Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
File: BlpHDbq5wcM08PhfQXzRqkJenxM.mft (raw, json)
Hash identifier: IqBSU05RIzGWGvIm1NmUA0w2pJbnYzA1kN2V1H+S9Wo=
Subject key identifier: 47:EE:3B:7F:C6:6F:7F:25:81:CC:95:5F:89:27:CC:FE:69:F4:1C:58
Authority key identifier: 06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13
Certificate issuer: /CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13
Certificate serial: 019A725CECC848126B16D4365DB6C668F92F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
Manifest number: 062A
Signing time: Tue 11 Nov 2025 10:01:23 +0000
Manifest this update: Tue 11 Nov 2025 10:01:23 +0000
Manifest next update: Wed 12 Nov 2025 10:01:23 +0000
Files and hashes: 1: 0j4zGysO_O-dzNVZ-jKiyP9Ggsc.roa (hash: Gf2VsJuB8duFQ6nJJfI/YawuoQ34OO9JSfa7KF4vi0Y=)
2: BlpHDbq5wcM08PhfQXzRqkJenxM.crl (hash: xgwtvugHplUk1tf5wNcPElkPkJqGeIwcYzNB+oLU6aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ec:c8:48:12:6b:16:d4:36:5d:b6:c6:68:f9:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13
Validity
Not Before: Nov 11 10:01:23 2025 GMT
Not After : Nov 12 10:01:23 2025 GMT
Subject: CN=47ee3b7fc66f7f2581cc955f8927ccfe69f41c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:46:ea:f5:6d:3a:27:a3:53:89:30:ce:9b:be:
3b:ed:ad:4e:cc:74:8f:3d:99:b8:fd:eb:20:06:52:
1f:13:a9:e7:14:2c:4d:1d:8e:03:74:37:33:f8:a4:
d4:77:68:39:1e:85:68:d2:a3:0b:eb:d9:af:0a:bf:
7e:10:5e:75:88:14:53:7f:eb:bd:f1:a5:47:59:0b:
b3:b6:a5:24:7f:4a:2a:46:27:fb:0c:9f:d5:97:cd:
b9:24:6e:68:84:2f:dd:1b:02:61:47:02:a0:20:3b:
4a:02:d6:b3:8f:48:22:ce:35:ad:18:56:aa:99:73:
4e:c8:07:b3:3d:bc:15:a2:95:0d:01:0d:3e:b5:49:
33:4d:dc:bf:7f:83:a1:ff:ce:9b:49:46:21:c6:a3:
8c:ee:eb:ba:d9:af:00:d6:70:a8:1a:d2:89:c2:0c:
36:b1:56:70:3e:11:07:64:c2:e4:5f:cb:60:32:69:
ea:2d:82:0c:a2:16:8e:68:b2:f9:b8:e4:07:53:a5:
ed:9e:55:d1:44:09:29:a3:2a:0b:2d:c6:1d:a5:05:
ac:0f:77:13:60:12:d8:ea:b8:db:02:87:44:e6:d9:
35:68:7d:a3:0e:27:e0:fa:e9:7c:ff:0e:60:2c:92:
eb:33:36:2d:c2:2c:96:de:4f:a5:fe:b9:76:b2:9b:
6a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EE:3B:7F:C6:6F:7F:25:81:CC:95:5F:89:27:CC:FE:69:F4:1C:58
X509v3 Authority Key Identifier:
keyid:06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f3:ad:2e:29:7e:4b:e9:8c:3b:a3:1b:46:92:d2:6a:7a:32:
58:e1:e2:d5:4e:aa:d2:78:f8:fc:68:c0:4b:39:63:06:32:48:
52:7c:04:1e:ef:30:94:b2:6e:2d:8f:d3:9d:8d:2a:d2:f7:50:
44:e7:66:b4:42:01:6b:74:d6:46:9f:aa:f7:2f:5c:b6:a1:da:
d9:1d:56:05:89:71:89:74:4e:97:81:97:e0:3e:49:7d:bc:2f:
b7:9e:74:e0:fb:a5:4d:d2:09:c1:f0:ca:81:80:7a:b4:01:fc:
5f:5e:87:cb:c4:f2:89:7b:68:7f:a6:36:9e:a2:de:0b:fd:64:
90:8a:8d:fd:29:55:5c:5a:d1:a4:e3:00:2d:95:4e:6a:2d:dc:
f2:80:ad:d0:07:6a:fa:ea:10:9f:3c:67:8b:e7:f7:d7:ad:9b:
e1:1d:45:01:13:be:d6:c9:86:d9:d2:92:84:29:2b:f5:4f:58:
2d:5d:50:93:73:f4:bc:92:0b:a5:1e:bf:84:57:c7:cd:01:7d:
36:66:3f:70:48:0b:1c:20:ee:2e:00:1c:9f:5b:05:af:35:84:
2a:37:56:a0:9f:4e:e3:08:7f:19:4b:35:54:23:3e:65:c8:63:
43:fe:9e:97:e8:af:0c:de:12:53:fa:63:ea:f1:61:c5:70:56:
33:0d:c7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:04 2025 by rpki-client