Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
File: bDLcnlJJ-0HEffSRQSGpsaau8f8.mft (raw, json)
Hash identifier: lg29nzOc3KvAFeixLH+NrX51r490hrYbVxVXUgWAR7g=
Subject key identifier: 93:83:C9:D7:E3:C9:FE:9C:F0:82:11:F8:16:C4:61:93:7A:B9:7A:91
Authority key identifier: 6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
Certificate issuer: /CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Certificate serial: 019A4FD0400132A994D86F4F9C3C7347A80B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
Manifest number: 14CB
Signing time: Tue 04 Nov 2025 17:00:39 +0000
Manifest this update: Tue 04 Nov 2025 17:00:39 +0000
Manifest next update: Wed 05 Nov 2025 17:00:39 +0000
Files and hashes: 1: 0OtBGKZoArdG9xr5Hantq94pOBQ.roa (hash: iXzauuN3FjHWPtjyckYGhR1Sa3E/G7T5BGW2XCWiX3g=)
2: 8EuHcSXF93AJXZb7bhpJqQ9T-os.roa (hash: tA/g1MQIaVkGvGKFpxq+dGSCjDGH6Bsw81qSCo4f3fQ=)
3: bDLcnlJJ-0HEffSRQSGpsaau8f8.crl (hash: nVdMKN4AULB760D9D0dZmOgDNMXZH4GRWMswLltifz0=)
4: pLoX4WpHFeM5jD6mdHah5z-d1Qc.roa (hash: OjXgWSjMIysxXIzCr8G2HbFXqB0exJC+XSuA+1t55uo=)
5: xk57NMD7hAx5NjNNvtBpMWNGREE.roa (hash: ETKtdzy2heJov69i+XXLHQAB4L1xigBSVsgiROK30og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:40:01:32:a9:94:d8:6f:4f:9c:3c:73:47:a8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Validity
Not Before: Nov 4 17:00:39 2025 GMT
Not After : Nov 5 17:00:39 2025 GMT
Subject: CN=9383c9d7e3c9fe9cf08211f816c461937ab97a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:84:ec:b8:44:81:0f:b5:6b:4c:83:56:7c:11:
17:3c:0d:44:31:9f:6b:97:36:bf:0f:15:e2:4a:52:
56:fe:16:d9:d8:8b:2d:b1:6d:4b:64:b5:4b:9e:a2:
6d:8e:28:9b:4e:8a:68:83:d7:eb:43:18:6b:8b:4f:
a6:90:fa:2c:25:02:d9:90:19:73:b2:26:be:1e:83:
58:4f:d3:18:af:dc:57:ac:0b:34:17:47:28:be:19:
e0:d2:25:b9:5f:86:66:e9:34:5f:3c:83:3c:e2:58:
08:f4:be:ce:79:fd:7e:3e:bf:cb:81:c2:24:91:58:
65:18:f8:e5:44:e1:17:81:7a:9e:94:9f:db:7f:83:
65:7c:75:c2:a6:58:0e:82:c3:6a:8e:24:c2:2f:30:
cf:53:d3:d2:f9:46:fa:98:d3:ba:10:0f:fc:5c:1b:
15:b0:57:94:cd:d3:06:2d:89:4d:7d:40:9f:df:c3:
49:95:76:ab:6b:fd:3c:69:2b:6f:35:28:2d:00:c7:
23:51:d9:8d:2b:26:ba:e5:19:d1:d8:d6:a3:5f:3c:
cd:3a:72:df:23:af:2c:5c:35:60:22:a1:50:ab:88:
66:ce:a0:39:c6:c8:c4:81:c1:a8:e1:b6:46:a5:06:
a8:dc:6e:17:c0:2f:7a:14:e6:55:d3:43:83:51:04:
28:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:83:C9:D7:E3:C9:FE:9C:F0:82:11:F8:16:C4:61:93:7A:B9:7A:91
X509v3 Authority Key Identifier:
