b:c2:e4:01:e7:cf:d2:0f:18:e0:77:20:c8:b6:a8:97:da:
75:8a:2c:60:04:d0:83:f6:cc:7d:7a:bd:93:54:02:09:37:55:
fa:1e:eb:eb:33:06:87:7b:49:84:e4:55:b1:d2:c6:8a:71:28:
95:1a:fd:10:5e:6f:6e:f0:d4:00:d6:fa:e4:21:a3:69:91:4f:
c5:4a:d8:df:31:ec:e4:34:cf:f6:7a:6e:b1:f0:08:d3:c7:53:
d2:ef:26:98:1c:56:2f:2e:c3:9a:70:7c:fd:54:f0:43:3a:b3:
cf:f0:8c:a7:96:11:53:47:07:43:a6:07:a1:1f:72:44:be:42:
3d:e8:8f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:23 2025 by rpki-client