Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
File: bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft (raw, json)
Hash identifier: MeCND37AFUYZlgAjnAwbQ/OA+sA2UkGVdEf+ChtXeag=
Subject key identifier: 40:B2:D2:15:70:B8:5F:0A:9F:49:72:38:B0:E3:C0:92:4E:9D:A4:1D
Authority key identifier: 6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75
Certificate issuer: /CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675
Certificate serial: 01984A783BA01A7C4BDAC05A4429319393CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
Manifest number: 0194
Signing time: Sun 27 Jul 2025 06:00:50 +0000
Manifest this update: Sun 27 Jul 2025 06:00:50 +0000
Manifest next update: Mon 28 Jul 2025 06:00:50 +0000
Files and hashes: 1: MB79B-8QZwUqYrXc2Ibwogq_qLQ.roa (hash: bNBfBbjDpqRStExCWEma6tP6lj9BYj7p2ZAmcoBXfmY=)
2: bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl (hash: Y65SF+ZjmJ/MNrGiBZTJRveh64gX3kGwh4b3wMkucag=)
3: jf4WdQ24BygRnLqj51WchS5928k.roa (hash: /f6JdSqZIG39wyf+D4unjoQWcyolGzjFS4yjumA6E0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:3b:a0:1a:7c:4b:da:c0:5a:44:29:31:93:93:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675
Validity
Not Before: Jul 27 06:00:50 2025 GMT
Not After : Jul 28 06:00:50 2025 GMT
Subject: CN=40b2d21570b85f0a9f497238b0e3c0924e9da41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d7:71:2e:d7:fa:f1:fa:d0:02:0a:f7:ea:ff:
01:9f:f7:d8:8c:58:66:51:d4:40:9e:f1:28:ff:a8:
29:4b:a1:e9:97:3c:0a:1d:d0:0b:7a:59:6b:76:1d:
a4:c1:08:e4:59:1e:32:49:89:1b:42:02:a6:ae:c4:
a6:8b:a1:df:06:a3:c4:c8:5a:24:46:aa:b4:bc:71:
06:98:7d:e0:d8:01:8c:77:3f:57:a8:9e:0e:38:79:
1b:fe:dd:ac:05:cf:b0:d5:32:10:b3:46:a3:f5:97:
af:25:e9:12:aa:60:bc:4e:d6:77:38:19:83:eb:45:
43:a7:fa:a4:49:89:27:ec:4e:e3:f1:d1:d5:b1:f5:
7e:0c:51:a3:46:89:31:87:ec:0c:6b:ca:0d:bf:b7:
d0:fc:30:8c:3e:4a:cb:1f:06:bf:9f:05:e3:f5:73:
b9:48:fc:bd:23:53:87:94:d9:5e:bf:93:bc:68:70:
53:82:a2:35:37:e8:1d:f4:ff:49:af:ab:75:6b:c0:
02:06:2c:bb:18:23:09:87:5d:26:1e:a4:32:1a:fc:
5e:1e:b9:20:b2:e6:19:56:3c:e0:16:f2:f9:16:fe:
da:51:79:26:d1:95:97:26:64:04:c1:32:86:b4:6e:
24:7d:5d:69:bb:0c:5c:87:17:94:97:06:83:02:ba:
49:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B2:D2:15:70:B8:5F:0A:9F:49:72:38:B0:E3:C0:92:4E:9D:A4:1D
X509v3 Authority Key Identifier:
keyid:6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:07:30:fa:52:26:6f:69:a5:c1:44:96:cf:44:44:fb:ac:83:
