Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
File: BLVuw7rwqesioTYUdj8YFF0M8Eo.mft (raw, json)
Hash identifier: O8O2ziUYb3nrE+ahZowsMMIFbAgjwV42bYqFeoLEgo8=
Subject key identifier: 78:EE:38:AD:CB:9A:31:F1:E1:66:D0:53:67:C4:8B:6C:CE:6F:9C:45
Authority key identifier: 04:B5:6E:C3:BA:F0:A9:EB:22:A1:36:14:76:3F:18:14:5D:0C:F0:4A
Certificate issuer: /CN=04b56ec3baf0a9eb22a13614763f18145d0cf04a
Certificate serial: 019A28C2C85C43B27DB74F04831EB55B141E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
Manifest number: 03F2
Signing time: Tue 28 Oct 2025 03:00:45 +0000
Manifest this update: Tue 28 Oct 2025 03:00:45 +0000
Manifest next update: Wed 29 Oct 2025 03:00:45 +0000
Files and hashes: 1: BLVuw7rwqesioTYUdj8YFF0M8Eo.crl (hash: ZoPGssDFtnZfYQbinoDdqTU0sf+2an0ChwWCmK3ONF8=)
2: CQgo9i7xKCKF-brlO7bOG3BNmVY.roa (hash: X8lPFkVQRlIn745XFiJL9ENZDguoL523rt5LMcrNdrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:c2:c8:5c:43:b2:7d:b7:4f:04:83:1e:b5:5b:14:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04b56ec3baf0a9eb22a13614763f18145d0cf04a
Validity
Not Before: Oct 28 03:00:45 2025 GMT
Not After : Oct 29 03:00:45 2025 GMT
Subject: CN=78ee38adcb9a31f1e166d05367c48b6cce6f9c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ab:36:1d:a8:e7:46:ef:19:6a:c2:d8:76:2c:
90:68:6c:ef:ae:a8:00:76:e5:c4:71:9b:93:25:0a:
a5:a1:95:7a:5d:5b:ae:4c:c9:23:9c:db:71:8e:56:
76:3b:64:6e:80:40:2a:ed:83:c7:21:36:11:ce:1d:
b6:27:a8:75:36:91:a5:29:03:7c:f7:77:c5:17:27:
38:74:90:e0:bc:c2:20:5b:e6:14:82:f6:d9:27:77:
de:fe:e8:2f:93:af:eb:ff:7f:c1:74:bd:8b:fd:17:
dc:78:6f:d2:21:73:37:cc:91:e3:81:4b:47:0f:5d:
db:e1:d6:a8:0c:2f:a6:11:11:4f:3a:2a:5c:b2:bc:
30:58:cd:89:2b:0a:a0:91:a7:23:c3:1e:51:ac:4a:
c7:2f:92:93:94:72:aa:6f:49:9b:02:c4:02:0d:86:
8c:f4:93:1a:5f:3c:ba:91:1e:01:9a:e9:e7:cc:2d:
0c:7f:7a:58:11:f5:9c:1c:99:e5:51:07:2b:93:e6:
0d:7b:9f:6b:bb:29:45:71:28:9b:f4:c1:c1:f9:25:
2e:a1:f2:e4:a6:79:d7:e6:fe:b4:6b:92:52:21:af:
04:32:99:63:97:80:d0:7e:12:dd:70:a9:71:3b:25:
65:95:c5:d8:8b:f4:df:d7:bf:22:76:35:36:a7:82:
45:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:EE:38:AD:CB:9A:31:F1:E1:66:D0:53:67:C4:8B:6C:CE:6F:9C:45
X509v3 Authority Key Identifier:
keyid:04:B5:6E:C3:BA:F0:A9:EB:22:A1:36:14:76:3F:18:14:5D:0C:F0:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:49:f4:3c:03:19:d0:fe:2e:a7:9c:9d:91:3c:2f:5a:e3:da:
aa:9c:6b:cc:8a:15:24:f4:ba:0e:8b:24:9d:aa:1e:74:88:5d:
2d:75:9c:3c:b5:e9:90:8f:f3:ca:99:df:0d:ac:50:94:a2:43:
ce:8a:88:82:dc:ac:e7:dd:27:4e:63:79:40:d1:4d:b1:74:bf:
d7:17:8a:62:bf:a1:3c:ee:41:ae:cb:5f:33:e0:ea:f7:55:72:
9a:e7:af:af:76:f3:d3:2b:91:cb:43:83:24:11:ce:8e:40:34:
04:83:d6:26:e1:b3:b9:b6:59:0d:a1:5a:1f:b4:fa:dd:f5:23:
d9:4d:80:37:8d:93:04:d2:b4:b8:e0:ea:98:c5:a2:ac:28:13:
9b:76:cc:a9:36:91:5d:b9:02:4b:a0:ac:f3:e8:2e:bb:0c:db:
26:44:6f:8c:03:a1:a6:b9:1f:f9:16:21:18:78:a9:25:06:83:
8e:5a:94:7d:91:7e:e6:f2:58:47:24:9c:9c:ab:7a:9e:a9:2c:
7c:f3:49:7c:4b:01:00:6c:f3:c8:a8:0a:ef:69:34:0d:1e:d1:
4a:b7:89:33:4f:d5:b9:2f:5e:b1:b7:70:d0:40:45:6b:c8:34:
b0:97:28:00:26:8b:1f:78:e1:20:a7:b3:6c:bb:be:10:3b:ed:
1a:e3:1d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:44:03 2025 by rpki-client