Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
File: blLhBfDoJucV9yzFywMSolNEJLo.mft (raw, json)
Hash identifier: UvLB4Wg8edn8W5xl9VVclUk6027SCsKLh5TlSJojnRQ=
Subject key identifier: B7:39:99:22:39:9A:78:34:D0:7C:F3:2B:D7:6A:32:BF:4B:1B:AE:12
Authority key identifier: 6E:52:E1:05:F0:E8:26:E7:15:F7:2C:C5:CB:03:12:A2:53:44:24:BA
Certificate issuer: /CN=6e52e105f0e826e715f72cc5cb0312a2534424ba
Certificate serial: 0197B77C7FCB0D6DD5503A51D62B2C53F2A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
Manifest number: 06E5
Signing time: Sat 28 Jun 2025 17:01:18 +0000
Manifest this update: Sat 28 Jun 2025 17:01:18 +0000
Manifest next update: Sun 29 Jun 2025 17:01:18 +0000
Files and hashes: 1: blLhBfDoJucV9yzFywMSolNEJLo.crl (hash: fN1eQTkVic6nh8/lk0D6hI0oOVoUE/kx6/Tgu9nsbOo=)
2: u8V9QKBVG0Y86-vjzjyTisw0D_Y.roa (hash: KYGcbVwlMJi9uEEQnPMzkMYGof5+7MNCgFq2TVdNdS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:7f:cb:0d:6d:d5:50:3a:51:d6:2b:2c:53:f2:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e52e105f0e826e715f72cc5cb0312a2534424ba
Validity
Not Before: Jun 28 17:01:18 2025 GMT
Not After : Jun 29 17:01:18 2025 GMT
Subject: CN=b7399922399a7834d07cf32bd76a32bf4b1bae12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ea:3d:8a:41:4d:4b:b5:5c:19:bb:02:c2:20:
06:8d:b0:e5:70:f4:6e:01:39:1d:01:57:cb:54:da:
74:f4:84:8f:ca:d9:95:ca:af:75:c2:6f:9b:23:96:
96:6c:83:b9:47:87:d5:42:84:0c:f2:08:66:0c:e1:
f0:24:64:8d:2a:c0:16:2d:15:e8:87:b7:04:17:70:
fe:db:3f:e0:5b:d0:9a:42:78:3d:74:2c:ab:a5:b3:
df:33:c3:66:7f:0c:2b:87:4d:86:c9:d3:46:dc:f6:
e4:95:ba:33:47:bc:3f:4a:cb:9e:2f:96:e2:00:c1:
6b:8c:d2:7c:da:0e:27:a4:8a:1c:84:b0:56:ac:57:
06:5a:e2:53:13:f7:1f:1f:43:b9:fb:44:7b:22:72:
a4:ae:9c:74:68:8f:15:95:49:fa:f2:6c:78:91:90:
42:22:1b:fd:d9:15:91:a1:b6:fe:29:a8:eb:85:9b:
1a:38:dd:54:12:43:f3:aa:7d:1f:32:09:87:a8:1f:
99:6f:2b:fa:0c:95:06:d4:9d:ca:96:88:fa:83:df:
db:6d:75:33:8c:cb:10:ea:a6:79:c6:ed:e0:a4:ce:
f0:bc:a8:44:7b:1d:83:71:b3:03:f1:ba:14:28:52:
04:e7:81:b7:45:82:67:39:0c:eb:8e:a4:22:e8:13:
a3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:39:99:22:39:9A:78:34:D0:7C:F3:2B:D7:6A:32:BF:4B:1B:AE:12
X509v3 Authority Key Identifier:
keyid:6E:52:E1:05:F0:E8:26:E7:15:F7:2C:C5:CB:03:12:A2:53:44:24:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:68:05:40:1f:ca:5a:d2:f5:9f:42:15:04:f0:2a:97:61:43:
ec:bd:6a:69:01:0d:d9:4c:24:91:54:50:41:2f:ac:c0:8c:37:
65:24:40:d6:64:6f:a4:2a:7c:ce:7d:d5:88:c8:74:84:19:a0:
12:f3:5f:60:a5:ad:d7:85:b0:48:b9:b6:82:36:9d:8e:2f:2b:
56:3b:de:d1:6c:9b:50:22:65:4a:4f:9c:e5:a2:af:e4:13:fc:
84:9b:25:bc:5a:b5:92:9c:db:8a:a1:17:f4:57:ef:75:b4:f8:
fe:d1:58:a9:74:82:fb:75:62:17:c5:54:7c:fd:1f:c7:db:07:
20:10:44:9b:7e:b3:5c:00:85:7f:32:8f:35:4d:33:b4:d4:13:
f1:32:24:b2:96:80:68:6c:5e:d5:6d:7d:f6:0d:86:b6:6e:4b:
4f:c2:cd:fe:ad:4c:fe:11:30:56:86:4c:54:8c:5c:8d:69:4a:
f4:f8:46:a6:16:09:74:83:c6:3f:e4:c9:2a:e0:c4:c9:f7:ee:
54:a2:f3:ab:3e:d0:3b:3d:33:6b:4b:fb:fb:3c:7c:7d:91:51:
6b:42:4d:c6:39:87:90:b7:04:99:7f:43:d8:d5:ea:02:6e:27:
75:51:71:c5:c4:3b:42:8d:e7:03:c7:7d:0f:c6:6c:74:4a:db:
09:4c:4f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:56:51 2025 by rpki-client