Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
File: blQs7eU6DFcUWmr_L1gZbwLUoS4.mft (raw, json)
Hash identifier: py7k/We4qoQoNmNEjQfUIGFUFvEBn3TVeRQWalMWA5U=
Subject key identifier: CA:4C:05:59:82:0A:94:DE:35:D6:A0:A3:A4:AC:81:BD:AA:9A:16:61
Authority key identifier: 6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E
Certificate issuer: /CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
Certificate serial: 019A725C9464EABE4F516EE5434451307424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
Manifest number: 16FE
Signing time: Tue 11 Nov 2025 10:01:01 +0000
Manifest this update: Tue 11 Nov 2025 10:01:01 +0000
Manifest next update: Wed 12 Nov 2025 10:01:01 +0000
Files and hashes: 1: blQs7eU6DFcUWmr_L1gZbwLUoS4.crl (hash: nslZE6Srq7Hd2anUIFSu4suWTt6jHY0agNa43vok/q4=)
2: pXv8FGbLwxECE7IPZwLe-oIEhlQ.roa (hash: lA0EoJbAgOHytg/Q3yX/rveAnxbQAYlQALMvfLmzZeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:94:64:ea:be:4f:51:6e:e5:43:44:51:30:74:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
Validity
Not Before: Nov 11 10:01:01 2025 GMT
Not After : Nov 12 10:01:01 2025 GMT
Subject: CN=ca4c0559820a94de35d6a0a3a4ac81bdaa9a1661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ba:64:6e:ab:53:a5:b8:97:59:97:67:08:ed:
e5:d0:ae:1c:83:88:15:30:99:3c:d6:c4:5a:78:dd:
2e:20:f6:05:dd:68:43:b2:a1:14:55:3a:ab:2e:45:
9e:f1:06:0e:61:d6:9f:ec:4e:4d:d9:35:bc:29:d6:
b2:85:23:05:7e:06:1d:b2:8a:d3:b4:95:9e:7b:b6:
dc:54:e7:51:07:24:34:f2:9e:92:5f:d5:72:dd:f9:
c7:b8:a2:5f:f0:d9:f6:4c:a6:3a:0e:43:de:12:f8:
a3:67:ee:8c:40:60:70:da:78:90:0f:21:7c:c3:50:
6d:54:c9:0c:5b:97:a9:16:8d:31:d2:f4:7d:c8:49:
cf:ef:1d:e8:97:e1:0b:b3:46:32:c9:8d:47:9d:98:
6a:75:eb:c3:e1:44:31:8d:44:34:2c:2f:e7:24:17:
bf:67:4d:34:d2:bf:b5:c5:0e:a5:4d:da:3c:03:0d:
cd:6e:ad:99:61:29:54:f5:1c:09:a5:cd:f7:1e:ed:
5b:1a:d7:b2:ce:81:87:c6:e8:66:e2:12:d8:4f:3c:
6f:92:33:c1:1a:39:37:59:32:0f:c9:03:65:68:a6:
1c:97:f5:73:82:33:ab:f7:10:12:f7:63:71:80:1c:
ea:aa:c2:d8:b8:22:c0:aa:17:9f:d8:0a:b5:d6:8a:
1a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4C:05:59:82:0A:94:DE:35:D6:A0:A3:A4:AC:81:BD:AA:9A:16:61
X509v3 Authority Key Identifier:
keyid:6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:56:7a:22:6c:db:ae:fd:ba:87:5a:0c:d7:4f:18:db:86:48:
61:18:be:ac:cc:78:e7:73:31:fd:0c:a6:0d:78:86:2d:8e:b4:
90:db:9b:17:99:ae:ff:6d:b7:c8:7c:5c:d9:18:af:d8:d1:38:
9f:a6:39:f0:6d:9a:99:31:63:32:a2:13:6f:29:59:3d:c3:af:
23:55:3f:36:c5:d7:cb:34:bd:fc:19:98:67:67:69:34:41:cd:
6a:a3:27:87:8a:7e:16:e2:2d:d8:23:11:df:6a:ae:f5:a0:d5:
b7:d1:31:5d:83:99:16:55:50:21:56:02:7d:8a:ce:3b:f4:af:
9a:90:85:a2:ca:13:ce:92:68:10:10:fc:7a:8e:96:a5:f9:b6:
53:80:c0:71:97:27:02:b2:fc:14:84:cd:91:89:71:15:28:bc:
fb:e4:51:db:59:76:a7:a8:ea:75:54:72:c0:04:8e:04:ad:6b:
a7:8f:83:53:2e:12:eb:47:0e:be:65:e1:be:27:60:4d:fb:c6:
05:83:bd:2d:88:75:6e:fd:07:49:1e:aa:b8:cd:df:6c:e5:79:
ef:47:f3:b6:c3:7c:f6:9b:91:fc:00:97:2f:d4:38:08:f2:37:
fb:67:71:e2:70:49:62:6f:0f:f7:9e:32:8d:b2:35:d1:df:21:
5b:72:de:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:21 2025 by rpki-client