Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
File: blLhBfDoJucV9yzFywMSolNEJLo.mft (raw, json)
Hash identifier: w5eH/8x2PRgo753UpBBjhAallT57IUV6gdSixQMEy9k=
Subject key identifier: 74:67:68:FC:92:D9:F0:15:0A:CF:85:BD:D2:5A:E2:2D:EC:3D:23:DA
Authority key identifier: 6E:52:E1:05:F0:E8:26:E7:15:F7:2C:C5:CB:03:12:A2:53:44:24:BA
Certificate issuer: /CN=6e52e105f0e826e715f72cc5cb0312a2534424ba
Certificate serial: 01974B56FE09FEC0D3E16023FA6472CBB26A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
Manifest number: 06AD
Signing time: Sat 07 Jun 2025 17:01:21 +0000
Manifest this update: Sat 07 Jun 2025 17:01:21 +0000
Manifest next update: Sun 08 Jun 2025 17:01:21 +0000
Files and hashes: 1: blLhBfDoJucV9yzFywMSolNEJLo.crl (hash: QQ/38T7FS8J9NcnEoLK/jTkQ3Yx80j46In+GC+6pG+8=)
2: u8V9QKBVG0Y86-vjzjyTisw0D_Y.roa (hash: KYGcbVwlMJi9uEEQnPMzkMYGof5+7MNCgFq2TVdNdS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:fe:09:fe:c0:d3:e1:60:23:fa:64:72:cb:b2:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e52e105f0e826e715f72cc5cb0312a2534424ba
Validity
Not Before: Jun 7 17:01:21 2025 GMT
Not After : Jun 8 17:01:21 2025 GMT
Subject: CN=746768fc92d9f0150acf85bdd25ae22dec3d23da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:37:48:53:50:10:7b:a5:c4:15:69:9e:12:73:
aa:74:01:a6:76:b1:fd:ad:3c:80:65:ba:dd:ce:4e:
26:a7:74:8b:68:b5:ac:29:1c:08:5b:c9:db:6a:e2:
3c:a9:8e:52:b5:2b:bd:80:fa:0b:2d:d0:db:c7:c1:
7a:3b:d0:40:8f:4b:8e:f2:f5:be:8e:63:d9:5e:9a:
f8:bb:0b:e1:23:79:fb:0f:05:98:f4:1e:46:f1:26:
04:09:d0:19:29:2d:22:42:f0:ee:63:6c:21:ab:07:
5c:38:97:dc:90:72:61:df:d5:c1:e3:d2:9d:13:41:
00:99:41:44:c5:d0:34:92:2d:a6:82:f4:1b:51:77:
0e:2b:9e:cc:4e:0c:84:6e:53:f6:11:4b:56:b0:d6:
b2:b9:c2:34:38:91:3b:7c:83:a1:aa:ec:b0:1d:a9:
c3:ef:c9:4a:12:4a:ea:d7:84:6b:f6:16:af:c5:25:
a8:94:5f:05:ff:7e:0e:b7:60:00:49:f1:44:e4:23:
33:f9:4a:ec:d5:32:ed:c8:75:64:98:3b:4f:29:0c:
da:5c:34:0d:c4:14:e7:70:6e:18:18:31:60:18:80:
93:e9:34:97:e5:fa:4f:ec:f0:e5:25:0b:ef:bd:c1:
8f:c8:06:d0:b7:cb:8a:0c:f4:0f:7b:19:fe:71:e3:
5a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:67:68:FC:92:D9:F0:15:0A:CF:85:BD:D2:5A:E2:2D:EC:3D:23:DA
X509v3 Authority Key Identifier:
keyid:6E:52:E1:05:F0:E8:26:E7:15:F7:2C:C5:CB:03:12:A2:53:44:24:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:6f:03:0f:9b:87:68:85:5a:ca:e9:19:fc:71:ae:80:c6:47:
09:a7:b8:a4:8e:cb:77:97:75:28:12:58:d5:60:45:3a:fc:cc:
d1:13:b5:24:13:1e:32:0e:82:3e:6a:fb:7d:a6:75:56:fe:92:
4e:89:21:c0:b2:e8:20:a4:b8:99:3c:d8:d4:1b:f5:50:1d:a9:
42:a7:70:5f:2d:cc:9b:58:65:29:7f:0a:d8:81:4e:4d:ea:5a:
a6:1a:1a:07:12:bc:3f:6b:2e:f2:08:76:69:72:35:f7:f5:8a:
ba:83:b8:cd:47:db:5e:2d:7c:12:ec:f8:bc:15:b8:41:9e:2f:
27:15:ab:fc:29:28:0c:50:dc:f0:37:3c:54:d6:29:3d:97:32:
41:59:c3:8a:8d:e3:58:dc:8b:2a:22:57:c8:36:fa:62:d6:b7:
a7:85:28:88:cd:3b:de:3b:b4:5c:d3:bc:f2:b5:ba:72:fd:c6:
94:ea:31:90:8a:13:bb:e0:34:30:d1:75:e4:fa:f4:17:dd:05:
19:c0:0a:12:6a:88:f2:76:9e:d7:08:5f:a1:b6:1d:93:06:c1:
ed:49:d8:b0:a3:df:36:c7:ce:13:3f:2f:34:fc:0a:9a:a1:36:
5a:a9:30:11:eb:f2:57:d5:8e:0f:e3:8c:e0:00:7b:08:2e:b6:
c8:a9:36:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:38:14 2025 by rpki-client