Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
File: bDLcnlJJ-0HEffSRQSGpsaau8f8.mft (raw, json)
Hash identifier: exxWPUG4ENNRvfnMnuV3E5WjXg+bGqwq5CS7QnL8KyU=
Subject key identifier: 87:4B:03:A8:C6:8C:56:DD:EB:D3:E1:AD:73:2C:A1:3F:53:6E:C8:88
Authority key identifier: 6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
Certificate issuer: /CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Certificate serial: 0198D54E4A1AAF19D1014FF9F4A949D98AFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
Manifest number: 1407
Signing time: Sat 23 Aug 2025 05:02:14 +0000
Manifest this update: Sat 23 Aug 2025 05:02:14 +0000
Manifest next update: Sun 24 Aug 2025 05:02:14 +0000
Files and hashes: 1: 0OtBGKZoArdG9xr5Hantq94pOBQ.roa (hash: iXzauuN3FjHWPtjyckYGhR1Sa3E/G7T5BGW2XCWiX3g=)
2: 8EuHcSXF93AJXZb7bhpJqQ9T-os.roa (hash: tA/g1MQIaVkGvGKFpxq+dGSCjDGH6Bsw81qSCo4f3fQ=)
3: bDLcnlJJ-0HEffSRQSGpsaau8f8.crl (hash: LHUwORc1QCLFoUx9pRQL6XawOR4B4Swhd6Yu5RvByGU=)
4: pLoX4WpHFeM5jD6mdHah5z-d1Qc.roa (hash: OjXgWSjMIysxXIzCr8G2HbFXqB0exJC+XSuA+1t55uo=)
5: xk57NMD7hAx5NjNNvtBpMWNGREE.roa (hash: ETKtdzy2heJov69i+XXLHQAB4L1xigBSVsgiROK30og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:4a:1a:af:19:d1:01:4f:f9:f4:a9:49:d9:8a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Validity
Not Before: Aug 23 05:02:14 2025 GMT
Not After : Aug 24 05:02:14 2025 GMT
Subject: CN=874b03a8c68c56ddebd3e1ad732ca13f536ec888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:db:84:cb:f0:b2:cc:ff:d3:af:ef:aa:91:0e:
55:f8:41:93:27:a3:84:39:9e:a5:18:f4:24:b0:46:
92:57:72:f6:7e:68:3d:ec:8c:86:77:30:f8:d8:ad:
40:dc:40:4c:0d:83:39:4a:be:8c:ff:3f:df:f9:d8:
6c:6e:09:7d:63:08:f3:01:45:5a:14:ec:a5:07:f8:
79:32:2e:4c:3c:a0:b5:dd:31:34:56:5d:ee:e3:d6:
72:36:2a:fe:30:da:ba:51:d3:ea:3a:38:3f:56:55:
56:0a:db:1a:33:c1:2c:37:22:be:0c:85:ed:d4:ad:
bd:9f:c0:e3:ae:2b:f0:cf:d6:64:12:6b:df:66:76:
c8:cc:d5:ae:ab:cd:54:42:34:59:bd:18:d2:95:0f:
ff:97:a6:9d:53:11:ab:00:f5:41:92:6b:8d:75:20:
57:6c:72:74:07:70:c0:1f:26:ae:19:e8:51:28:52:
dc:ed:cb:7b:b4:f7:0d:d7:85:5e:8c:81:9a:e2:f4:
14:be:4a:27:2d:8d:ba:c8:d9:bf:65:0e:0e:ac:63:
a0:96:80:91:43:e9:fa:67:fc:cf:23:3b:b0:d2:fd:
fe:ac:09:1a:d3:bf:e6:cf:4b:3c:4a:fd:6f:73:47:
d4:9f:5c:2c:8d:d2:1f:87:9b:36:d3:5b:66:a7:05:
c2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4B:03:A8:C6:8C:56:DD:EB:D3:E1:AD:73:2C:A1:3F:53:6E:C8:88
X509v3 Authority Key Identifier:
keyid:6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a3:a9:00:18:d8:e4:c8:1a:f3:b5:bc:ce:58:c8:9f:b9:72:
44:7d:e5:95:ad:ad:c8:ec:7f:c2:18:a5:3d:87:d4:ad:f2:df:
9b:8d:e1:45:8d:88:43:b2:cf:72:65:12:6c:33:c3:a3:01:49:
0f:a3:bf:4c:49:21:0c:a4:03:1a:08:30:33:5c:26:4f:20:a7:
86:e7:5b:ff:bc:54:0b:07:02:fc:3b:68:08:c1:3a:08:1a:45:
2a:97:7d:24:5a:a2:b5:fa:e7:95:4a:50:51:a8:7b:ec:9f:c2:
04:f1:cd:17:a4:bb:34:7d:de:c3:13:86:83:b3:b8:71:bb:cb:
e4:cd:0c:37:d8:cb:46:cf:65:51:fe:2d:2b:1d:e0:c9:51:ad:
97:8d:52:06:4b:2d:d1:33:d0:1a:67:89:f1:ec:75:ff:0f:61:
b8:1e:19:29:c8:75:b0:d0:e0:09:c9:b7:25:19:4e:20:e7:ab:
e7:73:1b:16:8f:ed:f1:ff:f0:2d:54:dc:9e:ed:36:84:9a:0f:
01:f1:10:6b:24:ec:89:9e:89:04:9d:fd:d8:9e:67:1b:d7:6c:
59:6b:b7:65:a8:4e:e3:1c:27:6d:da:62:0d:97:22:08:a3:68:
75:8a:35:8c:15:65:97:eb:07:2f:3b:64:8f:6d:9e:39:6f:6f:
49:95:58:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:38 2025 by rpki-client