Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
File: blLhBfDoJucV9yzFywMSolNEJLo.mft (raw, json)
Hash identifier: yLt3ReGQ7FRySGqQsOse9Hvcq23+XalopUgdrheXgRI=
Subject key identifier: 61:A3:8D:99:0C:90:FC:F5:E6:3C:40:2E:10:3C:87:38:2F:8F:B7:BD
Authority key identifier: 6E:52:E1:05:F0:E8:26:E7:15:F7:2C:C5:CB:03:12:A2:53:44:24:BA
Certificate issuer: /CN=6e52e105f0e826e715f72cc5cb0312a2534424ba
Certificate serial: 01984C3015E37B9030D87DA463E261F70112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
Manifest number: 0732
Signing time: Sun 27 Jul 2025 14:01:16 +0000
Manifest this update: Sun 27 Jul 2025 14:01:16 +0000
Manifest next update: Mon 28 Jul 2025 14:01:16 +0000
Files and hashes: 1: blLhBfDoJucV9yzFywMSolNEJLo.crl (hash: B18xASratvPY9Pse7Ac7VWQsK4ArE8uLOVLoSPMnsTo=)
2: u8V9QKBVG0Y86-vjzjyTisw0D_Y.roa (hash: KYGcbVwlMJi9uEEQnPMzkMYGof5+7MNCgFq2TVdNdS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:30:15:e3:7b:90:30:d8:7d:a4:63:e2:61:f7:01:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e52e105f0e826e715f72cc5cb0312a2534424ba
Validity
Not Before: Jul 27 14:01:16 2025 GMT
Not After : Jul 28 14:01:16 2025 GMT
Subject: CN=61a38d990c90fcf5e63c402e103c87382f8fb7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:62:cd:c1:62:3a:0d:fd:cb:94:5b:86:59:9e:
72:55:4e:41:6e:fb:4d:95:b7:0f:ea:21:c9:82:b0:
6f:cc:2c:02:bb:8b:c1:81:f1:7e:8e:db:ec:ce:34:
65:b0:38:fc:7c:1e:7b:b1:6d:59:87:b2:33:62:cf:
d3:7a:74:1a:43:98:c6:7e:f0:b4:96:fc:68:75:a9:
10:ee:70:9d:4c:c0:ca:e9:37:27:be:88:9c:c2:05:
c6:37:9d:eb:03:2a:dc:87:36:94:97:b9:3c:81:be:
2e:81:02:fb:95:06:21:79:12:5e:67:f3:4e:94:ac:
4a:61:c5:a2:76:e6:56:2c:54:f4:c6:60:bf:9e:35:
da:e5:11:6b:ce:33:64:8f:35:91:7c:6b:8e:e7:04:
94:be:d0:b2:ae:37:74:4f:90:2d:5c:f1:7f:77:ff:
b8:ab:d7:89:92:58:a6:d7:13:14:7b:d2:5e:0a:ad:
b8:78:21:37:a7:63:6b:4a:55:fc:ca:76:b8:3b:97:
7d:42:80:d9:01:cf:8e:a9:84:e0:9e:5a:dd:00:01:
b3:4d:15:c5:fe:85:d8:a7:59:db:36:ce:1a:a7:56:
d6:f7:43:62:2e:12:cc:16:cd:bd:f0:4d:87:80:8b:
4c:6b:0c:bf:a4:9a:e0:ea:ff:b6:0f:ec:09:f5:b0:
97:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A3:8D:99:0C:90:FC:F5:E6:3C:40:2E:10:3C:87:38:2F:8F:B7:BD
X509v3 Authority Key Identifier:
keyid:6E:52:E1:05:F0:E8:26:E7:15:F7:2C:C5:CB:03:12:A2:53:44:24:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:24:1d:aa:9c:eb:5c:ed:4b:67:56:fd:4e:f3:b5:7f:b4:e8:
18:2b:dd:43:1a:58:13:c7:13:08:7d:e4:b6:ed:7f:1a:48:e8:
55:e6:b7:b8:24:40:32:4e:ee:bf:6c:d8:c9:ba:80:5a:d4:04:
08:42:fb:6d:65:f0:ff:31:19:82:41:bb:ad:07:2d:9a:25:10:
cc:ec:ae:ee:98:5c:26:8b:a1:a9:23:af:f9:a3:18:b6:14:cb:
ae:d2:8b:21:e5:22:52:ef:da:29:7e:37:cd:1f:29:30:f0:62:
9b:8c:83:f6:66:fb:c4:54:f5:4e:d6:f4:60:c9:45:b9:14:e9:
55:dd:35:78:6d:df:fc:a1:1c:d1:d2:1d:8f:3a:f7:d2:47:e6:
04:84:18:1b:a1:3a:1e:4e:5a:d7:ea:da:a1:fa:f9:e2:d0:07:
95:3d:54:a0:ad:75:d1:8e:ca:0b:13:6a:3f:0e:09:d2:a4:28:
b8:18:89:38:f9:41:fe:87:84:91:ba:4e:89:0d:01:23:9c:44:
e7:f6:fa:ce:b8:47:6d:1a:b9:00:bd:48:50:e0:c8:4e:7b:55:
bf:56:fd:c7:10:d3:00:e6:48:55:a9:25:29:76:48:c7:cb:f6:
4d:96:6a:40:11:70:05:fe:c5:0d:2c:4e:9f:ae:aa:ce:74:a2:
6f:20:d0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:13:16 2025 by rpki-client