Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
File: BLw664svC0huXIwMec6djWixj5Y.mft (raw, json)
Hash identifier: tVjsTtK5hUJ0gXgsD201HMRUuUTvYdbVcylcX8dkgTc=
Subject key identifier: 92:02:CD:D0:B4:11:68:9E:3C:C3:82:28:8D:1B:5B:C9:83:7F:F1:B8
Authority key identifier: 04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
Certificate issuer: /CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Certificate serial: 019A56E4D256A03B416B371B4822C153D224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
Manifest number: 06BC
Signing time: Thu 06 Nov 2025 02:00:27 +0000
Manifest this update: Thu 06 Nov 2025 02:00:27 +0000
Manifest next update: Fri 07 Nov 2025 02:00:27 +0000
Files and hashes: 1: BLw664svC0huXIwMec6djWixj5Y.crl (hash: w+XRj6WBy+DR9r5b7cxcGRujDDj7d1QQ6NP91Zsx5fQ=)
2: RLDEvA5lT3OJsuLbbmV0pyamz6M.roa (hash: 08l04RNVeM6otYs3DB4mk2Ka+Bd48a32zNdlW+piPQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:e4:d2:56:a0:3b:41:6b:37:1b:48:22:c1:53:d2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Validity
Not Before: Nov 6 02:00:27 2025 GMT
Not After : Nov 7 02:00:27 2025 GMT
Subject: CN=9202cdd0b411689e3cc382288d1b5bc9837ff1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:73:8b:88:5d:13:4b:57:62:a3:77:b4:ed:a2:
6a:6a:55:e9:97:bb:94:ad:46:f0:8f:d7:bd:33:7f:
1b:c1:c2:aa:31:2d:ad:a8:10:71:41:af:df:97:ad:
f2:a9:fb:17:15:af:34:08:80:96:8d:ea:8b:f1:cb:
75:25:61:46:1a:9e:16:19:cf:f8:43:71:aa:90:30:
c8:cd:a9:42:88:de:65:6f:d5:7e:bd:69:9a:a8:e3:
be:d3:3d:e5:41:0b:68:fd:6e:9c:76:60:de:d6:59:
d0:2f:cc:a2:af:2e:6d:5d:49:e8:3b:6d:83:cb:a1:
e7:1a:cb:2b:97:73:32:59:43:23:90:d9:7e:a0:67:
bd:3b:f1:41:86:f7:2e:52:df:48:1c:3b:8b:50:e4:
c6:c0:3c:b4:5d:14:02:53:cc:70:16:44:25:3e:01:
65:08:a2:01:ee:c4:61:e8:71:5b:1e:3d:5d:c8:c7:
cb:39:f9:19:6f:6a:ef:e7:92:c9:5a:5c:ba:7d:e8:
c1:3a:62:d8:f9:68:30:12:c9:2d:f6:19:33:a5:fb:
a9:9b:62:ce:ab:68:16:c2:41:22:69:9b:da:45:60:
4a:b1:ca:d3:52:c1:82:a2:71:0e:08:76:df:b8:16:
2d:ba:b1:58:2b:90:d2:b4:f4:cf:d1:eb:ff:85:8c:
54:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:02:CD:D0:B4:11:68:9E:3C:C3:82:28:8D:1B:5B:C9:83:7F:F1:B8
X509v3 Authority Key Identifier:
keyid:04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ee:8e:63:03:10:6d:07:38:7d:38:bc:81:ad:ff:3b:7b:ba:
69:84:92:7f:44:da:82:4d:64:da:84:a4:43:c1:b8:9c:79:07:
7e:c4:71:e9:50:26:81:44:37:79:4e:f1:63:96:52:68:07:4e:
a5:c9:09:01:f9:da:c2:68:d6:7a:70:06:57:0b:c7:6a:0c:8b:
c7:13:02:fe:78:29:b5:ac:56:95:cf:db:5e:31:81:43:c1:27:
e3:a6:d3:e9:2c:64:50:28:b7:07:13:8c:37:76:ce:d1:06:23:
5d:cb:f8:cd:49:fa:58:db:dc:1c:47:13:3d:13:f2:b5:f4:7c:
bb:07:fd:c6:71:3e:49:20:53:6d:9c:a8:35:45:d8:67:d8:9c:
27:94:23:1a:19:dd:e0:46:51:15:e4:2d:de:01:76:0a:ff:13:
a1:9a:e7:6a:96:4f:78:43:98:7d:ce:c4:0b:76:27:67:fa:de:
dd:03:3a:60:a3:98:f7:97:8f:ca:b7:05:ec:39:6f:9d:f2:2d:
50:80:0e:6e:e9:a8:c4:35:b5:fb:c8:19:ba:00:d4:6b:85:4b:
f1:78:6c:7c:64:c0:a0:2b:2a:23:19:22:f2:17:5b:08:96:dc:
4d:3d:ea:8d:8f:69:06:af:91:4b:dd:67:50:30:f1:61:37:48:
cc:13:a5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 07:48:16 2025 by rpki-client