Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
File: bOrnoCiJYKda-M6A54iFQ8f3fNc.mft (raw, json)
Hash identifier: pUEQjzLOJ9eq+S+sYsCRJJucnsrW863gq9DAE3ZWGoo=
Subject key identifier: 2F:5A:83:A9:1A:8D:65:40:37:BB:D1:C9:9D:F8:6F:43:2A:09:0C:FA
Authority key identifier: 6C:EA:E7:A0:28:89:60:A7:5A:F8:CE:80:E7:88:85:43:C7:F7:7C:D7
Certificate issuer: /CN=6ceae7a0288960a75af8ce80e7888543c7f77cd7
Certificate serial: 0199FBEA96FBF9882D046AC49F92DBFD7015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
Manifest number: 13F0
Signing time: Sun 19 Oct 2025 10:01:19 +0000
Manifest this update: Sun 19 Oct 2025 10:01:19 +0000
Manifest next update: Mon 20 Oct 2025 10:01:19 +0000
Files and hashes: 1: 6Zx8tvFW-otCSIx-0XXwdAcWAvY.roa (hash: vXtudZUUi1vh+dqd99m5Me5cUdKc0jshPf9ev6mVJpw=)
2: bOrnoCiJYKda-M6A54iFQ8f3fNc.crl (hash: okeCmRjLC55D2/740mLCNZaKgCxLG0MxK9DmZf6ycAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:96:fb:f9:88:2d:04:6a:c4:9f:92:db:fd:70:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ceae7a0288960a75af8ce80e7888543c7f77cd7
Validity
Not Before: Oct 19 10:01:19 2025 GMT
Not After : Oct 20 10:01:19 2025 GMT
Subject: CN=2f5a83a91a8d654037bbd1c99df86f432a090cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b6:89:54:34:2e:d2:4f:37:85:f9:1c:e3:1f:
7d:15:8f:39:7b:93:49:b2:cf:2b:d0:bd:42:92:e7:
3e:58:9d:ec:59:c0:8a:2f:43:fe:8c:2a:86:51:9b:
20:dc:e3:44:a2:0e:ec:09:06:bd:d6:25:4f:8e:04:
9e:d2:8a:0c:a6:63:8c:02:08:a8:7c:aa:09:e9:9e:
49:d8:c1:63:d2:2c:88:65:aa:80:db:aa:f8:7a:19:
95:39:31:45:76:2e:ef:b9:e7:2e:4c:dd:ca:88:5d:
7a:10:1a:07:d2:71:73:58:b0:74:d5:c2:24:c4:c6:
62:df:8b:2c:71:3f:12:35:58:3d:94:c6:34:4d:2a:
2e:36:08:7f:2f:54:71:ef:cd:c9:c3:54:0a:85:eb:
89:9e:ab:e2:fe:ec:95:49:0d:0a:6c:78:98:a8:1f:
05:66:33:4e:a5:87:41:bf:b9:fd:11:06:38:6d:a7:
34:82:4f:df:72:92:59:fb:5c:ad:a2:3b:55:1c:d2:
98:11:52:74:52:fe:b0:81:aa:72:a1:83:8f:1b:88:
c7:e4:0a:39:1e:e7:47:73:43:a6:f7:91:2f:96:dc:
21:67:77:b3:16:37:1f:f3:f8:39:c5:b3:df:00:bb:
17:77:9b:09:00:82:7b:cf:fd:8d:4f:68:f3:74:01:
b3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5A:83:A9:1A:8D:65:40:37:BB:D1:C9:9D:F8:6F:43:2A:09:0C:FA
X509v3 Authority Key Identifier:
keyid:6C:EA:E7:A0:28:89:60:A7:5A:F8:CE:80:E7:88:85:43:C7:F7:7C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:3a:da:4e:80:17:9a:47:94:85:7a:d8:63:5e:ca:4c:4e:8c:
