Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
File: BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft (raw, json)
Hash identifier: KSd5GotZ6YjfYp7rimjL0RYEFLgIpI33xrlYi2ecwIw=
Subject key identifier: 72:F5:9D:E7:68:1E:57:E3:FA:10:2F:41:E1:03:A5:AC:FD:D6:D6:58
Authority key identifier: 04:BE:DB:61:54:A8:79:5D:C4:CE:EF:A6:7A:18:FE:DF:C6:52:15:94
Certificate issuer: /CN=04bedb6154a8795dc4ceefa67a18fedfc6521594
Certificate serial: 019922FAF70C929FC281B4B41F670EF07B33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
Manifest number: 0502
Signing time: Sun 07 Sep 2025 07:01:36 +0000
Manifest this update: Sun 07 Sep 2025 07:01:36 +0000
Manifest next update: Mon 08 Sep 2025 07:01:36 +0000
Files and hashes: 1: BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl (hash: KdFpbQAuqhZMWNlFh6ioeoXdYmH7a4kaXZhg3o4qXE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:f7:0c:92:9f:c2:81:b4:b4:1f:67:0e:f0:7b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04bedb6154a8795dc4ceefa67a18fedfc6521594
Validity
Not Before: Sep 7 07:01:36 2025 GMT
Not After : Sep 8 07:01:36 2025 GMT
Subject: CN=72f59de7681e57e3fa102f41e103a5acfdd6d658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ce:69:2c:69:50:bc:dc:f3:23:ef:38:9a:40:
4c:57:01:75:0d:5a:e9:97:27:9b:c5:99:0a:c7:c0:
df:68:8a:81:73:ad:8d:c1:19:34:af:4c:10:b3:b9:
85:4a:c9:e7:a6:e2:f6:6d:20:2e:44:f9:f3:f9:ac:
aa:e0:2c:24:54:38:f7:14:9f:98:27:08:88:f4:ce:
bc:7a:c7:b4:f3:6b:8c:df:12:b8:22:ca:1b:3b:f9:
a0:21:66:4f:d6:1d:b3:8a:32:14:39:1e:b0:2e:30:
75:1c:4d:d5:22:44:f0:c0:08:9b:4c:13:8d:b2:b1:
87:d5:02:50:b6:e1:56:cc:1d:7a:83:ca:e2:0d:db:
36:8e:2b:ad:71:3d:a6:56:ad:d3:bd:4f:1a:f7:55:
e1:02:42:bb:b2:03:a3:33:27:05:be:8c:16:7c:2b:
79:97:da:bf:bc:03:a5:5a:77:88:27:1a:e5:bb:f4:
a4:a2:84:36:f5:bb:46:6f:40:00:32:13:fa:c6:62:
9d:86:42:1c:89:7e:88:86:c5:0b:30:66:e7:44:f5:
b1:fe:e3:ae:4c:e6:51:0d:45:8c:54:be:21:5c:f6:
8d:10:58:05:8d:85:2f:33:db:f8:07:48:84:3c:75:
b7:b2:f4:8a:67:4c:cd:03:fa:e4:33:3a:09:3a:6a:
42:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F5:9D:E7:68:1E:57:E3:FA:10:2F:41:E1:03:A5:AC:FD:D6:D6:58
X509v3 Authority Key Identifier:
keyid:04:BE:DB:61:54:A8:79:5D:C4:CE:EF:A6:7A:18:FE:DF:C6:52:15:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e3:df:be:28:25:f1:da:b3:8b:f8:39:06:8e:68:e1:14:31:
f1:dc:3f:80:62:d3:23:ba:63:c4:87:fb:36:3d:59:6b:94:c9:
dc:d8:3f:e5:84:0e:30:8b:73:62:60:18:3d:25:44:7d:77:9a:
1a:88:bb:93:e3:04:da:5b:18:ed:b7:8c:b6:7c:be:66:db:31:
de:2e:64:5b:87:7d:d4:82:36:a9:22:8e:d1:bf:8e:e4:94:1e:
27:8f:ab:3c:64:16:2b:2c:55:a9:0d:ce:3d:85:5e:64:ae:bf:
e3:30:06:e7:8b:7e:df:6a:0b:e1:6a:1c:40:63:3b:c5:e7:87:
23:ef:17:27:1d:f6:fd:08:4b:07:0d:12:1f:7d:cb:57:b9:33:
1d:15:29:4d:8d:32:07:01:c8:78:49:c0:e4:e3:74:13:af:cc:
08:60:77:d4:1f:47:4b:f4:07:bf:9d:c8:a6:a7:5b:b5:54:52:
65:35:47:be:b8:94:7d:9e:2e:1c:5e:f3:26:db:dc:18:cf:e4:
38:d8:41:5b:04:c3:24:a1:e4:e9:0a:d2:89:4f:ab:db:25:ca:
90:25:59:ff:bf:2f:81:e8:22:8b:b2:9f:20:67:30:6f:e5:4b:
b0:e5:44:c9:32:10:68:20:90:4e:ed:e2:a2:65:da:c0:0d:06:
dd:eb:1b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:18 2025 by rpki-client