Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
File: _Blb1oKo6aEk1YU9xekIquczm64.mft (raw, json)
Hash identifier: 1ctvWleCD30DuIM+VRx7Yh6zrxy8SW3iISYACEVAx3U=
Subject key identifier: 5E:EF:A2:DA:10:95:0E:07:CA:CA:E7:74:1C:59:6E:BD:BE:7C:38:D2
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial: 019922C34EB366F97D332F8D680C80E5067A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
Manifest number: 1418
Signing time: Sun 07 Sep 2025 06:00:48 +0000
Manifest this update: Sun 07 Sep 2025 06:00:48 +0000
Manifest next update: Mon 08 Sep 2025 06:00:48 +0000
Files and hashes: 1: C0o6u4617ldzXCQhJDGF4IWONDQ.roa (hash: oggwBkJK9nhHHHUHaINutEQuhqdlfpUhFtxzmUm75kw=)
2: _Blb1oKo6aEk1YU9xekIquczm64.crl (hash: JaeaTbWXw/EAsQHAFyMXamw9EWicrU4eEyQUst3T/HA=)
3: eFaXAXJtU1k2p2wxUd4r6QNwVqc.roa (hash: RkwbFEsvbm5cD3j9VERr9RV6cFSAdbYRW8TdBaZFLJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:4e:b3:66:f9:7d:33:2f:8d:68:0c:80:e5:06:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Validity
Not Before: Sep 7 06:00:48 2025 GMT
Not After : Sep 8 06:00:48 2025 GMT
Subject: CN=5eefa2da10950e07cacae7741c596ebdbe7c38d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9e:70:ed:73:9e:e4:4c:14:c4:e7:1a:77:b4:
a6:28:6f:17:fb:9c:52:42:bd:25:88:3e:93:c5:97:
0a:7c:de:ed:01:2f:e5:29:18:f3:6f:31:c2:92:a4:
25:36:2e:4f:b1:80:2d:ab:98:83:40:93:75:65:94:
e1:0d:0d:b0:db:90:4f:5f:78:cb:7e:d6:31:e3:43:
07:c5:39:20:00:40:c3:5e:39:c2:96:d3:1f:02:87:
21:00:5c:12:16:61:69:e4:df:f4:aa:8d:7a:1f:a9:
6d:17:63:d1:8d:7d:c5:c3:0e:ee:ec:7a:e4:76:93:
10:60:d0:80:d7:82:e3:71:ea:59:af:d0:87:e8:b9:
f2:10:a6:3c:7c:6f:66:4c:18:b2:4c:53:0c:80:f1:
06:8e:3d:e7:c6:ff:06:c5:c9:04:db:fc:50:35:47:
d8:66:be:c6:46:16:84:db:2d:a3:ca:05:cf:b5:b6:
84:d4:4a:24:cd:fb:6b:d5:d2:1e:b4:9d:7e:a7:1d:
15:94:1d:9b:94:09:db:90:78:47:1e:c7:d1:e3:65:
68:5e:b6:28:c0:cc:bf:65:ca:00:ca:8a:8a:65:14:
a7:29:37:8b:bb:01:99:01:e4:d3:a8:1a:0d:e7:82:
34:d5:4f:04:21:bd:8a:cf:91:9a:98:d9:cf:fd:d9:
ce:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:EF:A2:DA:10:95:0E:07:CA:CA:E7:74:1C:59:6E:BD:BE:7C:38:D2
X509v3 Authority Key Identifier:
keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:cc:60:5d:f7:07:73:9b:2a:0a:ac:a8:a1:78:82:cb:c3:e0:
45:84:bd:01:d1:15:54:7f:78:9e:7b:44:14:fe:fd:a7:97:d5:
93:94:82:da:6f:b2:cb:be:25:9a:94:59:a6:4e:f3:71:41:26:
