Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
File: _Blb1oKo6aEk1YU9xekIquczm64.mft (raw, json)
Hash identifier: uxHaswaXBnHY+EVmaWrxOlhAYLcVlwkWnP445UOqCvA=
Subject key identifier: 72:1A:E0:86:BB:A4:FA:4B:49:61:0A:48:31:01:2D:FE:3F:39:66:BF
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial: 019827B50E2A5B95D0045735A7DDCB96121C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
Manifest number: 1396
Signing time: Sun 20 Jul 2025 12:00:33 +0000
Manifest this update: Sun 20 Jul 2025 12:00:33 +0000
Manifest next update: Mon 21 Jul 2025 12:00:33 +0000
Files and hashes: 1: C0o6u4617ldzXCQhJDGF4IWONDQ.roa (hash: oggwBkJK9nhHHHUHaINutEQuhqdlfpUhFtxzmUm75kw=)
2: _Blb1oKo6aEk1YU9xekIquczm64.crl (hash: taxegqxjNsS22mx8RtYYI2cXxfR9xK1cbpBjzndGqWs=)
3: eFaXAXJtU1k2p2wxUd4r6QNwVqc.roa (hash: RkwbFEsvbm5cD3j9VERr9RV6cFSAdbYRW8TdBaZFLJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:b5:0e:2a:5b:95:d0:04:57:35:a7:dd:cb:96:12:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Validity
Not Before: Jul 20 12:00:33 2025 GMT
Not After : Jul 21 12:00:33 2025 GMT
Subject: CN=721ae086bba4fa4b49610a4831012dfe3f3966bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9f:a2:81:f2:1b:9b:7a:47:d3:6b:09:e9:95:
7b:62:9e:71:61:16:9d:3a:d0:a7:e6:76:24:6a:07:
0c:c4:b8:49:e6:8e:7b:95:40:d8:5d:69:36:db:f6:
47:7e:89:56:f3:39:93:c0:bf:75:51:07:b5:5a:88:
8b:3f:0f:f8:7c:fe:57:2b:1e:17:87:b0:23:b3:04:
d4:88:37:8b:e4:47:99:36:86:ce:4d:ae:87:22:fd:
5b:f4:25:b8:b3:9c:b9:8c:e1:94:29:43:96:c4:34:
37:bb:83:a8:52:a7:85:59:64:25:e4:83:ed:2a:7c:
09:1c:71:eb:d7:99:36:e7:61:da:47:4e:8b:c8:62:
11:c5:87:0d:3c:ca:3a:a7:f2:73:bd:cc:65:67:b3:
8e:0f:a3:bd:75:05:81:06:20:19:67:4a:18:e8:9d:
73:62:26:94:9f:28:1e:a7:e9:48:e3:b3:c9:83:3f:
8a:f7:ee:7e:55:4b:ec:d8:f9:e2:0c:a2:a7:11:63:
b6:95:cc:12:15:3f:24:78:d4:c3:64:53:4e:7f:df:
58:23:fc:89:51:1b:66:16:73:f0:fb:84:d4:6c:5b:
7b:d1:40:19:72:c8:9e:c3:7e:64:51:33:01:47:f4:
c8:4a:03:b2:6b:24:7d:5d:05:3a:0d:86:44:e4:58:
39:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1A:E0:86:BB:A4:FA:4B:49:61:0A:48:31:01:2D:FE:3F:39:66:BF
X509v3 Authority Key Identifier:
keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:51:90:48:9b:56:a2:7d:b8:ff:97:5c:7c:d0:48:37:4e:3f:
05:1c:40:2f:4f:24:5d:64:24:df:37:84:9c:db:75:82:42:c7:
96:bc:60:50:f1:1b:28:ff:d9:2f:b2:00:9e:f0:b3:89:8c:b5:
8e:0e:ec:87:61:75:54:bc:cb:14:db:5d:71:70:ea:17:eb:4c:
29:32:63:22:3c:ce:e7:3b:e8:9d:15:83:84:b0:8c:ac:9b:24:
23:5a:76:98:2c:f2:e3:28:d4:73:93:72:06:96:1b:b4:c3:91:
c3:05:ca:66:8d:86:a6:3d:ae:fc:4b:20:be:0e:23:fb:3f:e2:
91:4b:33:fe:0a:d0:27:95:81:c3:f8:10:21:e4:96:f1:ec:54:
27:20:d4:dc:79:8e:10:9a:de:c8:55:ef:cb:a9:34:aa:7e:15:
56:d0:91:57:27:ac:b2:a0:18:77:7d:de:3c:bb:8b:ff:a6:27:
b2:91:8b:59:ff:60:95:e0:0b:53:6b:81:8f:8b:eb:27:aa:70:
7c:08:a3:fb:5e:bc:7a:84:7b:b7:a3:81:41:42:b1:19:f0:13:
72:5c:17:ad:f5:94:d6:9b:23:78:ed:fd:74:37:50:79:ed:39:
16:9a:dc:c0:06:b6:b2:2c:cf:e5:9a:89:a6:21:3b:7f:77:1a:
10:69:94:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:11:03 2025 by rpki-client