Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
File: _Blb1oKo6aEk1YU9xekIquczm64.mft (raw, json)
Hash identifier: uxW+j8TUP8D5Dlu+USia/tA9LsC/+gsozpNEhCNXCHk=
Subject key identifier: 76:0C:41:62:6E:EA:BD:8D:26:F6:5E:02:64:93:2F:36:80:52:D5:BD
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial: 01973E090F97B3FB33A5115EEFBABB77F7F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
Manifest number: 131D
Signing time: Thu 05 Jun 2025 03:01:10 +0000
Manifest this update: Thu 05 Jun 2025 03:01:10 +0000
Manifest next update: Fri 06 Jun 2025 03:01:10 +0000
Files and hashes: 1: C0o6u4617ldzXCQhJDGF4IWONDQ.roa (hash: oggwBkJK9nhHHHUHaINutEQuhqdlfpUhFtxzmUm75kw=)
2: _Blb1oKo6aEk1YU9xekIquczm64.crl (hash: 35i8W3hGqmxVo+5yGvbF5PX/o690JuwRLXFmuwe/9CI=)
3: eFaXAXJtU1k2p2wxUd4r6QNwVqc.roa (hash: RkwbFEsvbm5cD3j9VERr9RV6cFSAdbYRW8TdBaZFLJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 21:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3e:09:0f:97:b3:fb:33:a5:11:5e:ef:ba:bb:77:f7:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Validity
Not Before: Jun 5 03:01:10 2025 GMT
Not After : Jun 6 03:01:10 2025 GMT
Subject: CN=760c41626eeabd8d26f65e0264932f368052d5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:10:5c:9a:38:2d:11:73:97:01:5c:55:75:83:
52:32:a3:96:8f:db:ad:7f:02:95:0d:1a:b6:94:88:
14:95:bd:b4:bb:cc:82:6b:7d:51:66:f3:16:d5:73:
26:72:d5:dd:43:af:7a:b3:ab:24:bb:c6:f8:7b:d8:
80:b4:18:ea:a8:7d:5e:85:bd:5b:49:b9:bc:6b:ca:
3c:bf:79:04:7f:c6:70:62:ff:12:98:df:c3:dc:e2:
8d:b5:a6:41:f7:3a:b7:48:5e:32:8a:78:97:d4:ad:
b1:dd:9d:7d:bd:27:9e:20:eb:19:9b:c5:6a:67:c2:
82:5b:93:81:d8:0b:23:b3:8d:34:5e:4f:0e:36:5e:
91:e1:2b:39:22:5e:e9:6c:4d:bf:e6:38:7d:81:92:
69:ce:b6:d8:32:75:1d:f2:dd:ba:f9:e9:b0:01:76:
3e:4b:d2:1e:2e:30:47:2a:34:9c:57:7a:22:41:84:
2f:35:38:ec:19:4d:62:6a:7f:77:44:0f:eb:5a:cf:
1d:fc:2f:1a:94:f8:78:55:a9:c8:7a:36:bb:97:1c:
90:70:7c:72:8e:bd:df:1a:5a:75:60:e9:31:1d:8d:
1b:ed:43:f4:c0:d5:1b:d9:27:92:bd:fe:ab:02:29:
7f:57:05:97:07:60:f2:8d:94:ba:77:58:40:ea:8e:
46:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0C:41:62:6E:EA:BD:8D:26:F6:5E:02:64:93:2F:36:80:52:D5:BD
X509v3 Authority Key Identifier:
keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:1b:f0:ea:ed:7b:fe:10:83:94:0c:ac:48:5e:f1:8e:e0:0e:
99:14:70:dd:6e:b2:10:24:c6:b4:47:2f:a3:62:b1:f8:08:98:
8f:b7:48:d8:e3:a6:56:a3:08:45:91:35:4e:61:6a:b2:b0:b2:
84:4c:3e:04:e7:24:b8:e6:65:89:cf:d9:03:c4:45:c0:45:44:
f8:5e:e4:d2:1a:c8:27:a5:79:4a:20:27:5c:ab:a3:98:ac:4d:
00:e3:a4:ac:38:5d:6f:b6:b3:57:c3:5a:12:55:e9:a3:29:49:
57:ab:86:18:97:c7:c7:e6:3f:04:44:b0:26:53:69:16:73:51:
dc:ba:fe:fa:65:a0:36:b1:0c:bb:25:b2:34:76:a1:d8:ff:29:
29:c8:35:87:f7:9d:66:a4:ac:3c:1c:27:e1:80:18:9b:8e:73:
6c:07:6d:58:90:2b:aa:e0:01:57:9f:07:59:94:67:ce:e8:85:
f9:6c:22:37:56:61:cd:6b:01:5d:30:26:56:8c:6f:fa:f9:10:
a5:03:2b:de:4c:5e:8b:23:dd:dc:3e:cd:00:6e:87:df:1f:32:
b9:fb:23:e3:02:a9:92:a8:2c:05:be:66:ea:62:96:5e:52:ee:
03:a1:00:ec:6c:06:9f:be:cb:e4:53:59:fa:bc:14:ad:25:c1:
2f:40:d6:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZc+CQ+Xs/szpRFe77q7d/f4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMTk1YmQ2ODJhOGU5YTEyNGQ1ODUzZGM1ZTkwOGFhZTcz
MzliYWUwHhcNMjUwNjA1MDMwMTEwWhcNMjUwNjA2MDMwMTEwWjAzMTEwLwYDVQQD
Eyg3NjBjNDE2MjZlZWFiZDhkMjZmNjVlMDI2NDkzMmYzNjgwNTJkNWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxBcmjgtEXOXAVxVdYNSMqOWj9ut
fwKVDRq2lIgUlb20u8yCa31RZvMW1XMmctXdQ696s6sku8b4e9iAtBjqqH1ehb1b
Sbm8a8o8v3kEf8ZwYv8SmN/D3OKNtaZB9zq3SF4yiniX1K2x3Z19vSeeIOsZm8Vq
Z8KCW5OB2Asjs400Xk8ONl6R4Ss5Il7pbE2/5jh9gZJpzrbYMnUd8t26+emwAXY+
S9IeLjBHKjScV3oiQYQvNTjsGU1ian93RA/rWs8d/C8alPh4VanIeja7lxyQcHxy
jr3fGlp1YOkxHY0b7UP0wNUb2SeSvf6rAil/VwWXB2DyjZS6d1hA6o5GIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYMQWJu6r2NJvZeAmSTLzaAUtW9MB8GA1UdIwQY
MBaAFPwZW9aCqOmhJNWFPcXpCKrnM5uuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0JsYjFvS282YUVrMVlVOXhla0lxdWN6bTY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9kYjkxMmYtYmY2ZC00ZjI0LTk2YWUt
Y2M3YjI4OTkwYjgxLzEvX0JsYjFvS282YUVrMVlVOXhla0lxdWN6bTY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9kYjkxMmYtYmY2ZC00ZjI0LTk2YWUtY2M3YjI4OTkwYjgx
LzEvX0JsYjFvS282YUVrMVlVOXhla0lxdWN6bTY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPRvw6u17
/hCDlAysSF7xjuAOmRRw3W6yECTGtEcvo2Kx+AiYj7dI2OOmVqMIRZE1TmFqsrCy
hEw+BOckuOZlic/ZA8RFwEVE+F7k0hrIJ6V5SiAnXKujmKxNAOOkrDhdb7azV8Na
ElXpoylJV6uGGJfHx+Y/BESwJlNpFnNR3Lr++mWgNrEMuyWyNHah2P8pKcg1h/ed
ZqSsPBwn4YAYm45zbAdtWJArquABV58HWZRnzuiF+WwiN1ZhzWsBXTAmVoxv+vkQ
pQMr3kxeiyPd3D7NAG6H3x8yufsj4wKpkqgsBb5m6mKWXlLuA6EA7GwGn77L5FNZ
+rwUrSXBL0DWaA==
-----END CERTIFICATE-----
Generated at Thu Jun 5 05:11:38 2025 by rpki-client