keyid:6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:bd:49:f6:48:f6:c7:24:4b:6d:b5:36:c5:f9:cf:ad:bf:82:
60:96:34:1f:ed:23:41:89:96:1d:a4:ea:13:30:1a:10:c9:95:
5e:d8:c5:c4:dd:ea:83:2e:b6:21:7f:ed:ac:c0:88:72:b5:04:
2f:7e:27:ff:67:1d:f3:9b:a2:fe:8c:1a:64:0e:d9:c0:74:33:
d7:63:4b:3e:19:14:a6:bb:92:0a:3e:47:4c:4b:04:c9:c3:6c:
7e:f4:14:ef:c5:8f:6f:2a:b1:e8:cc:0d:06:3a:3e:26:56:32:
8e:63:84:e3:03:f8:7e:c8:0e:dc:35:f3:36:63:b6:8e:05:1c:
17:45:7a:20:87:14:11:47:62:03:c6:37:40:54:87:4c:26:b6:
ca:da:3c:35:60:4a:48:77:71:22:34:58:fd:80:03:db:3f:ac:
ea:dc:ec:c2:31:8a:55:9d:35:00:5c:f9:93:e3:55:93:ec:ce:
47:fb:14:04:db:39:a9:84:d2:fe:27:81:39:e5:bc:db:7e:c7:
e5:06:5c:f2:a5:89:f1:8f:f5:5e:3a:4c:3d:65:25:32:47:59:
fd:85:f7:8a:2b:14:f8:a7:a7:9a:f2:a0:44:0e:42:72:0c:d1:
44:d6:cc:2d:85:87:67:8d:82:c3:06:73:cc:ec:98:b4:01:4f:
ea:86:94:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpP0EABMqmU2G9PnDxzR6gLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMzJkYzllNTI0OWZiNDFjNDdkZjQ5MTQxMjFhOWIxYTZh
ZWYxZmYwHhcNMjUxMTA0MTcwMDM5WhcNMjUxMTA1MTcwMDM5WjAzMTEwLwYDVQQD
Eyg5MzgzYzlkN2UzYzlmZTljZjA4MjExZjgxNmM0NjE5MzdhYjk3YTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmITsuESBD7VrTINWfBEXPA1EMZ9r
lza/DxXiSlJW/hbZ2IstsW1LZLVLnqJtjiibTopog9frQxhri0+mkPosJQLZkBlz
sia+HoNYT9MYr9xXrAs0F0covhng0iW5X4Zm6TRfPIM84lgI9L7Oef1+Pr/LgcIk
kVhlGPjlROEXgXqelJ/bf4NlfHXCplgOgsNqjiTCLzDPU9PS+Ub6mNO6EA/8XBsV
sFeUzdMGLYlNfUCf38NJlXara/08aStvNSgtAMcjUdmNKya65RnR2NajXzzNOnLf
I68sXDVgIqFQq4hmzqA5xsjEgcGo4bZGpQao3G4XwC96FOZV00ODUQQoMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJODydfjyf6c8IIR+BbEYZN6uXqRMB8GA1UdIwQY
MBaAFGwy3J5SSftBxH30kUEhqbGmrvH/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkRMY25sSkotMEhFZmZTUlFTR3BzYWF1OGY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS81MWJhMjctMjVlMi00NzI3LWE0YjUt
M2ZiYzk3NTllYjZhLzEvYkRMY25sSkotMEhFZmZTUlFTR3BzYWF1OGY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS81MWJhMjctMjVlMi00NzI3LWE0YjUtM2ZiYzk3NTllYjZh
LzEvYkRMY25sSkotMEhFZmZTUlFTR3BzYWF1OGY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEr1J9kj2
xyRLbbU2xfnPrb+CYJY0H+0jQYmWHaTqEzAaEMmVXtjFxN3qgy62IX/trMCIcrUE
L34n/2cd85ui/owaZA7ZwHQz12NLPhkUpruSCj5HTEsEycNsfvQU78WPbyqx6MwN
Bjo+JlYyjmOE4wP4fsgO3DXzNmO2jgUcF0V6IIcUEUdiA8Y3QFSHTCa2yto8NWBK
SHdxIjRY/YAD2z+s6tzswjGKVZ01AFz5k+NVk+zOR/sUBNs5qYTS/ieBOeW8237H
5QZc8qWJ8Y/1XjpMPWUlMkdZ/YX3iisU+KenmvKgRA5CcgzRRNbMLYWHZ42CwwZz
zOyYtAFP6oaUlA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:27:27 2025 by rpki-client