Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
File: Blyf7bW1RPaW7U2vE1sC3ubZevY.mft (raw, json)
Hash identifier: EdRDc56r2PxLzCIVmJ27nvFvtREh8zz/jfXE+8hNTf8=
Subject key identifier: 0D:0B:58:21:95:A6:FF:16:13:EC:74:EF:05:49:6A:45:00:F9:11:0E
Authority key identifier: 06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6
Certificate issuer: /CN=065c9fedb5b544f696ed4daf135b02dee6d97af6
Certificate serial: 019848F7A3F5AFBC6212CDA56C09D92A7BB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 23:00:45 +0000
Manifest this update: Sat 26 Jul 2025 23:00:45 +0000
Manifest next update: Sun 27 Jul 2025 23:00:45 +0000
Files and hashes: 1: Blyf7bW1RPaW7U2vE1sC3ubZevY.crl (hash: KLv9WfjbFjoUHA98ILPAFh4rsajQ4XJxNvfIcuEMby8=)
2: UVnhMz4Jh2elkuvmMPm7Jt9svi8.roa (hash: he6S2b9IPHmcJG3wUgyxY2EilJ7c6oeB4o0eAPgBdLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:a3:f5:af:bc:62:12:cd:a5:6c:09:d9:2a:7b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=065c9fedb5b544f696ed4daf135b02dee6d97af6
Validity
Not Before: Jul 26 23:00:45 2025 GMT
Not After : Jul 27 23:00:45 2025 GMT
Subject: CN=0d0b582195a6ff1613ec74ef05496a4500f9110e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6e:bf:57:9d:c8:6e:ba:10:7c:06:4c:69:21:
47:9e:3b:50:bc:8a:a8:d4:86:66:83:07:3d:43:85:
6a:3d:ac:93:a8:da:26:7b:60:5b:83:c2:b8:5f:74:
61:5a:0d:11:cf:93:a8:fc:88:02:4e:99:e8:7f:2f:
6c:65:96:55:88:17:20:4b:41:7a:0b:0b:9c:ce:02:
5e:e0:b1:56:a1:06:d6:3c:0f:86:b2:99:65:29:cf:
53:68:ee:7d:b1:97:8d:ee:34:7c:d9:9e:0f:9d:49:
01:10:0f:f3:e5:67:b3:10:ed:82:c5:97:cc:3d:7d:
9f:cc:c6:bf:94:31:93:a8:c6:1d:a2:b9:4d:8b:98:
7d:db:f5:69:f1:da:29:9e:4f:d3:ba:4c:ca:26:8f:
45:f5:f2:bc:63:e5:2f:d6:93:0f:f7:f8:2b:e6:b7:
fc:2d:0c:32:29:d7:f0:5a:93:bc:da:68:fc:4d:6a:
3b:5f:c6:5e:bc:b6:62:98:2f:9a:ce:87:87:dc:a1:
c7:bd:b5:d1:63:8b:8c:a3:3a:94:de:ee:ba:79:d3:
1b:3e:ba:ec:1b:79:bf:a7:2a:ae:35:59:39:50:93:
4d:29:7d:84:f0:7a:92:ee:82:7a:9d:a9:4d:4b:6d:
df:95:29:0c:c0:37:c9:12:c0:7a:3e:2e:0f:83:31:
75:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0B:58:21:95:A6:FF:16:13:EC:74:EF:05:49:6A:45:00:F9:11:0E
X509v3 Authority Key Identifier:
keyid:06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:42:14:b3:79:60:bc:8f:4d:09:15:e3:36:a3:95:50:41:3c:
fe:60:3e:88:85:a7:b2:02:41:b1:a7:d8:fc:54:61:5f:84:f4:
f1:9d:1d:8b:11:07:d7:dc:cc:c0:56:0b:2a:e2:85:24:c3:1c:
de:b2:61:5e:28:a3:89:96:b2:fb:d7:e8:5b:cd:a3:c8:e6:f8:
f7:56:ad:4d:10:09:31:bc:70:12:eb:b6:03:bd:69:0e:16:90:
42:fc:48:52:ce:ad:6a:7e:df:4d:99:6b:a6:7b:14:9b:c5:4d:
8a:70:4d:91:33:b7:6c:43:e4:fc:1a:37:51:59:8d:54:6e:ca:
66:20:b0:bc:66:7e:5e:f2:5d:3e:bb:4f:99:07:50:e7:85:9a:
b3:7c:cf:aa:38:09:f3:d8:15:a4:c5:27:77:92:c8:98:9e:59:
ec:38:43:47:2a:fb:ff:63:01:97:eb:cb:75:c1:d3:77:84:b2:
91:4a:5a:e7:2e:88:25:ab:80:ba:ac:75:0a:70:36:f5:c8:bc:
16:5d:3e:d3:4f:b3:22:14:bc:87:ce:66:c6:fa:40:2b:fd:0c:
f1:e1:5a:11:0e:78:1d:8e:a5:a3:5d:52:18:18:53:3b:78:4d:
71:64:3d:b3:c2:7c:dd:21:5b:03:f6:d3:3b:1a:e8:98:be:32:
9b:87:05:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:42:23 2025 by rpki-client