Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.mft
File: BLHnVu2xw70vV2afWCv2qVG4P0g.mft (raw, json)
Hash identifier: FBa1wxE4L5d1M0HLDL+d633or2a6KdyZn/aK+pstNis=
Subject key identifier: CB:4A:06:D8:83:41:58:B2:B0:16:C3:DF:B7:7D:26:07:B3:38:D0:76
Authority key identifier: 04:B1:E7:56:ED:B1:C3:BD:2F:57:66:9F:58:2B:F6:A9:51:B8:3F:48
Certificate issuer: /CN=04b1e756edb1c3bd2f57669f582bf6a951b83f48
Certificate serial: 019A2C326AF9711CB8A63A5C037E27457A23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLHnVu2xw70vV2afWCv2qVG4P0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.mft
Manifest number: 16FB
Signing time: Tue 28 Oct 2025 19:01:32 +0000
Manifest this update: Tue 28 Oct 2025 19:01:32 +0000
Manifest next update: Wed 29 Oct 2025 19:01:32 +0000
Files and hashes: 1: BLHnVu2xw70vV2afWCv2qVG4P0g.crl (hash: g3hZDDGbUiw80NR1LyBp1lOiTX3H4OiY/ULJWIMuYr4=)
2: RK9xACY5XxzSQaeBbJjDwmPGdFw.roa (hash: Z9/aIdSLDIxdeAqdfXn6u/SeZl9dpZ2YPR093LrIQCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/BLHnVu2xw70vV2afWCv2qVG4P0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:32:6a:f9:71:1c:b8:a6:3a:5c:03:7e:27:45:7a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04b1e756edb1c3bd2f57669f582bf6a951b83f48
Validity
Not Before: Oct 28 19:01:32 2025 GMT
Not After : Oct 29 19:01:32 2025 GMT
Subject: CN=cb4a06d8834158b2b016c3dfb77d2607b338d076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:36:06:a4:71:93:e7:0b:e0:9e:ac:e0:06:d9:
11:a2:c3:3c:71:f4:40:bd:6b:e1:41:48:49:bb:66:
f7:ee:60:ce:4b:9d:9b:96:dd:e5:c2:cb:3f:d4:bd:
2b:68:31:ac:36:d7:0c:e2:e1:ed:51:39:dc:d9:21:
c9:53:3a:7e:e8:d6:db:8e:e7:ea:66:39:8a:52:b0:
34:3e:2e:3c:28:af:11:c2:5e:90:cd:fe:2a:e8:0f:
a7:9c:8e:9e:a5:15:ed:14:72:77:85:62:19:46:45:
16:d5:0f:8c:51:f7:1d:96:63:eb:ca:fb:06:38:5b:
54:c2:34:5b:b5:ca:c4:2b:6f:15:a0:bc:d4:1b:e7:
1c:8a:d4:bd:4b:85:fa:7d:1c:ed:bb:be:75:e4:79:
bf:6a:1f:44:c3:11:98:0b:b4:56:58:0b:b0:61:7c:
a1:f7:2e:b5:82:a2:9c:6e:c3:86:fa:2e:57:0d:2a:
fd:9f:96:4d:9d:3e:c6:a9:a5:44:da:c4:32:7a:0c:
3f:2d:e1:55:7f:11:f2:be:51:37:38:3a:87:57:fc:
68:56:33:44:03:21:cc:15:8b:1c:c7:0b:01:d5:42:
69:22:fc:af:73:5d:62:59:59:22:c7:86:33:e1:93:
50:d3:2a:4e:3a:61:ef:8f:5d:4b:dc:54:b6:18:3d:
5d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4A:06:D8:83:41:58:B2:B0:16:C3:DF:B7:7D:26:07:B3:38:D0:76
X509v3 Authority Key Identifier:
keyid:04:B1:E7:56:ED:B1:C3:BD:2F:57:66:9F:58:2B:F6:A9:51:B8:3F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLHnVu2xw70vV2afWCv2qVG4P0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:6a:a3:8e:5d:db:fd:9c:bf:92:1a:e3:f6:8c:93:93:e7:ae:
