Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft
File: bLm_6TNtoFV5BgineljMq8SWhpQ.mft (raw, json)
Hash identifier: IpxPI2Gag85iG8sdo3ZHXj+3TGd+H/zjKyWEdQtRNaM=
Subject key identifier: 6B:32:50:E9:EF:27:FB:37:08:87:55:29:A6:84:0B:6C:76:34:ED:6D
Authority key identifier: 6C:B9:BF:E9:33:6D:A0:55:79:06:08:A7:7A:58:CC:AB:C4:96:86:94
Certificate issuer: /CN=6cb9bfe9336da055790608a77a58ccabc4968694
Certificate serial: 019A7225FDE9B3D7D1A74EFA3A91231329C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLm_6TNtoFV5BgineljMq8SWhpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft
Manifest number: 0DC4
Signing time: Tue 11 Nov 2025 09:01:23 +0000
Manifest this update: Tue 11 Nov 2025 09:01:23 +0000
Manifest next update: Wed 12 Nov 2025 09:01:23 +0000
Files and hashes: 1: bLm_6TNtoFV5BgineljMq8SWhpQ.crl (hash: RwMOfWg6+rwctclCkRkgsG0vr/kSExiI/crzMxfZBNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLm_6TNtoFV5BgineljMq8SWhpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:fd:e9:b3:d7:d1:a7:4e:fa:3a:91:23:13:29:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb9bfe9336da055790608a77a58ccabc4968694
Validity
Not Before: Nov 11 09:01:23 2025 GMT
Not After : Nov 12 09:01:23 2025 GMT
Subject: CN=6b3250e9ef27fb3708875529a6840b6c7634ed6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a3:57:4c:32:c0:9c:ba:90:31:51:6a:3d:63:
a9:1c:e8:90:db:5a:01:4f:04:71:47:f3:0c:0d:0f:
92:6c:a3:d0:85:4f:f6:45:d7:18:e7:42:2a:9d:3d:
e4:ba:a4:04:ca:ab:b1:af:ca:fe:9d:73:03:bb:eb:
70:06:03:17:ec:68:f1:14:49:c3:7d:51:d1:f8:6e:
b5:e7:c6:bb:71:12:40:66:fb:43:ae:11:a8:ef:08:
2b:93:04:f6:16:cd:07:d6:c5:05:19:8f:66:3a:c1:
80:8c:f5:de:6d:5a:c9:21:ee:ba:e2:b9:ef:0d:4e:
74:3c:52:48:1d:a8:96:b5:d7:f0:37:28:18:4a:53:
33:d3:bc:6e:54:71:0d:b4:ea:13:30:1a:33:e4:70:
f8:a1:c0:c2:8c:6d:be:d6:16:ba:0a:fc:49:ff:d5:
e0:80:87:9f:5e:53:a7:69:c6:64:c3:02:61:61:98:
95:4c:0d:35:90:c4:5b:63:09:24:f2:d0:ed:82:f3:
cb:b3:16:45:6b:ea:cf:a4:6f:25:f8:13:39:aa:ae:
68:a5:9c:f0:8a:97:a5:84:cd:ef:89:07:aa:0c:9b:
42:5d:8a:2b:7e:ab:fe:12:4a:fb:0e:42:22:94:5f:
c5:da:67:18:7e:94:de:4a:10:4e:5c:66:89:cc:53:
16:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:32:50:E9:EF:27:FB:37:08:87:55:29:A6:84:0B:6C:76:34:ED:6D
X509v3 Authority Key Identifier:
keyid:6C:B9:BF:E9:33:6D:A0:55:79:06:08:A7:7A:58:CC:AB:C4:96:86:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLm_6TNtoFV5BgineljMq8SWhpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:75:78:6f:4d:b0:f5:64:91:69:4d:fb:cb:e4:5a:7b:87:aa:
