Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
File: blQs7eU6DFcUWmr_L1gZbwLUoS4.mft (raw, json)
Hash identifier: vyMQ1ycoMU4iRFpYMENx+eKyP1ckqSh5Aa+rZr+yw8c=
Subject key identifier: 35:95:0C:54:49:79:A9:55:F8:39:3B:99:1D:24:93:0E:26:72:24:D4
Authority key identifier: 6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E
Certificate issuer: /CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
Certificate serial: 0199FC8F4E7B3C6D5AFF2DCCC13350C7693E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
Manifest number: 16C1
Signing time: Sun 19 Oct 2025 13:01:14 +0000
Manifest this update: Sun 19 Oct 2025 13:01:14 +0000
Manifest next update: Mon 20 Oct 2025 13:01:14 +0000
Files and hashes: 1: blQs7eU6DFcUWmr_L1gZbwLUoS4.crl (hash: gH+eBw3JFgJ6bntiMHOQ9Fn8CvuFlBLpLSnGCNQIQR8=)
2: pXv8FGbLwxECE7IPZwLe-oIEhlQ.roa (hash: lA0EoJbAgOHytg/Q3yX/rveAnxbQAYlQALMvfLmzZeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:4e:7b:3c:6d:5a:ff:2d:cc:c1:33:50:c7:69:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
Validity
Not Before: Oct 19 13:01:14 2025 GMT
Not After : Oct 20 13:01:14 2025 GMT
Subject: CN=35950c544979a955f8393b991d24930e267224d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c6:5f:64:eb:c8:ff:3a:cb:0a:ee:7a:6f:04:
56:b6:1f:81:c4:4f:2d:37:66:75:ba:97:95:bf:47:
f7:75:e0:89:99:df:6e:84:d4:17:a1:17:3b:36:07:
49:7e:e8:6a:d2:65:53:0c:7a:85:5b:d0:0f:41:6c:
9f:d0:29:c7:f4:17:59:34:7b:1e:8b:77:29:ca:15:
a8:06:15:61:e6:fb:0d:c0:a5:d1:3c:fd:1a:78:a4:
25:2b:00:90:45:4b:f7:77:10:56:d9:09:02:99:00:
28:fa:02:af:8f:09:b2:77:70:b5:23:18:12:73:d0:
25:ca:bc:91:f6:83:43:a2:22:b3:9f:81:e5:b8:9d:
62:86:9d:1c:a7:b6:8a:a9:6f:3e:75:b9:5b:33:ab:
a6:50:3f:22:64:d6:ce:68:e2:b0:17:68:c4:ea:1c:
1f:e2:07:2e:9c:da:f0:2f:0e:fb:97:52:28:1f:c3:
59:5a:9c:a4:9d:d7:e0:3d:f7:58:6e:81:5e:26:9f:
db:68:46:72:84:f5:52:ae:00:b2:50:f4:4f:ba:9c:
e3:41:eb:f2:1a:98:5b:e0:7f:af:3e:45:5a:15:af:
ab:a9:64:82:8c:10:74:5a:ed:13:2e:e5:c4:5b:b1:
6d:fc:35:65:c1:e6:ba:73:e6:c4:46:73:32:0c:08:
bd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:95:0C:54:49:79:A9:55:F8:39:3B:99:1D:24:93:0E:26:72:24:D4
X509v3 Authority Key Identifier:
keyid:6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:8e:e5:16:1d:6b:f9:e1:53:a5:d0:99:a5:13:34:f2:73:db:
a5:7c:34:e4:29:32:c0:62:0d:49:4c:94:da:d9:68:6f:b0:6a:
c9:a4:a6:68:e7:aa:f0:f1:13:38:69:e1:6b:99:99:09:c4:c0:
12:cf:47:71:57:43:00:22:3a:d3:38:fd:4e:0a:7b:87:c9:64:
2b:db:6a:a9:d1:6c:ea:e5:65:28:ee:54:9c:c2:7e:a9:b1:47:
ff:fa:f0:4e:36:5c:ec:40:eb:d5:47:28:66:20:f7:86:6d:0b:
95:44:44:88:67:cd:a3:53:d5:a0:5a:6c:94:2f:fb:9c:87:5e:
fd:19:9b:66:db:e0:93:3a:71:c2:17:f5:f6:9c:80:39:dd:d8:
17:4b:7a:a0:3d:72:c5:bc:48:50:16:bb:8e:cf:df:a2:55:89:
0e:30:1c:12:a7:f9:09:dd:83:37:3b:9d:80:c8:58:9c:74:df:
f7:31:2c:e8:7c:08:fb:98:75:cf:59:f1:d2:01:60:49:9d:0c:
d9:58:b4:96:f8:c3:1b:aa:cb:2b:66:74:53:a0:54:e9:94:6c:
ed:9d:99:90:9a:61:3b:6d:84:1f:f7:48:8b:ef:f1:2c:84:1a:
6d:4c:e0:2d:77:8f:f5:af:2d:ed:05:77:e3:9f:93:17:31:aa:
ce:a9:f5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:24:29 2025 by rpki-client