Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
File: BLw664svC0huXIwMec6djWixj5Y.mft (raw, json)
Hash identifier: BCWyFdEBH/I3if9wQHwJYNvHXVjvH7l8o4q1HWT1tEk=
Subject key identifier: 04:0C:0D:13:B7:CD:DA:E2:BB:13:86:AD:50:3D:C4:7B:EB:34:4C:E6
Authority key identifier: 04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
Certificate issuer: /CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Certificate serial: 019845BF196D42B66F801B20674467CDF97A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
Manifest number: 05AA
Signing time: Sat 26 Jul 2025 08:00:08 +0000
Manifest this update: Sat 26 Jul 2025 08:00:08 +0000
Manifest next update: Sun 27 Jul 2025 08:00:08 +0000
Files and hashes: 1: BLw664svC0huXIwMec6djWixj5Y.crl (hash: WdldmrgPPKud3WrupwbqbypKsAFtUZGqSt3QtngXQHs=)
2: RLDEvA5lT3OJsuLbbmV0pyamz6M.roa (hash: 08l04RNVeM6otYs3DB4mk2Ka+Bd48a32zNdlW+piPQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:bf:19:6d:42:b6:6f:80:1b:20:67:44:67:cd:f9:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Validity
Not Before: Jul 26 08:00:08 2025 GMT
Not After : Jul 27 08:00:08 2025 GMT
Subject: CN=040c0d13b7cddae2bb1386ad503dc47beb344ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:92:d9:c4:f3:d9:21:1a:cc:21:bc:72:1e:a8:
f7:4a:72:0f:70:f3:49:06:c6:cc:74:f3:ab:28:8a:
31:68:4d:3d:0e:4a:ad:3d:c4:78:ac:15:65:cc:ab:
4b:29:14:ef:ed:e6:8a:85:50:bb:e9:fd:ba:9a:c9:
f9:5c:5a:b7:44:dd:ff:95:a1:66:0b:6a:a9:9b:38:
28:18:ce:68:34:01:89:7a:5a:47:8b:b1:aa:3c:03:
de:7d:31:3c:45:14:5d:2e:17:c1:c4:ef:d8:6f:9c:
dc:6c:6f:c5:98:61:73:82:c2:c1:3c:dc:93:d9:36:
44:af:65:e5:40:be:6c:96:13:01:88:ba:66:ab:b3:
d3:7e:9d:7d:07:ee:20:f6:e3:bb:40:61:40:6e:ea:
f5:0a:9c:54:ac:f6:66:85:50:a0:af:62:1f:75:b0:
da:74:ed:1e:2a:a1:b7:ff:4d:16:c7:11:52:11:4d:
2f:54:08:3c:dd:0e:b3:16:00:bf:bd:e2:0d:9c:6c:
99:23:b0:7b:f4:09:87:3a:ad:c8:2c:bc:6c:8c:08:
68:2c:df:f4:ce:c4:8f:15:33:ea:53:74:aa:d2:d0:
ff:f6:f3:99:5b:fd:28:2f:16:ae:a4:85:71:ab:fc:
d3:31:3f:86:1a:e6:20:fa:dc:e2:68:09:bd:d4:98:
05:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0C:0D:13:B7:CD:DA:E2:BB:13:86:AD:50:3D:C4:7B:EB:34:4C:E6
X509v3 Authority Key Identifier:
keyid:04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:87:4d:82:51:d0:ca:4e:49:88:ab:7a:bf:22:4e:a7:e5:30:
25:29:c1:36:65:97:7c:51:51:8b:aa:70:4d:02:51:c1:31:88:
