Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
File: Blyf7bW1RPaW7U2vE1sC3ubZevY.mft (raw, json)
Hash identifier: fDgssRJYctZD8Jn2JoM5JqIM8OjQMoIywudfdcY/7WA=
Subject key identifier: 1E:70:29:4F:F3:CC:3F:A6:03:B4:78:30:97:AA:9B:A2:37:62:B0:34
Authority key identifier: 06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6
Certificate issuer: /CN=065c9fedb5b544f696ed4daf135b02dee6d97af6
Certificate serial: 019932A43782F235127CC16633611C7B47E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
Manifest number: 167A
Signing time: Wed 10 Sep 2025 08:00:46 +0000
Manifest this update: Wed 10 Sep 2025 08:00:46 +0000
Manifest next update: Thu 11 Sep 2025 08:00:46 +0000
Files and hashes: 1: Blyf7bW1RPaW7U2vE1sC3ubZevY.crl (hash: wXobGwZVk6mGZStZWB6eVfFdF/v6WG88H9vmrPNJ4VA=)
2: UVnhMz4Jh2elkuvmMPm7Jt9svi8.roa (hash: he6S2b9IPHmcJG3wUgyxY2EilJ7c6oeB4o0eAPgBdLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:a4:37:82:f2:35:12:7c:c1:66:33:61:1c:7b:47:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=065c9fedb5b544f696ed4daf135b02dee6d97af6
Validity
Not Before: Sep 10 08:00:46 2025 GMT
Not After : Sep 11 08:00:46 2025 GMT
Subject: CN=1e70294ff3cc3fa603b4783097aa9ba23762b034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:55:ee:17:07:4f:88:5e:b4:eb:79:5d:32:70:
7d:41:7b:8f:32:01:ba:c5:b2:ec:02:41:94:80:23:
97:4a:a7:be:38:34:d1:2e:5f:20:6b:e3:7d:50:7d:
7e:fd:21:c0:0d:6c:32:f6:e5:62:57:fe:3e:d2:6b:
d5:96:65:c4:a4:4c:be:d1:21:a2:05:40:2e:2d:7c:
db:78:56:f7:16:95:fd:01:87:a4:60:d8:c4:22:2d:
85:0f:5c:db:e2:0e:87:b2:c1:a0:ec:f4:a0:93:c6:
cf:d5:00:f7:2e:4d:ed:8b:c2:e5:db:bf:1d:b2:fe:
5f:a4:bd:4c:eb:e3:20:ca:4b:b1:e4:62:cf:e1:59:
43:f5:2f:4c:d4:cd:85:b5:f9:3b:a4:c1:a6:e4:f3:
26:18:ff:4f:5c:74:0d:93:4f:97:d6:bd:f8:07:0b:
79:e1:b1:bb:1c:ea:8c:02:55:7c:48:e6:14:77:c7:
47:e1:aa:74:53:fb:a8:9a:70:ae:e1:5c:03:a9:3f:
f5:61:fa:35:ee:b7:61:17:3e:20:98:f6:ad:6d:26:
fa:45:51:10:0f:a1:9b:fd:b7:a7:7d:dd:4c:69:44:
c2:2d:f1:54:bf:9e:89:5d:19:29:28:31:10:57:89:
32:c7:32:af:65:92:d3:8f:d4:d0:b2:0b:9d:53:5b:
8e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:70:29:4F:F3:CC:3F:A6:03:B4:78:30:97:AA:9B:A2:37:62:B0:34
X509v3 Authority Key Identifier:
keyid:06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f5:13:5c:db:d5:76:62:b0:f1:dd:61:26:ef:21:8c:ee:16:
e2:50:58:ae:57:90:85:4a:e9:3a:c4:b3:af:fe:66:94:53:dd:
3a:69:8d:2f:58:93:2b:78:55:c2:6f:3e:ba:30:4a:a5:01:33:
0f:24:86:93:e4:63:cc:45:e8:7c:7b:9f:62:1c:0d:1c:bc:08:
48:c8:81:82:3a:ec:37:de:d6:a4:49:64:e5:03:7d:fe:50:29:
d0:ca:f3:84:ce:ec:73:7c:68:71:89:cd:21:0a:00:42:b1:d1:
fe:d1:ce:03:ab:f8:6e:23:bc:44:ac:f4:0d:c6:61:68:5e:f8:
2a:b4:44:2e:9a:4e:b4:68:5d:d3:e4:8d:40:9c:81:85:f2:c8:
3a:78:77:c0:84:d3:b8:4c:89:86:05:be:a1:79:d1:3d:d9:f9:
f4:27:d4:50:f2:d8:55:db:10:d5:1d:ac:d1:b9:6b:25:fa:fc:
de:58:3c:0e:13:db:34:97:46:59:ef:74:e0:af:5b:e5:dc:2a:
e2:a3:d5:d6:3e:48:c3:58:0f:24:d9:8b:44:cc:23:8f:77:72:
a5:ea:6a:7e:1a:4b:ce:50:45:c8:99:4a:b2:59:3a:94:91:97:
93:29:bf:25:4b:80:7d:da:20:d0:66:92:8b:61:ed:bb:af:30:
18:37:a8:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkypDeC8jUSfMFmM2Ece0fiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NWM5ZmVkYjViNTQ0ZjY5NmVkNGRhZjEzNWIwMmRlZTZk
OTdhZjYwHhcNMjUwOTEwMDgwMDQ2WhcNMjUwOTExMDgwMDQ2WjAzMTEwLwYDVQQD
EygxZTcwMjk0ZmYzY2MzZmE2MDNiNDc4MzA5N2FhOWJhMjM3NjJiMDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFXuFwdPiF6063ldMnB9QXuPMgG6
xbLsAkGUgCOXSqe+ODTRLl8ga+N9UH1+/SHADWwy9uViV/4+0mvVlmXEpEy+0SGi
BUAuLXzbeFb3FpX9AYekYNjEIi2FD1zb4g6HssGg7PSgk8bP1QD3Lk3ti8Ll278d
sv5fpL1M6+Mgykux5GLP4VlD9S9M1M2Ftfk7pMGm5PMmGP9PXHQNk0+X1r34Bwt5
4bG7HOqMAlV8SOYUd8dH4ap0U/uomnCu4VwDqT/1Yfo17rdhFz4gmPatbSb6RVEQ
D6Gb/benfd1MaUTCLfFUv56JXRkpKDEQV4kyxzKvZZLTj9TQsgudU1uOuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5wKU/zzD+mA7R4MJeqm6I3YrA0MB8GA1UdIwQY
MBaAFAZcn+21tUT2lu1NrxNbAt7m2Xr2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmx5ZjdiVzFSUGFXN1UydkUxc0MzdWJaZXZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84MWIyNzYtZTczNi00MTcyLTgwYTkt
MThkNjkwMzY3NTNiLzEvQmx5ZjdiVzFSUGFXN1UydkUxc0MzdWJaZXZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS84MWIyNzYtZTczNi00MTcyLTgwYTktMThkNjkwMzY3NTNi
LzEvQmx5ZjdiVzFSUGFXN1UydkUxc0MzdWJaZXZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADvUTXNvV
dmKw8d1hJu8hjO4W4lBYrleQhUrpOsSzr/5mlFPdOmmNL1iTK3hVwm8+ujBKpQEz
DySGk+RjzEXofHufYhwNHLwISMiBgjrsN97WpElk5QN9/lAp0MrzhM7sc3xocYnN
IQoAQrHR/tHOA6v4biO8RKz0DcZhaF74KrRELppOtGhd0+SNQJyBhfLIOnh3wITT
uEyJhgW+oXnRPdn59CfUUPLYVdsQ1R2s0blrJfr83lg8DhPbNJdGWe904K9b5dwq
4qPV1j5Iw1gPJNmLRMwjj3dypepqfhpLzlBFyJlKslk6lJGXkym/JUuAfdog0GaS
i2Htu68wGDeoEg==
-----END CERTIFICATE-----
Generated at Wed Sep 10 14:35:08 2025 by rpki-client