9f:7e:b3:4b:6c:00:df:3c:7f:a8:80:80:26:c8:1c:78:3b:c5:
4c:cc:52:25:a5:e3:18:8b:51:0a:2e:7b:37:71:43:16:04:e5:
49:fd:14:17:c9:11:de:73:98:3a:de:3a:08:7a:0b:4a:8b:63:
73:6e:12:0a:a6:48:e9:82:43:a6:c3:7d:f3:d4:07:3a:90:e6:
1c:02:a6:5e:d7:7d:bd:9a:53:d3:9d:bd:c4:80:5d:1d:24:2c:
25:af:65:d7:e3:49:6a:0a:3f:65:75:1b:7a:65:c0:e9:0b:e9:
cf:00:ae:a8:f0:c4:76:1e:15:35:cd:da:54:95:f9:64:6d:f8:
97:78:ba:52:c6:ad:19:f3:f4:8e:f3:ea:54:bf:d7:6e:f7:44:
e8:bf:fa:f6:00:bb:8d:0c:c3:b7:a0:4e:9b:6d:06:bb:3f:ca:
69:98:1c:c2:68:7e:a5:01:ba:94:8c:dc:86:17:57:c6:3c:86:
7f:09:4d:05:e5:7f:f9:b9:8b:7f:32:97:01:c8:f4:c4:ff:40:
e7:e8:0d:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw06zZvl9My+NaAyA5QZ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMTk1YmQ2ODJhOGU5YTEyNGQ1ODUzZGM1ZTkwOGFhZTcz
MzliYWUwHhcNMjUwOTA3MDYwMDQ4WhcNMjUwOTA4MDYwMDQ4WjAzMTEwLwYDVQQD
Eyg1ZWVmYTJkYTEwOTUwZTA3Y2FjYWU3NzQxYzU5NmViZGJlN2MzOGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq55w7XOe5EwUxOcad7SmKG8X+5xS
Qr0liD6TxZcKfN7tAS/lKRjzbzHCkqQlNi5PsYAtq5iDQJN1ZZThDQ2w25BPX3jL
ftYx40MHxTkgAEDDXjnCltMfAochAFwSFmFp5N/0qo16H6ltF2PRjX3Fww7u7Hrk
dpMQYNCA14LjcepZr9CH6LnyEKY8fG9mTBiyTFMMgPEGjj3nxv8GxckE2/xQNUfY
Zr7GRhaE2y2jygXPtbaE1Eokzftr1dIetJ1+px0VlB2blAnbkHhHHsfR42VoXrYo
wMy/ZcoAyoqKZRSnKTeLuwGZAeTTqBoN54I01U8EIb2Kz5GamNnP/dnOYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7votoQlQ4HysrndBxZbr2+fDjSMB8GA1UdIwQY
MBaAFPwZW9aCqOmhJNWFPcXpCKrnM5uuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0JsYjFvS282YUVrMVlVOXhla0lxdWN6bTY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9kYjkxMmYtYmY2ZC00ZjI0LTk2YWUt
Y2M3YjI4OTkwYjgxLzEvX0JsYjFvS282YUVrMVlVOXhla0lxdWN6bTY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9kYjkxMmYtYmY2ZC00ZjI0LTk2YWUtY2M3YjI4OTkwYjgx
LzEvX0JsYjFvS282YUVrMVlVOXhla0lxdWN6bTY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcsxgXfcH
c5sqCqyooXiCy8PgRYS9AdEVVH94nntEFP79p5fVk5SC2m+yy74lmpRZpk7zcUEm
n36zS2wA3zx/qICAJsgceDvFTMxSJaXjGItRCi57N3FDFgTlSf0UF8kR3nOYOt46
CHoLSotjc24SCqZI6YJDpsN989QHOpDmHAKmXtd9vZpT0529xIBdHSQsJa9l1+NJ
ago/ZXUbemXA6QvpzwCuqPDEdh4VNc3aVJX5ZG34l3i6UsatGfP0jvPqVL/XbvdE
6L/69gC7jQzDt6BOm20Guz/KaZgcwmh+pQG6lIzchhdXxjyGfwlNBeV/+bmLfzKX
Acj0xP9A5+gNWg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:37 2025 by rpki-client