11:9f:18:d1:a8:d9:88:74:c0:94:9b:42:f3:a8:ab:0a:ba:e0:
ce:17:d4:d3:cd:71:ce:e0:3f:cb:32:d5:ae:3c:f7:64:9c:94:
61:3e:72:82:f6:36:e7:92:28:55:09:6a:73:ef:0d:77:cf:77:
af:74:bb:79:e6:63:5f:5d:e4:0b:55:37:4c:7a:ff:67:e2:69:
e6:6a:88:da:c2:07:13:3c:5f:6f:b1:b6:24:1f:74:28:21:ca:
1e:c3:f3:d2:78:05:5e:64:95:57:e9:2e:5a:8c:9c:b3:27:b6:
cf:a9:b7:02:ba:33:97:86:82:20:26:79:f3:ff:8e:0a:5f:41:
d1:22:a8:03:d8:be:fd:c4:94:c0:7d:e1:07:4d:49:7b:36:4e:
8f:a3:1d:be:d4:12:00:7d:c1:29:43:03:18:e6:c0:62:aa:f0:
4f:78:f7:c7:c5:df:a8:b8:a2:df:d0:c0:5f:23:b2:cc:6d:15:
54:d2:b5:32:f2:2a:b7:c6:de:84:4f:aa:c9:7d:30:a8:ad:cf:
e9:ab:10:d9:4f:23:84:b2:5d:c5:aa:52:e7:46:11:ed:50:b3:
a9:db:9e:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFvxltQrZvgBsgZ0Rnzfl6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YmMzYWViOGIyZjBiNDg2ZTVjOGMwYzc5Y2U5ZDhkNjhi
MThmOTYwHhcNMjUwNzI2MDgwMDA4WhcNMjUwNzI3MDgwMDA4WjAzMTEwLwYDVQQD
EygwNDBjMGQxM2I3Y2RkYWUyYmIxMzg2YWQ1MDNkYzQ3YmViMzQ0Y2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpLZxPPZIRrMIbxyHqj3SnIPcPNJ
BsbMdPOrKIoxaE09DkqtPcR4rBVlzKtLKRTv7eaKhVC76f26msn5XFq3RN3/laFm
C2qpmzgoGM5oNAGJelpHi7GqPAPefTE8RRRdLhfBxO/Yb5zcbG/FmGFzgsLBPNyT
2TZEr2XlQL5slhMBiLpmq7PTfp19B+4g9uO7QGFAbur1CpxUrPZmhVCgr2IfdbDa
dO0eKqG3/00WxxFSEU0vVAg83Q6zFgC/veINnGyZI7B79AmHOq3ILLxsjAhoLN/0
zsSPFTPqU3Sq0tD/9vOZW/0oLxaupIVxq/zTMT+GGuYg+tziaAm91JgFFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQMDRO3zdriuxOGrVA9xHvrNEzmMB8GA1UdIwQY
MBaAFAS8OuuLLwtIblyMDHnOnY1osY+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkx3NjY0c3ZDMGh1WEl3TWVjNmRqV2l4ajVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9iMmJkZDAtZjM4My00YTVmLWI2NWEt
ZmYyMjdlNDk5M2Y3LzEvQkx3NjY0c3ZDMGh1WEl3TWVjNmRqV2l4ajVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9iMmJkZDAtZjM4My00YTVmLWI2NWEtZmYyMjdlNDk5M2Y3
LzEvQkx3NjY0c3ZDMGh1WEl3TWVjNmRqV2l4ajVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWYdNglHQ
yk5JiKt6vyJOp+UwJSnBNmWXfFFRi6pwTQJRwTGIEZ8Y0ajZiHTAlJtC86irCrrg
zhfU081xzuA/yzLVrjz3ZJyUYT5ygvY255IoVQlqc+8Nd893r3S7eeZjX13kC1U3
THr/Z+Jp5mqI2sIHEzxfb7G2JB90KCHKHsPz0ngFXmSVV+kuWoycsye2z6m3Aroz
l4aCICZ58/+OCl9B0SKoA9i+/cSUwH3hB01JezZOj6MdvtQSAH3BKUMDGObAYqrw
T3j3x8XfqLii39DAXyOyzG0VVNK1MvIqt8behE+qyX0wqK3P6asQ2U8jhLJdxapS
50YR7VCzqdue+A==
-----END CERTIFICATE-----
Generated at Sat Jul 26 15:05:16 2025 by rpki-client