Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
File: BlpHDbq5wcM08PhfQXzRqkJenxM.mft (raw, json)
Hash identifier: b0hLduF/hTwefwPlmkoYG3UrGlgvaVvZLtyIPQ04O4s=
Subject key identifier: 7E:C9:DE:2B:6B:EB:76:B3:14:CA:63:29:65:B6:E4:F3:DD:58:27:05
Authority key identifier: 06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13
Certificate issuer: /CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13
Certificate serial: 019922FA8183C45EC12D6FEB09C86FE6F9AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
Manifest number: 0578
Signing time: Sun 07 Sep 2025 07:01:06 +0000
Manifest this update: Sun 07 Sep 2025 07:01:06 +0000
Manifest next update: Mon 08 Sep 2025 07:01:06 +0000
Files and hashes: 1: BlpHDbq5wcM08PhfQXzRqkJenxM.crl (hash: IWyYEVW2mXCci92zDKdbfoKdebA65FHsLavJhzTfnFA=)
2: ad6x4CiW1Da9W7G7xb_TGfwpp78.roa (hash: YUb9Lf1mTN1JjvT/olnYRSLlIBS8OJGKrxw+VtVpgBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:81:83:c4:5e:c1:2d:6f:eb:09:c8:6f:e6:f9:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13
Validity
Not Before: Sep 7 07:01:06 2025 GMT
Not After : Sep 8 07:01:06 2025 GMT
Subject: CN=7ec9de2b6beb76b314ca632965b6e4f3dd582705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:75:69:c5:43:01:59:7a:f3:3a:4f:e1:33:ed:
3c:38:0c:1a:0a:8f:bb:8b:19:9c:6d:39:d6:0a:37:
c0:71:4a:bf:6e:98:be:2e:28:27:d2:a3:0a:3b:9a:
52:d2:cf:80:d9:00:69:e3:71:18:86:57:61:b1:2f:
fa:62:9c:1f:a0:62:41:31:4c:22:07:c4:78:1f:d1:
1a:25:b7:6b:38:4e:17:58:ec:5c:f7:9c:73:51:29:
20:72:c4:7b:b9:af:f5:03:8e:7c:4a:74:7a:44:b9:
2e:ec:48:a3:20:7f:c1:4b:dd:00:c5:09:9e:2e:df:
ae:93:74:8a:d8:fb:1d:e7:ba:79:eb:a9:63:b1:81:
a3:77:7b:dc:6b:a0:0a:0d:76:63:d0:36:15:b7:3a:
9d:0b:97:27:0b:d4:5d:6c:8f:58:e5:58:16:f1:cb:
aa:f6:b3:f4:53:6e:0d:6c:9e:65:7b:3d:b9:82:cb:
1e:72:72:68:d1:15:02:be:60:77:8e:76:e7:32:25:
1e:4e:04:db:97:93:61:e2:f5:19:06:dc:bb:6b:f5:
e8:96:a7:1e:17:13:2f:37:fa:1b:8d:23:7f:19:98:
14:5d:b0:b3:d2:b8:32:73:df:6e:dc:ee:fb:94:51:
75:36:b1:f0:b0:86:0f:c7:4a:53:6b:15:60:82:4b:
56:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C9:DE:2B:6B:EB:76:B3:14:CA:63:29:65:B6:E4:F3:DD:58:27:05
X509v3 Authority Key Identifier:
keyid:06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:0e:88:64:99:92:98:52:32:6d:ec:a1:1e:93:86:29:fd:c9:
dc:fa:11:38:ea:24:85:2c:32:a7:28:37:cf:82:bc:2a:f3:08:
55:52:43:94:5a:05:a5:4f:0e:7f:65:9d:e8:cc:41:34:91:ed:
e1:4c:ee:18:9b:fd:f1:5b:2d:b3:6e:f3:d2:09:b3:71:81:b0:
58:7b:45:35:67:a3:50:d0:76:e5:ae:4f:a1:8e:fe:65:ed:a4:
01:eb:11:9f:aa:5c:b7:c0:31:28:76:c9:da:55:41:f8:68:31:
8c:5e:a8:fd:fb:7a:92:27:cd:85:1c:63:e7:f5:e5:3b:4a:75:
6f:3a:a7:13:c6:e6:98:7b:07:47:c2:94:a7:dc:e2:78:8c:47:
82:44:38:24:bf:9e:ed:9b:d1:0c:46:2e:78:9e:34:d6:70:90:
e0:7f:3b:1b:d4:6d:4f:c5:cb:71:28:e7:e1:96:b6:38:d3:f9:
b6:2d:cd:ba:2c:e2:16:3a:bf:12:19:89:b2:7e:e9:8e:77:ea:
3f:92:4f:95:e1:18:ec:15:5e:36:e2:1c:f3:d4:1d:d0:64:30:
25:e7:a6:4b:c5:25:12:d4:a3:ac:a3:83:45:c6:44:90:a9:28:
97:18:ff:66:f2:d7:7e:4c:b6:ab:57:07:e8:a7:07:b9:fa:67:
dc:56:12:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:18 2025 by rpki-client