Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
File: bLJy2h2BJrUXGeWjRWiArfqInKM.mft (raw, json)
Hash identifier: LNF79EKRJie+V3g7IPD2x62vHjF06Sy3MJBaFzctBFo=
Subject key identifier: 1F:D6:3C:BF:0C:9F:CA:06:56:90:AB:2B:EB:78:7B:58:52:59:F4:EB
Authority key identifier: 6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3
Certificate issuer: /CN=6cb272da1d8126b51719e5a3456880adfa889ca3
Certificate serial: 019A240A1255E07152E5292C42B1103563EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
Manifest number: 168A
Signing time: Mon 27 Oct 2025 05:00:31 +0000
Manifest this update: Mon 27 Oct 2025 05:00:31 +0000
Manifest next update: Tue 28 Oct 2025 05:00:31 +0000
Files and hashes: 1: bLJy2h2BJrUXGeWjRWiArfqInKM.crl (hash: nEealSpE3embpvOdh6AtZ54WNkH33p3yj5pZOIpvuvM=)
2: uOnSDaCjeMs1-L4eA8Ozs6UPSSA.roa (hash: qYSuZ8A4rf2Pqbl96n2xsZCX23fJfZc0cHfaDMSlIAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:0a:12:55:e0:71:52:e5:29:2c:42:b1:10:35:63:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb272da1d8126b51719e5a3456880adfa889ca3
Validity
Not Before: Oct 27 05:00:31 2025 GMT
Not After : Oct 28 05:00:31 2025 GMT
Subject: CN=1fd63cbf0c9fca065690ab2beb787b585259f4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a9:86:93:91:d3:58:bf:bd:30:f9:81:02:30:
18:04:a5:35:e8:b4:4d:60:f9:84:43:f9:ac:d4:6a:
c2:13:d1:96:70:d6:09:17:63:53:27:3c:44:bb:19:
13:46:d1:26:7d:9f:86:27:11:a4:29:d3:94:37:4d:
5e:fa:66:5d:ca:2f:83:16:f5:3e:32:40:ca:d0:3e:
e3:8f:28:10:5b:0c:f5:8e:51:7f:1a:0a:3d:78:d8:
88:54:98:8b:54:0e:f4:8f:3c:f8:35:22:54:02:d0:
d6:82:bf:78:7c:1b:46:e1:24:77:f8:59:29:18:b6:
c9:4f:b7:3a:90:f5:35:ae:8d:ee:23:c4:f5:c6:f9:
99:ce:ef:94:58:b1:26:6e:52:e6:58:58:3c:3f:d8:
82:cd:84:a7:b0:93:c0:2c:df:8e:70:6e:29:ee:ae:
d1:d3:9c:7a:a1:05:cb:be:73:20:25:81:33:f2:49:
e4:78:c7:68:0d:91:04:4a:a2:c9:6a:ed:d4:55:99:
49:98:74:e6:a8:d9:c6:ba:8c:14:d3:ed:d6:1e:71:
a0:52:0a:8e:ad:89:01:04:84:e7:34:5a:f8:96:2c:
79:d5:bb:6e:3b:a7:33:2c:fc:41:cd:65:ea:1d:0a:
20:61:5d:b3:7c:1d:b9:c1:14:90:5c:29:01:a6:6c:
ae:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D6:3C:BF:0C:9F:CA:06:56:90:AB:2B:EB:78:7B:58:52:59:F4:EB
X509v3 Authority Key Identifier:
keyid:6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:1e:94:de:bd:18:e0:d1:2e:f0:12:05:ee:c3:52:c2:c1:d6:
0e:53:59:fb:f7:19:ee:aa:a5:d7:46:e3:2f:03:ff:a1:8a:72:
eb:fa:6b:07:44:b2:1d:07:ca:67:40:5e:d2:b7:5e:38:4b:d6:
06:7b:0c:02:1e:b5:08:2e:42:ba:d2:0b:5c:b2:12:58:6a:ce:
2b:10:67:35:e6:d5:ac:c7:07:02:41:fd:f9:00:a7:45:51:67:
3c:d3:a3:0b:00:20:c7:a9:04:d1:d1:e4:16:12:7a:cc:c3:be:
7c:5b:9c:f2:3f:cf:47:ce:cf:dc:0e:47:1a:e2:1a:1c:9b:b5:
a7:cf:71:ac:d6:96:eb:2e:98:c5:ca:44:01:10:83:3f:66:3a:
30:02:0b:63:07:c6:56:29:46:dd:b9:5c:18:96:f6:85:49:48:
cd:57:e5:1d:3e:5d:33:3e:0f:62:ae:0f:55:82:f6:e4:8a:03:
40:f5:61:2b:a8:6c:75:2f:4f:2f:2e:88:d0:fd:50:ea:30:2c:
a7:b1:1b:3a:88:9e:90:ce:63:d6:35:ca:09:31:38:d3:05:9e:
c1:81:e0:ce:25:dd:eb:27:a9:29:b8:9f:30:78:d2:80:3e:94:
ef:e8:1b:63:93:31:e9:6d:8b:71:d3:44:55:96:66:3d:3f:60:
00:21:ce:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:23:52 2025 by rpki-client