Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
File: bDLcnlJJ-0HEffSRQSGpsaau8f8.mft (raw, json)
Hash identifier: jpUvx3U9/Ict7PI8+S2Fw9QMDCrMH5QOm5p2bEDcll4=
Subject key identifier: 0F:B3:75:EE:08:24:8F:61:81:3B:5A:6F:6A:3C:9B:E4:0A:43:5E:CC
Authority key identifier: 6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
Certificate issuer: /CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Certificate serial: 019A00A37F96494E80CE5FAA53ACD2D8A1A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
Manifest number: 14A2
Signing time: Mon 20 Oct 2025 08:01:46 +0000
Manifest this update: Mon 20 Oct 2025 08:01:46 +0000
Manifest next update: Tue 21 Oct 2025 08:01:46 +0000
Files and hashes: 1: 0OtBGKZoArdG9xr5Hantq94pOBQ.roa (hash: iXzauuN3FjHWPtjyckYGhR1Sa3E/G7T5BGW2XCWiX3g=)
2: 8EuHcSXF93AJXZb7bhpJqQ9T-os.roa (hash: tA/g1MQIaVkGvGKFpxq+dGSCjDGH6Bsw81qSCo4f3fQ=)
3: bDLcnlJJ-0HEffSRQSGpsaau8f8.crl (hash: Bz4LoIS5itNmpDrpc9whLq3iYwBEyzQGSZrHXNN5vpw=)
4: pLoX4WpHFeM5jD6mdHah5z-d1Qc.roa (hash: OjXgWSjMIysxXIzCr8G2HbFXqB0exJC+XSuA+1t55uo=)
5: xk57NMD7hAx5NjNNvtBpMWNGREE.roa (hash: ETKtdzy2heJov69i+XXLHQAB4L1xigBSVsgiROK30og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:7f:96:49:4e:80:ce:5f:aa:53:ac:d2:d8:a1:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Validity
Not Before: Oct 20 08:01:46 2025 GMT
Not After : Oct 21 08:01:46 2025 GMT
Subject: CN=0fb375ee08248f61813b5a6f6a3c9be40a435ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:55:a3:77:1f:8e:45:f3:c1:a0:0f:49:a6:22:
f3:25:fb:b8:06:5b:f5:2c:53:ff:24:55:21:3b:5b:
24:eb:81:5a:c1:ea:60:a4:f6:d9:39:34:45:3e:0e:
11:f9:d3:e0:fd:b9:88:b5:98:f4:c0:e5:ca:65:8a:
92:7c:bb:3d:d7:2d:07:57:ac:c8:c5:1a:0c:2f:4a:
84:62:dc:45:9c:31:6e:46:20:b1:fc:da:40:ff:f9:
6b:a8:ce:9b:a8:47:b9:46:64:df:91:16:fe:e6:52:
f6:ac:f7:21:84:0f:2b:f0:19:61:04:52:37:f9:ec:
48:ff:f3:5c:01:dc:ab:18:62:b3:02:b1:8d:1b:ee:
8d:66:44:3d:6a:1e:ec:e9:4d:f1:c3:7f:9c:df:7c:
d0:5c:3d:18:58:de:e3:63:05:dc:b9:a1:9a:32:8c:
57:43:ab:78:9c:b7:70:71:75:04:22:86:f1:9c:4f:
8f:d2:3c:f6:7b:fe:55:b1:4b:ec:55:7d:74:5d:17:
6d:62:75:25:76:2b:22:c8:11:b5:a4:68:54:e2:0c:
10:fd:f5:f8:e1:0b:17:ba:36:7a:59:97:6f:f9:4c:
15:ea:92:ae:74:98:4b:b1:58:44:e4:2d:a4:3d:59:
51:19:eb:d4:5e:36:20:43:3d:5e:f4:40:fc:8a:db:
04:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B3:75:EE:08:24:8F:61:81:3B:5A:6F:6A:3C:9B:E4:0A:43:5E:CC
X509v3 Authority Key Identifier:
keyid:6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b9:09:3e:73:87:16:a1:1b:95:c3:6b:8f:65:0e:ff:2f:36:
2b:50:a8:1d:a3:e0:5a:23:8d:ab:b3:05:35:c9:98:b1:67:d7:
6f:88:67:a4:ea:ed:9a:1c:38:8e:e4:24:3a:26:70:5e:55:89:
e3:84:f8:9f:d2:e4:42:d2:bc:3c:b0:85:0e:4c:76:99:44:5b:
2d:c4:9d:77:bf:a7:7d:58:ed:ba:67:14:12:21:da:26:1c:d8:
33:ce:dd:68:cf:93:dc:b2:6d:3b:b4:3d:49:ee:a2:e0:61:0c:
2c:e9:0b:9c:ba:17:4c:f9:6b:29:12:fb:e7:20:cd:f8:40:f4:
46:25:61:bf:b5:4b:cf:ea:36:ff:08:2d:57:91:90:57:3d:a4:
27:f7:b6:91:05:eb:30:00:01:bf:6e:01:34:b6:67:46:a7:1e:
05:50:c8:d9:0b:13:5d:e9:22:37:fb:6d:d0:75:f4:c3:6f:59:
9a:8a:88:cc:47:4e:fb:37:7f:ff:2b:44:96:9b:fc:b3:94:07:
85:54:68:4e:52:0e:89:c6:bb:ca:06:0a:15:2d:a8:84:3a:5d:
86:2d:e6:c3:6c:71:ff:ac:67:64:4a:00:b6:8d:fa:02:80:b4:
12:eb:ee:83:b8:85:7d:7f:16:b4:b0:8e:b5:f7:e1:d6:99:45:
67:93:dc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:52:26 2025 by rpki-client