da:6b:df:4d:8c:7d:2f:f7:18:02:2b:01:5d:53:93:c1:2e:df:
fa:92:b5:fd:1c:a7:14:9f:a9:7b:ea:cf:06:6c:2e:3b:ed:c5:
e9:d7:13:69:8e:98:d0:7e:a4:4e:4e:9c:b6:7f:d3:ea:ea:f6:
ca:03:33:e5:d9:b1:86:56:e7:d1:71:a8:e1:41:55:cd:d3:70:
70:79:e0:86:12:dd:fc:54:78:59:8d:24:2f:0d:79:1b:18:3c:
fd:fc:02:b4:2a:d0:a2:7d:ea:cd:89:26:4e:0f:bc:64:c4:56:
f4:4c:ca:df:36:bb:97:48:22:23:a3:51:df:14:00:8e:f5:db:
20:f9:de:ae:b4:4c:4c:22:0f:d8:a5:c6:e8:85:6b:5e:09:c8:
2f:c2:d7:b2:1c:bf:39:23:b8:9b:60:1d:c9:c5:50:43:05:17:
99:85:00:8e:5c:e5:f6:ee:b2:82:cb:65:76:a1:82:40:5b:ec:
95:2a:76:6b:48:3c:21:07:9d:63:7e:fe:4e:63:63:4e:41:e1:
01:2e:07:68:c1:33:30:df:14:53:b5:d4:de:37:6a:99:de:a2:
bc:6d:d5:b2:d5:58:ff:61:98:73:31:f8:89:e6:d4:b1:04:da:
8c:b8:b7:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76pb7+YgtBGrEn5Lb/XAVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZWFlN2EwMjg4OTYwYTc1YWY4Y2U4MGU3ODg4NTQzYzdm
NzdjZDcwHhcNMjUxMDE5MTAwMTE5WhcNMjUxMDIwMTAwMTE5WjAzMTEwLwYDVQQD
EygyZjVhODNhOTFhOGQ2NTQwMzdiYmQxYzk5ZGY4NmY0MzJhMDkwY2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLaJVDQu0k83hfkc4x99FY85e5NJ
ss8r0L1Ckuc+WJ3sWcCKL0P+jCqGUZsg3ONEog7sCQa91iVPjgSe0ooMpmOMAgio
fKoJ6Z5J2MFj0iyIZaqA26r4ehmVOTFFdi7vuecuTN3KiF16EBoH0nFzWLB01cIk
xMZi34sscT8SNVg9lMY0TSouNgh/L1Rx783Jw1QKheuJnqvi/uyVSQ0KbHiYqB8F
ZjNOpYdBv7n9EQY4bac0gk/fcpJZ+1ytojtVHNKYEVJ0Uv6wgapyoYOPG4jH5Ao5
HudHc0Om95EvltwhZ3ezFjcf8/g5xbPfALsXd5sJAIJ7z/2NT2jzdAGzPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9ag6kajWVAN7vRyZ34b0MqCQz6MB8GA1UdIwQY
MBaAFGzq56AoiWCnWvjOgOeIhUPH93zXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk9ybm9DaUpZS2RhLU02QTU0aUZROGYzZk5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS83MDhmNzYtNTZlZi00MzNmLTllYWMt
NGE0YTNiMDQwOGE2LzEvYk9ybm9DaUpZS2RhLU02QTU0aUZROGYzZk5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS83MDhmNzYtNTZlZi00MzNmLTllYWMtNGE0YTNiMDQwOGE2
LzEvYk9ybm9DaUpZS2RhLU02QTU0aUZROGYzZk5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApTraToAX
mkeUhXrYY17KTE6M2mvfTYx9L/cYAisBXVOTwS7f+pK1/RynFJ+pe+rPBmwuO+3F
6dcTaY6Y0H6kTk6ctn/T6ur2ygMz5dmxhlbn0XGo4UFVzdNwcHnghhLd/FR4WY0k
Lw15Gxg8/fwCtCrQon3qzYkmTg+8ZMRW9EzK3za7l0giI6NR3xQAjvXbIPnerrRM
TCIP2KXG6IVrXgnIL8LXshy/OSO4m2AdycVQQwUXmYUAjlzl9u6ygstldqGCQFvs
lSp2a0g8IQedY37+TmNjTkHhAS4HaMEzMN8UU7XU3jdqmd6ivG3VstVY/2GYczH4
iebUsQTajLi32A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:30 2025 by rpki-client