13:b8:61:a9:10:fa:bc:2c:b7:26:1b:40:2e:11:bc:a9:27:5c:
c9:81:67:0f:c5:b0:b5:1d:4e:83:b9:d4:7a:ae:50:a5:ac:1d:
d2:7e:45:1e:cc:81:42:5e:9a:7c:c9:bf:d7:a4:41:da:3c:e6:
86:b4:68:f3:d5:7a:fd:25:aa:5f:36:d9:52:9b:4f:3f:b8:8e:
1a:4c:39:e4:fe:3b:6a:d7:2f:d2:c7:d3:34:50:db:e5:cd:01:
cf:d1:b3:67:e7:07:09:37:1e:18:f3:27:cc:3b:f6:36:16:44:
91:d2:13:b3:f7:6a:f3:74:a7:56:f8:63:ec:69:20:bb:b3:90:
7a:56:59:c4:c0:cf:4e:92:3d:5c:06:55:29:c2:fe:04:16:ec:
5b:a5:70:8f:44:39:0c:58:7e:e6:9a:88:65:c1:5a:e6:c5:c8:
96:1c:dc:4d:af:2c:ca:92:bb:5a:bd:58:b1:54:6d:86:14:9c:
40:19:2b:1a:e9:cd:18:66:04:0b:c7:2e:29:1e:4e:b3:f9:a7:
e0:25:3c:04:5d:b3:8e:d2:5a:4f:5e:08:13:1c:d4:13:af:69:
9b:51:ad:e8:bc:a6:6a:9a:18:a4:d2:11:46:3b:32:5b:ba:c4:
83:2f:6b:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKeDugGnxL2sBaRCkxk5PKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMTk1YjliZDQ3MDAxZWFiNTBmZGJhMWRlMGQyZDNmNDUy
N2Y2NzUwHhcNMjUwNzI3MDYwMDUwWhcNMjUwNzI4MDYwMDUwWjAzMTEwLwYDVQQD
Eyg0MGIyZDIxNTcwYjg1ZjBhOWY0OTcyMzhiMGUzYzA5MjRlOWRhNDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NdxLtf68frQAgr36v8Bn/fYjFhm
UdRAnvEo/6gpS6HplzwKHdALellrdh2kwQjkWR4ySYkbQgKmrsSmi6HfBqPEyFok
Rqq0vHEGmH3g2AGMdz9XqJ4OOHkb/t2sBc+w1TIQs0aj9ZevJekSqmC8TtZ3OBmD
60VDp/qkSYkn7E7j8dHVsfV+DFGjRokxh+wMa8oNv7fQ/DCMPkrLHwa/nwXj9XO5
SPy9I1OHlNlev5O8aHBTgqI1N+gd9P9Jr6t1a8ACBiy7GCMJh10mHqQyGvxeHrkg
suYZVjzgFvL5Fv7aUXkm0ZWXJmQEwTKGtG4kfV1puwxchxeUlwaDArpJcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECy0hVwuF8Kn0lyOLDjwJJOnaQdMB8GA1UdIwQY
MBaAFGwZW5vUcAHqtQ/bod4NLT9FJ/Z1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkJsYm05UndBZXExRDl1aDNnMHRQMFVuOW5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8wMTBkM2QtMWJhOC00YTk2LTgyMTIt
OTRhYzhhZjFiZmNmLzEvYkJsYm05UndBZXExRDl1aDNnMHRQMFVuOW5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8wMTBkM2QtMWJhOC00YTk2LTgyMTItOTRhYzhhZjFiZmNm
LzEvYkJsYm05UndBZXExRDl1aDNnMHRQMFVuOW5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkwcw+lIm
b2mlwUSWz0RE+6yDE7hhqRD6vCy3JhtALhG8qSdcyYFnD8WwtR1Og7nUeq5Qpawd
0n5FHsyBQl6afMm/16RB2jzmhrRo89V6/SWqXzbZUptPP7iOGkw55P47atcv0sfT
NFDb5c0Bz9GzZ+cHCTceGPMnzDv2NhZEkdITs/dq83SnVvhj7Gkgu7OQelZZxMDP
TpI9XAZVKcL+BBbsW6Vwj0Q5DFh+5pqIZcFa5sXIlhzcTa8sypK7Wr1YsVRthhSc
QBkrGunNGGYEC8cuKR5Os/mn4CU8BF2zjtJaT14IExzUE69pm1Gt6LymapoYpNIR
RjsyW7rEgy9rVg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:30:40 2025 by rpki-client