Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
File: _Blb1oKo6aEk1YU9xekIquczm64.mft (raw, json)
Hash identifier: 5SQJM+GvCCqr7wHb3NDvXAjZECfN9lINhhccQinSb4U=
Subject key identifier: BA:B1:02:FD:ED:26:63:BC:CB:57:C9:2E:3A:E2:3C:C0:B0:46:39:8B
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial: 019A72CAA180FF4FE4D9C550B6F6FE102323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
Manifest number: 14C6
Signing time: Tue 11 Nov 2025 12:01:13 +0000
Manifest this update: Tue 11 Nov 2025 12:01:13 +0000
Manifest next update: Wed 12 Nov 2025 12:01:13 +0000
Files and hashes: 1: C0o6u4617ldzXCQhJDGF4IWONDQ.roa (hash: oggwBkJK9nhHHHUHaINutEQuhqdlfpUhFtxzmUm75kw=)
2: _Blb1oKo6aEk1YU9xekIquczm64.crl (hash: U11c5S3TcD3Txw+pr6eXG3iT8qcyEYfeoSi2eQO0w64=)
3: eFaXAXJtU1k2p2wxUd4r6QNwVqc.roa (hash: RkwbFEsvbm5cD3j9VERr9RV6cFSAdbYRW8TdBaZFLJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:a1:80:ff:4f:e4:d9:c5:50:b6:f6:fe:10:23:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Validity
Not Before: Nov 11 12:01:13 2025 GMT
Not After : Nov 12 12:01:13 2025 GMT
Subject: CN=bab102fded2663bccb57c92e3ae23cc0b046398b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:42:61:bc:87:7d:5d:32:11:5e:5a:4f:55:86:
8f:91:81:ed:c3:1d:01:14:e5:79:6e:bd:a2:d5:26:
af:4a:1c:29:0c:b7:43:98:6a:7d:df:25:3f:e6:b0:
fb:99:8d:f7:4a:27:7b:e1:db:be:d5:fb:fa:94:5d:
86:61:04:06:03:24:1d:31:34:6f:46:b8:1c:c1:d8:
f6:00:c3:5a:99:ec:fc:3c:97:bd:3c:41:1b:1e:87:
3d:a6:e0:bd:0b:b6:64:eb:63:c0:67:ca:88:f9:e6:
6f:6a:f3:cf:a9:ff:25:17:84:92:6f:7d:30:c5:ae:
41:05:90:bd:2a:cf:92:2b:2b:d4:f6:2e:7f:45:48:
51:60:fe:64:79:2b:2b:71:1d:de:07:e7:79:d7:c6:
22:5a:92:7a:9f:b2:cc:4b:71:97:a6:6a:bf:be:62:
b6:c4:0e:ca:3c:13:48:fb:da:13:b3:78:a3:c1:08:
cb:40:b2:1a:8b:c3:1e:1e:f6:04:d2:ee:10:20:ae:
0e:78:af:24:0c:b2:f2:05:f8:cb:8e:80:f8:e1:b4:
16:92:75:fe:54:26:ec:18:68:f9:02:82:62:57:27:
7a:e5:37:32:4e:9b:23:0c:87:46:3a:f6:db:bb:d2:
fd:2d:2f:35:e8:0e:7f:2f:19:57:88:e1:ea:16:1a:
d1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B1:02:FD:ED:26:63:BC:CB:57:C9:2E:3A:E2:3C:C0:B0:46:39:8B
X509v3 Authority Key Identifier:
keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:31:dc:f4:6d:7c:df:06:c1:9c:af:3d:65:fc:0b:a4:5c:a3:
e9:e9:45:30:d2:0c:eb:58:06:84:92:2c:12:fa:3a:b8:b8:5b:
3b:90:ee:99:d2:1d:76:90:41:19:8c:42:b0:dd:4c:58:4f:c2:
4c:17:c7:94:18:4d:59:7e:e3:f0:5f:d1:1a:9d:96:70:6b:9e:
77:6b:14:b3:b3:c5:52:ff:bc:7e:16:c3:37:51:16:ec:b2:d0:
5c:3d:35:93:5b:a6:7b:d5:94:d8:db:b9:eb:10:0d:95:65:bd:
ec:98:34:12:39:67:d7:25:15:0a:42:ce:57:71:38:dc:39:4d:
e1:9b:b3:5e:7a:ad:31:8f:36:24:da:15:ff:ce:5b:5c:6a:d5:
51:5d:09:9c:e4:aa:0c:30:22:24:99:30:28:5a:9d:16:3a:a8:
ea:0b:bc:0d:38:82:bf:b2:25:d1:c5:97:d3:6e:39:28:72:73:
7b:c2:5b:1e:17:0d:8a:af:b9:4e:d8:5a:f4:20:2b:a3:08:c3:
cc:8f:66:f0:c4:c6:22:80:59:64:a6:3a:fd:01:69:b0:61:25:
e6:d2:82:10:fc:2a:98:8a:07:88:fe:d4:72:7e:8b:4a:0d:ea:
ba:c6:b2:de:c9:9f:78:aa:ba:b0:d6:8d:11:14:17:f2:79:47:
12:2e:03:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:44 2025 by rpki-client