Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.mft
File: BLHnVu2xw70vV2afWCv2qVG4P0g.mft (raw, json)
Hash identifier: ov0sQjJcHMImQqBVGB2ok9jB6i/eA2Twco9SLBkrGUQ=
Subject key identifier: 73:BE:02:B7:7B:25:0C:EA:1C:4E:60:45:4E:FA:18:16:92:EE:2A:5B
Authority key identifier: 04:B1:E7:56:ED:B1:C3:BD:2F:57:66:9F:58:2B:F6:A9:51:B8:3F:48
Certificate issuer: /CN=04b1e756edb1c3bd2f57669f582bf6a951b83f48
Certificate serial: 0198439B99FC2C76E4F74FF1CBC1D13255B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLHnVu2xw70vV2afWCv2qVG4P0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.mft
Manifest number: 15FE
Signing time: Fri 25 Jul 2025 22:02:07 +0000
Manifest this update: Fri 25 Jul 2025 22:02:07 +0000
Manifest next update: Sat 26 Jul 2025 22:02:07 +0000
Files and hashes: 1: BLHnVu2xw70vV2afWCv2qVG4P0g.crl (hash: Qyz6ON24PNmNeT0O3+vAMGYN9WTTRcMgMxoZX7sQwwo=)
2: RK9xACY5XxzSQaeBbJjDwmPGdFw.roa (hash: Z9/aIdSLDIxdeAqdfXn6u/SeZl9dpZ2YPR093LrIQCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/BLHnVu2xw70vV2afWCv2qVG4P0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9b:99:fc:2c:76:e4:f7:4f:f1:cb:c1:d1:32:55:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04b1e756edb1c3bd2f57669f582bf6a951b83f48
Validity
Not Before: Jul 25 22:02:07 2025 GMT
Not After : Jul 26 22:02:07 2025 GMT
Subject: CN=73be02b77b250cea1c4e60454efa181692ee2a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:49:45:03:f2:ce:0b:86:35:60:ff:bd:29:55:
5d:5f:5e:c9:b2:3d:34:bb:a6:e5:56:fc:d8:4e:5c:
60:15:80:3b:01:23:dd:c1:d0:13:21:cc:74:65:58:
00:d9:8c:01:53:12:ca:21:37:f1:86:e4:d0:17:93:
ed:28:97:bd:f4:ef:44:90:fa:72:c6:88:aa:6c:44:
2b:c3:41:f6:77:a0:08:3e:15:f1:ce:5d:ca:6c:d0:
26:bb:7d:ae:67:5f:c5:d1:d5:be:af:23:c1:59:d1:
c1:95:a9:6b:de:d2:d6:8d:9d:5b:5b:42:a8:f9:7f:
4a:fa:61:e1:35:08:f6:d7:59:10:dd:84:64:53:1b:
2c:8e:f5:e6:e2:a5:56:ee:73:f1:07:e6:aa:3b:dd:
2c:5c:c2:c8:a2:1c:41:df:82:b7:00:26:49:93:10:
ff:41:bb:11:70:ce:80:17:ab:cc:ab:49:60:5a:e5:
c8:ef:68:51:d3:06:a5:9b:34:22:b0:af:1a:3b:88:
0d:22:84:37:f2:b9:d4:e4:76:fc:92:71:fa:05:ab:
e4:68:60:39:72:b8:bd:e0:f7:12:2c:97:1a:98:8c:
79:4e:53:ab:35:d9:2c:f2:ef:ec:00:47:d4:f6:57:
9a:8e:d0:58:33:f4:27:72:84:e1:a7:cb:2e:ec:18:
aa:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BE:02:B7:7B:25:0C:EA:1C:4E:60:45:4E:FA:18:16:92:EE:2A:5B
X509v3 Authority Key Identifier:
keyid:04:B1:E7:56:ED:B1:C3:BD:2F:57:66:9F:58:2B:F6:A9:51:B8:3F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLHnVu2xw70vV2afWCv2qVG4P0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:2b:5d:93:c6:ff:f1:aa:bc:42:b8:41:6d:46:b6:54:2a:d3:
38:e8:60:49:ee:b3:69:f5:9f:26:83:4a:54:68:41:26:96:cd:
6b:ec:e8:65:70:e1:38:11:f7:04:af:69:65:6e:69:9d:35:32:
31:53:9e:68:05:39:b9:ea:67:fc:f4:75:da:e1:37:5f:d0:31:
98:c9:80:c4:91:1c:85:3b:5c:fd:45:cd:60:bb:57:2b:61:17:
57:f4:38:18:97:97:f5:b7:97:31:04:2a:c4:27:60:1a:44:b2:
09:7a:42:68:25:c9:44:2f:c0:99:28:0f:27:70:69:f0:de:59:
78:9a:8d:99:45:81:b4:db:e5:fc:46:82:4f:1f:b0:97:27:a6:
3b:92:b3:3e:2e:e5:91:18:b3:e1:46:34:f7:e6:ee:7b:7c:8c:
b5:73:c0:cb:ce:8f:16:b5:f0:7e:3e:3a:90:b2:87:3c:9a:72:
33:b1:61:f8:fc:3f:2b:b4:72:f0:c7:ce:a1:df:b3:ed:8c:9e:
24:f3:84:3d:e2:82:7a:56:2c:a0:c6:26:0e:2d:5f:fd:24:fd:
9a:13:87:6b:1b:55:d3:9a:f7:2d:a8:8b:e2:77:8b:b2:2d:a5:
e1:77:14:4c:d7:16:40:52:34:a1:0b:7e:4f:24:9d:71:0c:eb:
d3:73:16:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 05:34:53 2025 by rpki-client