91:cc:1f:52:57:54:ba:e2:ae:2a:51:eb:66:13:df:cc:81:3b:
16:fa:ab:44:4b:9f:d3:ed:9f:79:00:43:a0:d8:ee:8b:20:b4:
7e:23:26:23:57:98:e1:d4:9d:bd:18:94:7e:d0:3a:b0:df:f0:
39:7b:ae:e1:f0:7a:c6:a5:9f:98:9f:5b:75:89:ee:fa:97:8c:
7c:75:41:b3:9c:93:33:44:1e:7f:e7:d6:78:15:3d:b9:82:35:
6c:3d:c9:60:2c:26:54:4b:31:e5:97:36:f2:c7:c8:57:1c:fa:
14:37:38:68:d3:38:f7:77:ae:b9:8a:10:7c:1a:2b:26:94:bf:
b8:9d:fb:a4:f7:62:83:99:9f:2c:95:a0:77:53:e7:df:ab:32:
ca:77:b8:7a:82:82:a4:2b:52:92:07:b8:8d:e3:a9:2f:47:07:
69:dd:78:a2:e2:67:c0:ba:f6:02:3e:15:70:51:32:4a:9b:df:
12:10:ee:c9:80:9b:3d:44:75:1e:c3:41:c9:bc:9b:d5:56:b7:
74:90:a9:74:01:fd:13:65:5c:9a:48:ba:e0:d5:14:6e:88:56:
c2:bf:5d:02:0a:3e:ac:5d:a5:a3:95:3c:2a:35:32:92:d1:92:
ea:3f:70:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZosMmr5cRy4pjpcA34nRXojMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YjFlNzU2ZWRiMWMzYmQyZjU3NjY5ZjU4MmJmNmE5NTFi
ODNmNDgwHhcNMjUxMDI4MTkwMTMyWhcNMjUxMDI5MTkwMTMyWjAzMTEwLwYDVQQD
EyhjYjRhMDZkODgzNDE1OGIyYjAxNmMzZGZiNzdkMjYwN2IzMzhkMDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jYGpHGT5wvgnqzgBtkRosM8cfRA
vWvhQUhJu2b37mDOS52blt3lwss/1L0raDGsNtcM4uHtUTnc2SHJUzp+6Nbbjufq
ZjmKUrA0Pi48KK8Rwl6Qzf4q6A+nnI6epRXtFHJ3hWIZRkUW1Q+MUfcdlmPryvsG
OFtUwjRbtcrEK28VoLzUG+ccitS9S4X6fRztu7515Hm/ah9EwxGYC7RWWAuwYXyh
9y61gqKcbsOG+i5XDSr9n5ZNnT7GqaVE2sQyegw/LeFVfxHyvlE3ODqHV/xoVjNE
AyHMFYscxwsB1UJpIvyvc11iWVkix4Yz4ZNQ0ypOOmHvj11L3FS2GD1drwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMtKBtiDQViysBbD37d9JgezONB2MB8GA1UdIwQY
MBaAFASx51btscO9L1dmn1gr9qlRuD9IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkxIblZ1Mnh3NzB2VjJhZldDdjJxVkc0UDBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9hNWIzNjgtMzMxMy00MTMyLTk4OTct
ZDAxNzk1N2VhMzllLzEvQkxIblZ1Mnh3NzB2VjJhZldDdjJxVkc0UDBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9hNWIzNjgtMzMxMy00MTMyLTk4OTctZDAxNzk1N2VhMzll
LzEvQkxIblZ1Mnh3NzB2VjJhZldDdjJxVkc0UDBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiWqjjl3b
/Zy/khrj9oyTk+eukcwfUldUuuKuKlHrZhPfzIE7FvqrREuf0+2feQBDoNjuiyC0
fiMmI1eY4dSdvRiUftA6sN/wOXuu4fB6xqWfmJ9bdYnu+peMfHVBs5yTM0Qef+fW
eBU9uYI1bD3JYCwmVEsx5Zc28sfIVxz6FDc4aNM493euuYoQfBorJpS/uJ37pPdi
g5mfLJWgd1Pn36syyne4eoKCpCtSkge4jeOpL0cHad14ouJnwLr2Aj4VcFEySpvf
EhDuyYCbPUR1HsNBybyb1Va3dJCpdAH9E2Vcmki64NUUbohWwr9dAgo+rF2lo5U8
KjUyktGS6j9w6w==
-----END CERTIFICATE-----
Generated at Tue Oct 28 21:50:24 2025 by rpki-client