Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
File: bLu4HYIwad2CTY2Ngsjb-zBduY8.mft (raw, json)
Hash identifier: nxh/CMi5ZrfXzTBM/2tSiuB1hsaCDVcnOrIBCHnnZFA=
Subject key identifier: 5D:53:4E:53:8F:6B:A1:63:04:3D:E7:9F:BB:B1:A7:DD:4E:F3:B0:21
Authority key identifier: 6C:BB:B8:1D:82:30:69:DD:82:4D:8D:8D:82:C8:DB:FB:30:5D:B9:8F
Certificate issuer: /CN=6cbbb81d823069dd824d8d8d82c8dbfb305db98f
Certificate serial: 019922C3A08E74631C5621502D1DCF2BDE12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
Manifest number: 15A8
Signing time: Sun 07 Sep 2025 06:01:09 +0000
Manifest this update: Sun 07 Sep 2025 06:01:09 +0000
Manifest next update: Mon 08 Sep 2025 06:01:09 +0000
Files and hashes: 1: Kzmni7xeA7Gni0kYnHO5daJh5Mk.roa (hash: G+JlA/GfSH/1W28f9m1jif2MBvIydlQBDUO2Og4m/hU=)
2: bLu4HYIwad2CTY2Ngsjb-zBduY8.crl (hash: t600bNX+nHaDug0GvVSbmcNC1ithwdcCOccgW1MfCyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:a0:8e:74:63:1c:56:21:50:2d:1d:cf:2b:de:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cbbb81d823069dd824d8d8d82c8dbfb305db98f
Validity
Not Before: Sep 7 06:01:09 2025 GMT
Not After : Sep 8 06:01:09 2025 GMT
Subject: CN=5d534e538f6ba163043de79fbbb1a7dd4ef3b021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bf:ba:16:d5:4d:d4:5a:b5:6b:e8:ee:7d:f6:
49:39:c9:a6:cf:08:19:52:8f:81:18:89:3a:34:1e:
e0:13:2f:67:b0:53:4f:aa:2a:9b:b3:c5:80:3b:33:
69:af:13:80:48:41:69:a0:ae:e7:f6:d2:0e:9e:1b:
99:9a:01:79:91:c5:9a:e3:6a:f2:5d:81:45:de:cd:
19:06:5a:0b:74:27:32:74:69:87:d8:3d:6f:5b:5c:
ac:2b:2c:7a:91:c1:1d:1c:05:93:af:34:fb:10:6a:
d1:ca:17:a0:c4:3f:f0:60:69:53:a5:de:40:0d:86:
ad:4c:00:a4:14:a9:8d:4a:e8:f0:e2:10:5e:e1:ef:
c0:69:89:b5:43:6f:08:95:37:9f:7a:ea:5b:94:c4:
05:ff:55:6b:90:f5:21:40:ee:63:44:0f:6e:cd:14:
66:45:16:50:a7:cc:b7:cf:b4:be:de:9c:46:0d:b9:
5e:97:99:f9:9b:71:cb:5b:a7:97:30:45:2b:58:f5:
21:07:b7:9e:96:05:03:24:09:eb:32:be:e7:25:b2:
7f:dd:f0:15:1a:e0:12:3b:d6:a5:8a:ea:80:0f:dd:
9b:a4:c1:35:56:dc:24:5d:89:4d:8e:14:80:9a:41:
6f:62:7b:80:d0:6f:1f:63:94:c9:09:f2:9e:58:05:
08:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:53:4E:53:8F:6B:A1:63:04:3D:E7:9F:BB:B1:A7:DD:4E:F3:B0:21
X509v3 Authority Key Identifier:
keyid:6C:BB:B8:1D:82:30:69:DD:82:4D:8D:8D:82:C8:DB:FB:30:5D:B9:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:53:4d:00:ae:77:f2:25:c2:94:53:26:d9:fe:b1:9a:57:d7:
4f:fc:15:aa:94:bd:bc:d8:01:7f:e7:7f:d5:8c:fa:ba:f6:cd:
62:c4:4e:d6:fa:24:49:a8:a7:e4:6f:53:0a:18:eb:9e:e2:9a:
b8:f8:12:f3:34:06:b1:03:c0:d9:50:28:ac:ff:31:dc:a6:23:
8f:51:af:9c:e2:7b:e3:9a:bd:ff:23:6a:8b:55:b1:df:fe:da:
ec:20:55:b6:8b:64:7f:41:88:86:e3:4d:a8:9d:09:be:9b:62:
1f:cf:07:46:62:fd:44:12:f7:9a:56:16:0f:76:b1:77:31:88:
a4:68:9b:cb:4e:20:c2:d8:8c:6a:b1:6d:30:79:47:3f:b2:70:
d9:c7:f1:c6:90:6c:98:fb:ac:a7:5a:62:93:49:f9:00:f0:3d:
5c:7c:58:ec:24:e5:1f:78:28:68:fa:45:24:9b:7d:71:40:76:
ee:a6:d0:71:ca:21:40:f0:b8:c6:9e:2b:3b:7a:cc:e7:c2:9d:
bc:bb:87:36:3f:3a:3b:77:45:11:a3:34:4f:6d:ae:99:d3:67:
b1:14:94:05:ff:6e:0e:8d:cb:04:4e:e2:23:a9:a2:c1:7e:75:
d1:ef:7c:e0:11:fd:c0:7a:99:e4:ad:53:e3:1d:b2:b0:84:83:
8b:f3:28:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:38 2025 by rpki-client