Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
File: bOrnoCiJYKda-M6A54iFQ8f3fNc.mft (raw, json)
Hash identifier: uY+HbZ89PiTnqyK5aLkmKTlTc4dK2DbWhgRmmlI+U90=
Subject key identifier: F5:F7:DD:3E:82:DA:DA:DA:35:45:D7:DA:2C:84:C1:31:8E:5F:7E:2B
Authority key identifier: 6C:EA:E7:A0:28:89:60:A7:5A:F8:CE:80:E7:88:85:43:C7:F7:7C:D7
Certificate issuer: /CN=6ceae7a0288960a75af8ce80e7888543c7f77cd7
Certificate serial: 019A71B7E8E068434BCD2416E90C5B323450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
Manifest number: 142D
Signing time: Tue 11 Nov 2025 07:01:09 +0000
Manifest this update: Tue 11 Nov 2025 07:01:09 +0000
Manifest next update: Wed 12 Nov 2025 07:01:09 +0000
Files and hashes: 1: 6Zx8tvFW-otCSIx-0XXwdAcWAvY.roa (hash: vXtudZUUi1vh+dqd99m5Me5cUdKc0jshPf9ev6mVJpw=)
2: bOrnoCiJYKda-M6A54iFQ8f3fNc.crl (hash: ydWTPH7TeMiUGsUIqyFPeHLkJbGg5aNFKSjA50XyZh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:e8:e0:68:43:4b:cd:24:16:e9:0c:5b:32:34:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ceae7a0288960a75af8ce80e7888543c7f77cd7
Validity
Not Before: Nov 11 07:01:09 2025 GMT
Not After : Nov 12 07:01:09 2025 GMT
Subject: CN=f5f7dd3e82dadada3545d7da2c84c1318e5f7e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e8:7a:68:36:9f:20:59:7d:67:ab:6b:da:c5:
6f:a3:66:9f:06:18:dd:9f:5e:13:59:ea:50:63:ed:
9f:eb:73:82:c1:50:ca:cb:be:bd:43:89:45:73:97:
50:12:f0:bb:b3:83:49:1c:75:e2:e1:86:ca:ec:3c:
66:26:c2:66:88:28:69:47:41:17:83:9a:6c:98:62:
f6:d2:4f:85:45:b1:08:26:02:61:c5:ee:a4:e5:5b:
af:0a:53:d8:d2:ef:6e:34:1f:68:49:9a:bf:73:81:
e0:d3:db:a3:39:16:d0:1b:0e:1e:43:a2:fc:c7:72:
e3:05:23:aa:61:b0:c8:e1:d4:83:cb:00:3e:08:1d:
9d:ca:fd:4c:3b:8d:45:c7:ef:36:bb:53:f5:0c:8d:
95:a5:b2:a2:52:ab:3a:d5:9b:54:12:b9:9b:4a:13:
bb:e5:74:d6:f4:8d:8f:27:e3:77:01:d8:98:34:ab:
98:85:57:3b:64:ad:3e:da:dc:39:c3:cc:28:2b:ec:
40:e0:18:5b:e1:51:47:e2:67:5f:56:53:f7:e5:4a:
92:66:70:53:7a:df:a1:a4:9c:96:1d:05:26:35:37:
d5:2a:c2:f5:c1:72:79:53:6b:67:27:bc:1a:a7:a6:
d0:e9:79:ce:5d:b9:3c:ff:19:bf:61:f0:e7:31:49:
09:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F7:DD:3E:82:DA:DA:DA:35:45:D7:DA:2C:84:C1:31:8E:5F:7E:2B
X509v3 Authority Key Identifier:
keyid:6C:EA:E7:A0:28:89:60:A7:5A:F8:CE:80:E7:88:85:43:C7:F7:7C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d9:fb:d1:7c:6a:fd:84:4b:7d:97:2f:94:2d:eb:65:f7:ff:
f2:a4:0b:98:c0:ab:ab:2a:a6:ac:36:5b:0c:55:eb:13:17:93:
81:10:78:6f:21:5e:35:a2:0d:37:f8:70:ff:ac:1c:f0:5a:f4:
74:17:19:05:9f:42:d2:6e:85:d1:41:22:ad:ba:95:51:00:d5:
ff:5c:81:63:06:93:f3:94:4c:6b:49:cd:be:2d:34:3d:2a:bb:
66:c3:3d:8a:33:3f:ac:0f:62:c0:82:9d:d0:3a:07:3b:f6:d1:
ec:22:7f:16:5b:82:ec:d8:0d:a9:b3:f9:6c:dd:8f:ef:4e:9b:
55:11:89:97:f6:54:af:bd:c9:2e:3d:a1:44:96:b3:76:91:04:
ed:48:95:54:f8:bb:73:7d:40:f1:98:6d:44:41:6e:29:1e:19:
0c:30:77:d8:0a:e8:73:e3:b5:49:24:9d:d6:13:a4:0b:e3:b4:
91:e1:4c:e2:0f:3b:9f:37:3b:16:73:48:d2:51:cb:d7:93:27:
18:97:5c:7e:a4:5c:80:91:93:6e:d3:b0:a6:c1:7e:ca:6e:ac:
15:f1:a0:62:c8:a8:0f:62:a2:dc:fb:5a:6f:83:86:7b:06:c9:
53:0c:4b:61:69:e8:87:5b:a4:52:5c:b3:3c:22:b0:06:ae:c5:
18:83:97:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:00:55 2025 by rpki-client