Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
File: BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft (raw, json)
Hash identifier: 7mcCVgfyyw4UHi8uBtIeZ3O1KGIO+LfJkMdqEBmCbdA=
Subject key identifier: 04:C7:70:E4:14:F0:A7:1F:32:1E:F4:07:7B:49:66:AE:DE:A8:5C:FA
Authority key identifier: 04:BE:DB:61:54:A8:79:5D:C4:CE:EF:A6:7A:18:FE:DF:C6:52:15:94
Certificate issuer: /CN=04bedb6154a8795dc4ceefa67a18fedfc6521594
Certificate serial: 019A7112CF5CA8BD56C32309E4641468732D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
Manifest number: 05AF
Signing time: Tue 11 Nov 2025 04:00:49 +0000
Manifest this update: Tue 11 Nov 2025 04:00:49 +0000
Manifest next update: Wed 12 Nov 2025 04:00:49 +0000
Files and hashes: 1: BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl (hash: 0go/BB7yfrHsKCcYatKvI15hOoRGOU2RlpQg3zyjR9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:cf:5c:a8:bd:56:c3:23:09:e4:64:14:68:73:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04bedb6154a8795dc4ceefa67a18fedfc6521594
Validity
Not Before: Nov 11 04:00:49 2025 GMT
Not After : Nov 12 04:00:49 2025 GMT
Subject: CN=04c770e414f0a71f321ef4077b4966aedea85cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ed:c9:9c:3d:e4:52:d6:06:db:d7:5d:ae:2f:
84:8e:fa:89:79:1b:6e:14:b4:a2:50:4d:2b:3d:4a:
72:62:e6:a7:b4:0b:56:89:ed:47:30:c3:0d:85:fe:
22:f9:d5:8b:14:e0:ab:2e:39:b0:3e:81:fb:d9:22:
4e:d3:38:ec:1d:0c:01:ad:84:2b:f4:a2:65:00:04:
3d:09:b5:1f:93:38:a9:24:6b:08:26:69:c4:5d:33:
1c:4a:e9:d0:f4:d7:63:0e:6f:54:38:2f:06:18:fb:
94:bd:f7:03:a6:19:f6:c6:61:24:3d:29:18:76:6b:
17:e3:cc:c9:62:56:1b:9b:eb:ca:71:4a:b6:06:32:
dc:d3:4f:db:bf:46:ca:fa:9f:1d:49:41:26:b8:90:
39:b7:d5:95:46:69:e9:56:bc:b6:05:df:9d:ef:b7:
59:27:0c:25:49:2c:1b:04:f5:11:f5:d3:f6:49:6c:
bc:ab:64:a7:6a:5b:1b:ef:0c:8b:26:d8:9f:c0:f7:
06:ed:45:fd:4f:e2:c6:f8:30:60:8f:df:52:b9:46:
0b:a7:36:bb:d5:45:3f:95:9b:7a:11:94:ba:d3:c9:
18:b9:ab:6c:eb:04:e8:b8:62:44:11:8a:4f:01:c5:
b6:cd:f5:d7:02:85:d6:18:fc:f4:a1:17:b0:49:b9:
3b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C7:70:E4:14:F0:A7:1F:32:1E:F4:07:7B:49:66:AE:DE:A8:5C:FA
X509v3 Authority Key Identifier:
keyid:04:BE:DB:61:54:A8:79:5D:C4:CE:EF:A6:7A:18:FE:DF:C6:52:15:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:7c:d7:5b:de:ca:78:9b:34:e8:7c:dd:68:4b:36:81:3c:a1:
3b:e3:32:e7:f1:fe:3e:05:63:6d:90:43:87:15:51:2d:2d:db:
99:f8:9c:2f:86:f7:f0:66:5c:b8:e7:5b:0b:c5:0d:db:22:54:
62:af:bf:34:94:a6:e6:50:42:ec:4e:76:90:84:48:8a:af:78:
32:44:42:5a:7f:0a:53:04:06:ff:e5:20:52:04:b1:38:58:2a:
77:d2:f0:c7:a5:00:2e:f7:af:66:3c:c6:4b:bb:7d:52:7a:89:
69:5b:d2:0a:4e:1f:aa:61:83:42:bf:4b:13:09:e2:14:4c:41:
be:8b:b0:6b:f2:0e:0d:33:bf:cf:72:2b:08:fe:e3:05:55:56:
31:0f:d8:73:b3:3d:82:df:31:5b:0d:7a:42:e5:8b:54:43:88:
aa:6f:d8:93:25:07:45:13:d1:bf:7d:04:a4:0c:4a:84:94:e1:
fc:e5:73:ef:03:5f:f6:48:09:39:bd:19:4f:8e:28:ec:43:0e:
ad:b2:d8:12:4c:0b:63:9d:bc:27:82:43:2a:f6:2a:91:b9:df:
1d:ed:79:ad:d9:af:fa:4b:6f:cc:a0:f4:17:28:73:a9:5c:93:
d2:41:39:33:25:72:31:d4:35:62:ac:4f:f9:da:57:5c:5b:28:
c5:73:c3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:25 2025 by rpki-client