Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
File: blLhBfDoJucV9yzFywMSolNEJLo.mft (raw, json)
Hash identifier: 6ToN+g9MBazVl+W+8cWBZ5ZTLcpRc2WLmlT6mQrzLJg=
Subject key identifier: 59:29:EA:41:3F:3F:0D:42:81:AD:33:47:F7:EF:71:D2:46:03:69:3F
Authority key identifier: 6E:52:E1:05:F0:E8:26:E7:15:F7:2C:C5:CB:03:12:A2:53:44:24:BA
Certificate issuer: /CN=6e52e105f0e826e715f72cc5cb0312a2534424ba
Certificate serial: 0198D73B585958F1C657F4E60EF878ED11E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
Manifest number: 077A
Signing time: Sat 23 Aug 2025 14:00:47 +0000
Manifest this update: Sat 23 Aug 2025 14:00:47 +0000
Manifest next update: Sun 24 Aug 2025 14:00:47 +0000
Files and hashes: 1: blLhBfDoJucV9yzFywMSolNEJLo.crl (hash: lE5wzlUmskCZjCJLgkN+D0yJbVDulY9IO1vRtuGgarA=)
2: u8V9QKBVG0Y86-vjzjyTisw0D_Y.roa (hash: KYGcbVwlMJi9uEEQnPMzkMYGof5+7MNCgFq2TVdNdS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:58:59:58:f1:c6:57:f4:e6:0e:f8:78:ed:11:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e52e105f0e826e715f72cc5cb0312a2534424ba
Validity
Not Before: Aug 23 14:00:47 2025 GMT
Not After : Aug 24 14:00:47 2025 GMT
Subject: CN=5929ea413f3f0d4281ad3347f7ef71d24603693f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fc:98:f7:2c:27:87:f0:1c:e3:64:be:df:f6:
8f:9a:52:89:a6:35:68:2b:ad:7e:4c:d2:5b:b6:a4:
f4:83:e5:15:3b:f0:b9:1b:12:b4:82:99:ab:4c:b7:
20:25:88:82:da:6a:60:c3:68:ae:a6:d9:97:cb:a0:
43:31:9d:c5:65:8e:46:29:4c:e4:c4:a9:d2:be:7c:
b7:b8:44:61:8e:61:f5:e0:cf:4c:18:9c:80:56:b3:
04:2d:8b:b4:3b:9c:d4:33:6c:86:a6:61:37:30:dd:
99:94:8a:ab:67:a4:ef:c6:5a:e0:c5:a2:4b:79:12:
0a:2b:b3:0b:f8:b4:f3:e5:43:b9:e2:cb:e7:02:ef:
da:d8:e7:01:38:24:ea:dd:31:8c:75:d5:15:68:85:
b9:8b:d7:06:0e:fd:36:56:95:a1:d6:5d:d5:10:f9:
47:93:8d:bc:7c:4b:d7:2a:2f:81:58:95:8b:66:61:
ae:81:23:c3:8a:d6:61:66:d4:31:62:72:ea:8c:4e:
8e:8b:68:e5:44:ce:32:86:72:c4:c0:90:f0:28:4f:
43:e8:88:3e:c1:a0:02:e6:8e:1c:c6:81:9d:22:49:
c7:0b:63:04:50:0f:c2:e0:bb:18:f6:81:17:8c:39:
72:a4:01:78:a1:2e:12:2c:40:c8:eb:eb:3a:d7:69:
1b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:29:EA:41:3F:3F:0D:42:81:AD:33:47:F7:EF:71:D2:46:03:69:3F
X509v3 Authority Key Identifier:
keyid:6E:52:E1:05:F0:E8:26:E7:15:F7:2C:C5:CB:03:12:A2:53:44:24:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:64:65:f2:ad:6a:91:5c:d4:e6:b3:2d:10:42:c2:fd:fe:d8:
f4:6b:d2:89:51:f9:be:50:9b:91:d5:db:41:eb:44:27:ce:47:
7e:36:a7:5d:f9:f8:35:62:69:78:0c:4b:8f:57:38:c8:c5:af:
8f:91:c6:ba:ac:34:d9:2b:fc:36:63:3f:39:98:0f:a6:9c:b3:
a1:05:64:66:1f:8f:99:d3:16:9a:6c:1b:bf:3d:c3:2e:0f:b4:
54:fb:c9:88:c2:b5:1b:c8:26:fd:40:14:57:b1:9e:d2:7b:d5:
07:97:d8:ed:b9:99:41:15:5a:ec:ec:2d:24:85:65:09:c1:c5:
11:c7:96:5b:46:59:1d:b7:28:e6:3e:99:78:25:e1:ab:dd:2e:
12:fc:95:25:76:50:fa:15:91:33:23:39:2c:84:e1:aa:db:ee:
9f:c6:66:a9:a7:1d:ef:59:7b:18:00:ef:25:b2:1e:43:e1:80:
f7:21:99:d3:9f:2a:6e:dd:1b:3e:2d:cc:df:be:86:ec:74:30:
67:78:cc:50:a1:e4:aa:d1:3f:d4:f1:a4:1a:ed:db:cb:83:e7:
5f:54:cd:d6:b4:a1:44:f8:07:71:bd:50:23:3a:33:76:8c:a5:
a0:66:29:bd:f4:68:42:6a:ed:51:c1:aa:ea:e8:9f:2b:f8:4a:
84:8d:33:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:46:48 2025 by rpki-client