2f:2e:1f:6f:02:6f:f0:f0:e6:02:df:73:a6:70:75:ac:c8:71:
61:6e:2e:65:ee:da:7b:8b:4c:5c:e1:3b:a0:6b:fc:b3:68:81:
13:3a:57:2b:35:c8:a4:3b:ff:0a:c8:f7:2f:6b:0c:b8:72:89:
9b:a7:6d:cd:cd:9b:87:58:7b:2d:0a:f9:ca:6c:ca:52:08:18:
06:12:26:26:e7:f4:92:0c:5a:02:6d:87:61:5b:33:3b:c3:f2:
04:e7:ef:51:95:95:00:1f:21:f7:77:7e:c4:f2:aa:b9:bc:41:
84:9f:2a:3a:c2:28:3e:83:4e:af:7d:82:b8:25:ff:13:aa:f6:
99:52:e6:b6:1e:bf:dc:16:08:7c:7c:67:a3:1d:c3:6f:f3:a5:
b1:e7:7f:20:a7:f3:1e:76:35:21:6b:f4:dd:9e:ad:89:bd:b4:
39:4a:72:d1:ba:9c:fd:4a:7f:36:07:23:75:97:fa:71:cf:c1:
15:d5:8c:fa:4b:d7:f4:92:2b:36:5a:46:f5:23:48:41:2a:e4:
85:6f:10:cc:06:d2:b7:c8:1f:b9:0e:8e:5e:bb:09:42:85:97:
26:90:a9:92:d2:47:9b:ad:e2:9c:28:18:1f:72:cc:d7:c6:03:
7a:05:ba:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJf3ps9fRp076OpEjEynAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYjliZmU5MzM2ZGEwNTU3OTA2MDhhNzdhNThjY2FiYzQ5
Njg2OTQwHhcNMjUxMTExMDkwMTIzWhcNMjUxMTEyMDkwMTIzWjAzMTEwLwYDVQQD
Eyg2YjMyNTBlOWVmMjdmYjM3MDg4NzU1MjlhNjg0MGI2Yzc2MzRlZDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KNXTDLAnLqQMVFqPWOpHOiQ21oB
TwRxR/MMDQ+SbKPQhU/2RdcY50IqnT3kuqQEyquxr8r+nXMDu+twBgMX7GjxFEnD
fVHR+G6158a7cRJAZvtDrhGo7wgrkwT2Fs0H1sUFGY9mOsGAjPXebVrJIe664rnv
DU50PFJIHaiWtdfwNygYSlMz07xuVHENtOoTMBoz5HD4ocDCjG2+1ha6CvxJ/9Xg
gIefXlOnacZkwwJhYZiVTA01kMRbYwkk8tDtgvPLsxZFa+rPpG8l+BM5qq5opZzw
ipelhM3viQeqDJtCXYorfqv+Ekr7DkIilF/F2mcYfpTeShBOXGaJzFMWhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsyUOnvJ/s3CIdVKaaEC2x2NO1tMB8GA1UdIwQY
MBaAFGy5v+kzbaBVeQYIp3pYzKvEloaUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkxtXzZUTnRvRlY1QmdpbmVsak1xOFNXaHBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi82ZmUzZmEtOTY4Mi00ODA3LTkyNzIt
Y2ZkMDBkZDgyN2VlLzEvYkxtXzZUTnRvRlY1QmdpbmVsak1xOFNXaHBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi82ZmUzZmEtOTY4Mi00ODA3LTkyNzItY2ZkMDBkZDgyN2Vl
LzEvYkxtXzZUTnRvRlY1QmdpbmVsak1xOFNXaHBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3V4b02w
9WSRaU37y+Rae4eqLy4fbwJv8PDmAt9zpnB1rMhxYW4uZe7ae4tMXOE7oGv8s2iB
EzpXKzXIpDv/Csj3L2sMuHKJm6dtzc2bh1h7LQr5ymzKUggYBhImJuf0kgxaAm2H
YVszO8PyBOfvUZWVAB8h93d+xPKqubxBhJ8qOsIoPoNOr32CuCX/E6r2mVLmth6/
3BYIfHxnox3Db/Olsed/IKfzHnY1IWv03Z6tib20OUpy0bqc/Up/NgcjdZf6cc/B
FdWM+kvX9JIrNlpG9SNIQSrkhW8QzAbSt8gfuQ6OXrsJQoWXJpCpktJHm63inCgY
H3LM18YDegW6dw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:39 2025 by rpki-client