Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
File: bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft (raw, json)
Hash identifier: k11sTa148sBsVC6fkNYYhvvIi+B5fo+JxV0CQUY/Zjs=
Subject key identifier: 02:F7:20:91:47:1B:23:8B:A5:8E:03:EA:C9:C3:18:F0:4A:49:FF:C5
Authority key identifier: 6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75
Certificate issuer: /CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675
Certificate serial: 0199C4FBD303DB82D7D810404651FD5F4744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
Manifest number: 0258
Signing time: Wed 08 Oct 2025 18:01:01 +0000
Manifest this update: Wed 08 Oct 2025 18:01:01 +0000
Manifest next update: Thu 09 Oct 2025 18:01:01 +0000
Files and hashes: 1: MB79B-8QZwUqYrXc2Ibwogq_qLQ.roa (hash: bNBfBbjDpqRStExCWEma6tP6lj9BYj7p2ZAmcoBXfmY=)
2: bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl (hash: 46lxTWXta7uB6J1Be0WCHrXUq0i7Jaf9gzaiAEviPe4=)
3: jf4WdQ24BygRnLqj51WchS5928k.roa (hash: /f6JdSqZIG39wyf+D4unjoQWcyolGzjFS4yjumA6E0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:fb:d3:03:db:82:d7:d8:10:40:46:51:fd:5f:47:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675
Validity
Not Before: Oct 8 18:01:01 2025 GMT
Not After : Oct 9 18:01:01 2025 GMT
Subject: CN=02f72091471b238ba58e03eac9c318f04a49ffc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c7:93:44:88:1f:e0:52:d7:98:2a:73:b5:04:
c0:40:26:b2:57:dc:35:0d:77:d1:12:44:99:60:45:
d8:1f:c3:7d:00:72:1e:da:b9:87:a6:d2:f1:e8:46:
8e:66:97:5f:d9:6a:61:ac:3b:9e:37:a3:f0:93:28:
cf:ca:08:ed:0c:ee:ef:59:e8:be:77:ba:5e:a4:e3:
27:1c:f7:e9:ca:af:cf:a2:96:e4:5b:ab:87:ab:79:
d1:e5:90:1f:30:31:c5:22:0c:03:ce:eb:56:9f:27:
9d:7c:34:c3:81:51:8e:fb:33:5c:a6:e8:82:34:87:
24:1f:84:11:3b:93:e9:ac:bd:83:12:8d:c8:f5:64:
3f:4c:50:0e:09:e6:93:8c:78:3f:5b:a9:09:76:83:
37:78:21:46:c4:6c:94:38:80:42:66:a4:40:f4:7c:
7e:9d:3f:ea:af:14:83:6c:4d:76:12:2d:09:c7:b9:
c8:23:e8:85:93:79:dc:d8:4b:fd:5e:97:1b:bc:7b:
be:96:29:62:c3:b0:af:3d:d0:46:4a:ee:cd:e7:d0:
9e:8a:c0:0b:f4:7e:f2:26:04:bc:97:e1:71:bd:49:
32:95:26:d3:a3:25:0c:d2:1d:81:38:92:3d:f3:a1:
b7:ba:be:21:ca:e0:93:03:ec:a2:03:02:7f:f7:8f:
8e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F7:20:91:47:1B:23:8B:A5:8E:03:EA:C9:C3:18:F0:4A:49:FF:C5
X509v3 Authority Key Identifier:
keyid:6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:78:0a:39:22:d5:10:9e:e9:9a:be:a4:9e:89:5d:85:40:50:
a1:a8:f0:5b:73:20:28:eb:cb:55:53:02:4b:79:ef:58:c0:59:
e1:75:e3:eb:34:10:26:54:73:0e:fc:77:dd:ed:f9:64:dd:ce:
2d:3d:c2:a4:f1:f5:11:01:51:75:8c:8a:93:a8:15:8f:48:de:
6e:b4:f3:b6:c9:0c:14:40:a9:e5:80:78:a1:08:37:e0:86:16:
a1:a7:00:7e:88:f9:48:fd:55:8a:c5:96:17:14:bd:e3:aa:35:
3d:a6:86:0d:4b:39:97:5d:f5:46:32:b2:53:59:4c:59:9e:fb:
bd:bc:6b:91:6e:88:a5:c6:c7:26:7a:95:f7:97:3b:04:66:be:
fe:df:2d:64:ba:f6:ea:39:83:ba:af:39:88:8a:56:b3:bf:57:
c8:84:36:ed:0b:99:90:45:1c:4b:96:be:bd:77:94:14:71:d0:
d5:34:51:6b:b4:a2:4a:cc:11:b0:c4:bc:48:a1:5f:c4:02:0a:
44:50:4a:9f:f0:8c:23:68:49:4f:bb:40:67:da:4f:b5:03:56:
fe:56:7e:c2:36:62:7a:4a:cf:70:0d:79:96:e5:4c:dd:33:81:
68:95:d5:f2:d4:de:4f:60:24:c6:a9:04:96:e5:b6:c3:36:8a:
7f:95:ec:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:13:31 2025 by rpki-client