Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
File: blLhBfDoJucV9yzFywMSolNEJLo.mft (raw, json)
Hash identifier: mG191nI7OPMDl0A0LtJ7wAlijMyCjQbv2eagh/fWFEs=
Subject key identifier: AC:41:06:FC:C6:05:2F:A0:1A:55:DB:C7:53:74:4F:35:2D:57:CF:B9
Authority key identifier: 6E:52:E1:05:F0:E8:26:E7:15:F7:2C:C5:CB:03:12:A2:53:44:24:BA
Certificate issuer: /CN=6e52e105f0e826e715f72cc5cb0312a2534424ba
Certificate serial: 019A7293FAE5BD002BE3F5BD96D649C7A75E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
Manifest number: 084F
Signing time: Tue 11 Nov 2025 11:01:31 +0000
Manifest this update: Tue 11 Nov 2025 11:01:31 +0000
Manifest next update: Wed 12 Nov 2025 11:01:31 +0000
Files and hashes: 1: blLhBfDoJucV9yzFywMSolNEJLo.crl (hash: 9fLBbJKNMlH7hzel0wPsXZHnwOoQW3ayoog+tFvaACU=)
2: u8V9QKBVG0Y86-vjzjyTisw0D_Y.roa (hash: KYGcbVwlMJi9uEEQnPMzkMYGof5+7MNCgFq2TVdNdS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:fa:e5:bd:00:2b:e3:f5:bd:96:d6:49:c7:a7:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e52e105f0e826e715f72cc5cb0312a2534424ba
Validity
Not Before: Nov 11 11:01:31 2025 GMT
Not After : Nov 12 11:01:31 2025 GMT
Subject: CN=ac4106fcc6052fa01a55dbc753744f352d57cfb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e7:70:67:fb:55:17:86:14:7d:3e:93:24:92:
69:00:7a:45:f7:6b:09:eb:f1:2b:b7:3a:70:96:9f:
ae:c0:17:fb:6b:28:ee:2f:05:c3:75:18:a9:0f:91:
a7:92:91:25:d5:46:6a:fc:c5:99:3e:58:6d:d4:c9:
f6:cc:00:cc:02:f5:e1:ff:15:5d:bc:b5:cc:4f:e4:
d8:cb:10:90:00:ca:c4:db:26:d2:a4:a9:89:5d:a7:
26:54:11:10:03:f3:1c:fb:93:c4:bc:4a:54:8f:d4:
43:44:0d:3b:6f:3a:9b:7e:fc:d1:d8:07:7b:b7:3a:
03:a2:50:af:ee:73:4f:39:06:91:55:c2:7a:5e:80:
8b:a6:82:db:cb:b2:0f:a6:48:58:a3:35:8d:ae:46:
f1:3a:49:32:4b:b0:8f:3f:81:27:dd:9e:29:e6:36:
14:5b:8d:b0:f9:8f:ef:cd:13:2c:bf:36:96:14:0b:
34:4a:92:a9:6f:23:e4:92:c4:fb:76:2b:af:7d:ed:
1a:21:fb:a5:70:e0:00:e3:ed:45:28:eb:52:1d:89:
1d:0d:d1:e0:31:d5:71:11:89:80:4a:2c:bc:70:c1:
11:30:5a:6a:d9:e9:d3:7b:3f:86:8e:45:a5:5b:66:
5b:ce:af:c7:a5:2b:96:06:62:1d:00:8f:3c:4f:7d:
33:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:41:06:FC:C6:05:2F:A0:1A:55:DB:C7:53:74:4F:35:2D:57:CF:B9
X509v3 Authority Key Identifier:
keyid:6E:52:E1:05:F0:E8:26:E7:15:F7:2C:C5:CB:03:12:A2:53:44:24:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f8:2e:d4:c8:a4:3c:6a:29:56:cf:7e:e5:ed:4e:86:57:7a:c2:
f4:f3:c2:98:88:ad:cb:54:10:77:93:61:e0:f1:4d:86:c9:ae:
b9:db:cf:27:ab:7a:75:09:cf:41:cf:3f:2c:fd:20:c3:78:5f:
f4:1b:c4:d2:4b:96:a7:f9:c2:51:b9:a0:51:b1:7e:05:23:47:
57:59:b7:d1:8f:7f:16:0f:78:4d:5e:f0:f7:8d:5c:90:5d:90:
22:d2:d2:fd:2f:1c:3f:e9:ef:19:f5:b5:88:d4:d7:bb:39:a6:
cf:a9:ea:db:56:2d:a0:ec:bb:6b:d8:58:18:18:35:3b:3e:f5:
93:e6:d1:01:52:6a:ef:a9:11:03:44:81:46:99:05:7e:41:a2:
b5:be:81:42:91:ab:94:c1:ed:20:1c:e6:c9:9b:8a:e9:15:11:
67:6f:ec:76:63:15:13:84:62:50:f9:5d:0c:ac:d4:da:5c:ef:
7d:29:78:e4:2c:19:c6:a9:46:ff:4a:ae:5d:3c:aa:4e:06:c2:
7a:9d:47:f1:eb:46:f5:f5:fe:ab:b5:47:e5:8f:e2:95:c4:df:
bc:17:09:6c:ef:86:8a:60:a7:2d:54:a5:5d:1a:03:bf:db:59:
ca:fa:52:d8:c8:44:c0:62:25:36:03:fa:63:4a:28:31:5e:17:
4e:0d:a5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:21 2025 by rpki-client