Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
File: bDLcnlJJ-0HEffSRQSGpsaau8f8.mft (raw, json)
Hash identifier: NXV1o50l20lORaHVJta90BgDOSuEuHHnCIwZctfItJY=
Subject key identifier: 65:AF:75:AF:4E:97:20:EF:08:96:5C:A6:0E:CB:C5:50:19:E9:BF:CC
Authority key identifier: 6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
Certificate issuer: /CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Certificate serial: 019A2553CE7B093CA1D82EA1105956E60A11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
Manifest number: 14B5
Signing time: Mon 27 Oct 2025 11:00:40 +0000
Manifest this update: Mon 27 Oct 2025 11:00:40 +0000
Manifest next update: Tue 28 Oct 2025 11:00:40 +0000
Files and hashes: 1: 0OtBGKZoArdG9xr5Hantq94pOBQ.roa (hash: iXzauuN3FjHWPtjyckYGhR1Sa3E/G7T5BGW2XCWiX3g=)
2: 8EuHcSXF93AJXZb7bhpJqQ9T-os.roa (hash: tA/g1MQIaVkGvGKFpxq+dGSCjDGH6Bsw81qSCo4f3fQ=)
3: bDLcnlJJ-0HEffSRQSGpsaau8f8.crl (hash: BJ1+Z+4GL7+ROW08vW9vKcHVgqHtDZFcS+E2RlbE5YI=)
4: pLoX4WpHFeM5jD6mdHah5z-d1Qc.roa (hash: OjXgWSjMIysxXIzCr8G2HbFXqB0exJC+XSuA+1t55uo=)
5: xk57NMD7hAx5NjNNvtBpMWNGREE.roa (hash: ETKtdzy2heJov69i+XXLHQAB4L1xigBSVsgiROK30og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:53:ce:7b:09:3c:a1:d8:2e:a1:10:59:56:e6:0a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Validity
Not Before: Oct 27 11:00:40 2025 GMT
Not After : Oct 28 11:00:40 2025 GMT
Subject: CN=65af75af4e9720ef08965ca60ecbc55019e9bfcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d1:3c:89:90:bc:be:11:12:fd:e2:c6:d6:11:
66:d7:88:29:a2:a4:40:ca:7f:55:a7:6a:ef:9b:c4:
95:57:43:ea:35:4b:5b:b4:b4:5f:36:1e:8d:99:4b:
7d:9e:fb:a3:c3:59:fe:c2:47:17:7d:5c:29:1a:39:
f9:b2:92:6a:f7:87:66:2c:a9:93:b6:86:c0:ad:72:
01:5b:9c:cf:d4:46:79:2b:00:96:c9:ae:84:13:a7:
62:93:e2:da:af:20:6b:5a:3b:25:34:da:7b:51:9e:
17:62:9b:d0:4d:16:eb:41:07:16:c8:7c:59:d8:8a:
66:e6:a8:d5:98:79:db:f6:5b:35:12:42:d4:bc:3d:
61:62:5c:31:dd:e6:be:a5:05:80:3c:c5:96:a3:07:
24:a7:bc:c4:a2:1b:34:52:98:50:28:01:d8:c3:1c:
b0:41:10:4c:58:c1:2d:6b:06:5e:96:77:92:b1:ff:
f0:ab:e1:98:46:2e:99:92:f5:c5:e7:b6:83:60:c8:
f8:a1:ad:96:72:02:83:a8:1a:f9:63:ee:80:9d:47:
7f:d0:9d:80:64:07:87:e5:fc:c3:2e:04:a1:1b:20:
22:0b:31:39:34:31:4b:2f:f5:19:23:a5:d9:ae:f8:
e6:fb:fa:40:01:b4:02:2f:f7:53:fa:ba:33:74:45:
99:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AF:75:AF:4E:97:20:EF:08:96:5C:A6:0E:CB:C5:50:19:E9:BF:CC
X509v3 Authority Key Identifier:
keyid:6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:75:5a:25:65:72:f9:5b:92:5f:d0:b5:e7:5e:22:3e:e6:4e:
4f:4d:29:c1:5b:e9:17:47:95:94:75:11:c6:60:4a:f0:cf:63:
7f:ec:98:b4:57:80:c3:cb:77:c5:57:4d:13:e7:2c:26:b7:08:
47:43:42:de:e0:6d:36:7e:31:7b:c0:56:4e:32:4a:09:09:ce:
25:1b:20:48:63:69:74:1a:00:1e:01:05:7e:cf:15:00:95:ef:
be:26:9a:3d:99:3a:03:45:fa:5b:c7:d2:9b:61:c2:c8:e4:05:
ab:84:7c:d6:5b:3e:63:fd:78:75:b5:34:35:4c:22:b4:bb:2d:
90:f7:0e:3e:3f:c4:d6:8e:cc:1c:3a:c4:60:42:de:35:01:ef:
d7:14:08:1f:bd:99:73:48:bc:60:6a:40:d0:dc:53:1c:cf:36:
00:97:0d:4c:50:8c:85:9c:7d:44:0d:d3:a4:ae:3a:84:dd:4b:
83:11:67:9a:38:60:67:fe:82:20:4a:8b:fe:dc:69:06:7d:1b:
28:24:1a:ae:f7:db:a6:60:40:cd:b0:05:c0:58:ff:30:53:f5:
a1:cf:0e:53:47:02:25:47:1e:cc:e3:1e:15:07:04:21:89:9f:
15:b7:18:e5:30:e7:7e:55:59:46:0c:7f:68:b7:51:a4:40:9c:
ea:f1:62:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 20:30:08 2025 by rpki-client