Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.mft
File: BLHnVu2xw70vV2afWCv2qVG4P0g.mft (raw, json)
Hash identifier: Z6kCOHjYY9QaRyTqZuVWDkJBl0Qg78Kj5IRYRXly8FQ=
Subject key identifier: DB:4D:76:6E:29:78:0C:12:8D:19:7A:AC:CC:23:CD:41:51:4A:57:D1
Authority key identifier: 04:B1:E7:56:ED:B1:C3:BD:2F:57:66:9F:58:2B:F6:A9:51:B8:3F:48
Certificate issuer: /CN=04b1e756edb1c3bd2f57669f582bf6a951b83f48
Certificate serial: 0199312548338648F47784BF0760CEAB0B6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLHnVu2xw70vV2afWCv2qVG4P0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.mft
Manifest number: 1679
Signing time: Wed 10 Sep 2025 01:02:30 +0000
Manifest this update: Wed 10 Sep 2025 01:02:30 +0000
Manifest next update: Thu 11 Sep 2025 01:02:30 +0000
Files and hashes: 1: BLHnVu2xw70vV2afWCv2qVG4P0g.crl (hash: GK1celzRKTOcqadoBF3WiqmwAhHNhGGFG9XWxMw+Qc0=)
2: RK9xACY5XxzSQaeBbJjDwmPGdFw.roa (hash: Z9/aIdSLDIxdeAqdfXn6u/SeZl9dpZ2YPR093LrIQCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/BLHnVu2xw70vV2afWCv2qVG4P0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:25:48:33:86:48:f4:77:84:bf:07:60:ce:ab:0b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04b1e756edb1c3bd2f57669f582bf6a951b83f48
Validity
Not Before: Sep 10 01:02:30 2025 GMT
Not After : Sep 11 01:02:30 2025 GMT
Subject: CN=db4d766e29780c128d197aaccc23cd41514a57d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b6:a2:7f:49:83:b8:f3:ed:ab:3f:32:79:f0:
b3:bc:66:77:4b:59:b9:b1:24:7a:b2:72:31:04:0e:
cd:5b:4b:ff:74:5a:c7:7f:3f:38:00:7b:01:03:23:
2f:d0:1d:b7:1b:f6:ee:9d:54:f8:ec:0a:f2:6b:cf:
5a:4b:1e:22:63:a4:8c:1c:77:db:24:55:ce:82:e7:
18:f7:03:e1:1c:61:fd:b6:2f:0b:17:00:4e:ae:f7:
fd:b9:70:d0:1e:22:93:1e:75:70:e4:5f:a2:75:bf:
6b:cb:fd:2e:26:ba:ad:b6:4d:b4:df:97:98:3b:ae:
99:25:d1:8c:1e:9c:20:6b:dd:49:e2:3b:8c:f4:3c:
9c:6a:f8:b0:28:4c:7b:81:ff:67:67:7e:65:6a:be:
21:ee:8f:63:05:ec:68:f9:4e:0b:8b:82:c2:63:15:
ed:71:40:f0:ee:9b:53:0f:16:dd:b9:e8:9c:a4:6b:
0e:44:20:1c:49:7d:a4:86:3c:0d:33:3b:68:92:39:
ab:9a:0f:ae:2d:69:71:d3:6d:9d:90:4e:f2:73:58:
e4:46:e5:51:da:a4:58:33:ae:9d:04:ed:fb:df:46:
17:c9:a5:24:04:86:76:81:8d:44:3c:9e:f9:05:1a:
80:71:22:9f:a7:1b:63:b7:fd:3a:3f:0d:46:0c:83:
5e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4D:76:6E:29:78:0C:12:8D:19:7A:AC:CC:23:CD:41:51:4A:57:D1
X509v3 Authority Key Identifier:
keyid:04:B1:E7:56:ED:B1:C3:BD:2F:57:66:9F:58:2B:F6:A9:51:B8:3F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLHnVu2xw70vV2afWCv2qVG4P0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b4:24:ca:80:0f:0f:94:a9:25:ba:66:85:16:80:a3:36:2f:
5d:09:c1:5b:67:eb:b5:10:21:55:6e:9d:1d:91:8d:ff:e6:eb:
15:a4:03:01:97:c1:04:f0:b1:6d:f4:4b:8b:de:2a:86:17:e7:
b9:1a:6b:28:8a:01:00:5b:8e:2a:93:f6:31:ea:12:87:de:74:
50:6b:ff:41:5b:7b:d2:98:8b:82:bf:f6:32:b4:60:9b:07:c8:
22:bb:e8:24:56:bb:18:c1:5f:5a:38:25:5c:b9:2b:ea:ef:7c:
a7:1b:8a:9d:a3:64:98:cd:1b:1d:73:a6:aa:44:aa:fa:d0:a7:
67:bc:e3:03:6e:fa:26:1b:0e:93:6b:c1:d0:5e:40:b9:39:6c:
69:e1:6f:5b:9d:03:c9:a2:14:51:ff:a9:d0:3c:50:66:ec:0b:
55:d3:2c:2b:56:f6:eb:dc:84:50:dd:5d:be:7e:a6:06:d2:0f:
53:ea:6e:d5:b8:50:0a:d0:66:5a:82:87:14:ae:15:d1:04:4c:
e0:11:1e:ea:35:23:8c:89:3a:76:67:50:b9:a5:10:8f:52:45:
84:e8:8d:29:1f:73:0f:32:22:04:93:97:0c:91:a2:a7:75:b1:
93:65:ba:58:e5:ce:a5:38:d7:cb:b1:09:fe:f4:27:ad:ef:54:
e1:c2:44:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 07:13:08 2025 by rpki-client