Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
File: bDLcnlJJ-0HEffSRQSGpsaau8f8.mft (raw, json)
Hash identifier: YgvA8jM/90W2v6+yMN6Y2sVhhPw9VTLFw9gswtMXzf8=
Subject key identifier: DF:74:B4:EA:FA:22:98:C6:2C:8C:0B:61:B9:90:AC:FC:01:23:A5:E5
Authority key identifier: 6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
Certificate issuer: /CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Certificate serial: 01987C77A8ADCAFEAC93E562AB6B29EB66E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
Manifest number: 13D9
Signing time: Tue 05 Aug 2025 23:01:13 +0000
Manifest this update: Tue 05 Aug 2025 23:01:13 +0000
Manifest next update: Wed 06 Aug 2025 23:01:13 +0000
Files and hashes: 1: 0OtBGKZoArdG9xr5Hantq94pOBQ.roa (hash: iXzauuN3FjHWPtjyckYGhR1Sa3E/G7T5BGW2XCWiX3g=)
2: 8EuHcSXF93AJXZb7bhpJqQ9T-os.roa (hash: tA/g1MQIaVkGvGKFpxq+dGSCjDGH6Bsw81qSCo4f3fQ=)
3: bDLcnlJJ-0HEffSRQSGpsaau8f8.crl (hash: kSxvRxYGzk1sJxBTi28y8TF7+hKZojW66Jqx6JpacoA=)
4: pLoX4WpHFeM5jD6mdHah5z-d1Qc.roa (hash: OjXgWSjMIysxXIzCr8G2HbFXqB0exJC+XSuA+1t55uo=)
5: xk57NMD7hAx5NjNNvtBpMWNGREE.roa (hash: ETKtdzy2heJov69i+XXLHQAB4L1xigBSVsgiROK30og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:a8:ad:ca:fe:ac:93:e5:62:ab:6b:29:eb:66:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Validity
Not Before: Aug 5 23:01:13 2025 GMT
Not After : Aug 6 23:01:13 2025 GMT
Subject: CN=df74b4eafa2298c62c8c0b61b990acfc0123a5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:07:12:a7:1c:cb:c0:b6:cd:00:7d:77:90:3a:
7e:b8:14:bf:f5:bf:04:a5:6d:18:a2:97:1b:df:c5:
d9:cb:cf:54:9f:c9:cb:48:c7:4a:4b:5f:01:3c:37:
bb:6b:2b:98:f1:2f:53:86:f9:8f:b3:3e:b1:4d:51:
8a:69:cb:c0:78:4a:4a:b1:d9:29:fe:cc:73:ca:f0:
18:8e:de:f6:96:46:d9:b8:8b:4d:e2:a6:d3:76:55:
d4:6a:00:fa:b8:46:23:06:22:ec:fb:b8:ad:cc:f3:
7f:47:76:9e:c7:14:25:f5:0b:8f:83:eb:9f:a7:a3:
16:d4:69:1c:e6:91:75:6a:c2:74:65:f8:9f:aa:64:
33:53:2c:80:0d:19:e9:60:7b:7b:c9:a9:64:1a:aa:
23:9b:f1:67:3c:1b:22:ab:08:fc:26:4c:22:7d:c1:
e8:48:bf:46:d4:a0:41:62:09:48:f1:2e:9f:2c:b1:
99:14:d1:8a:80:c2:45:96:0e:95:e3:06:ac:08:45:
4c:df:53:22:e1:57:16:a4:d9:41:0a:d2:f2:e2:d5:
30:22:1b:a3:b5:b1:85:46:f2:13:db:16:25:56:64:
e1:2b:14:12:5d:66:41:2f:97:b6:38:43:9f:0d:af:
9e:5d:a6:b4:8d:60:dc:56:49:cf:3e:29:ac:2f:f9:
c3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:74:B4:EA:FA:22:98:C6:2C:8C:0B:61:B9:90:AC:FC:01:23:A5:E5
X509v3 Authority Key Identifier:
keyid:6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a6:9e:8f:f5:ee:ea:c1:19:b3:1b:1e:15:07:54:68:d4:72:
ab:77:d2:b4:48:a2:06:cb:d6:76:bb:a3:2d:40:5a:65:2a:64:
65:4b:1d:0d:18:5b:88:84:3f:d5:4f:94:47:bd:b8:48:f5:ab:
5b:30:1b:e1:42:1f:61:17:26:67:ba:d7:f8:ae:c6:b3:01:4f:
cd:ec:47:de:09:4f:81:88:24:0a:0c:9a:97:8f:bd:31:dc:b7:
8e:11:62:b8:47:c7:13:cb:85:85:43:4d:e1:9a:b2:f5:e6:eb:
1f:6c:de:0b:c1:92:f2:10:63:32:e9:bd:46:76:24:6a:74:5c:
6f:f9:c6:39:3b:22:dc:8d:15:d1:fa:80:39:3d:e7:1a:4d:5e:
88:d1:ec:b0:de:1d:73:24:87:9d:0e:a9:6f:ab:bb:94:28:af:
28:fc:4f:ef:87:0d:38:d2:b8:a2:25:11:3a:b3:fc:4e:08:84:
41:64:15:b9:dd:be:f3:fc:c1:95:c5:c5:56:e5:1b:53:86:3d:
3a:78:f9:a8:e5:4c:b1:6c:14:25:a9:00:d2:cf:4e:06:4a:c1:
85:7c:bf:e9:ba:a8:78:59:e6:c4:da:69:e0:bc:0f:08:7a:ae:
8a:8f:c0:8c:0f:a9:bc:36:60:04:8c:cc:c2:46:d5:8a:32:a3:
10:e5:18:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8d6ityv6sk+Viq2sp62bpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMzJkYzllNTI0OWZiNDFjNDdkZjQ5MTQxMjFhOWIxYTZh
ZWYxZmYwHhcNMjUwODA1MjMwMTEzWhcNMjUwODA2MjMwMTEzWjAzMTEwLwYDVQQD
EyhkZjc0YjRlYWZhMjI5OGM2MmM4YzBiNjFiOTkwYWNmYzAxMjNhNWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQcSpxzLwLbNAH13kDp+uBS/9b8E
pW0Yopcb38XZy89Un8nLSMdKS18BPDe7ayuY8S9ThvmPsz6xTVGKacvAeEpKsdkp
/sxzyvAYjt72lkbZuItN4qbTdlXUagD6uEYjBiLs+7itzPN/R3aexxQl9QuPg+uf
p6MW1Gkc5pF1asJ0ZfifqmQzUyyADRnpYHt7yalkGqojm/FnPBsiqwj8JkwifcHo
SL9G1KBBYglI8S6fLLGZFNGKgMJFlg6V4wasCEVM31Mi4VcWpNlBCtLy4tUwIhuj
tbGFRvIT2xYlVmThKxQSXWZBL5e2OEOfDa+eXaa0jWDcVknPPimsL/nD2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN90tOr6IpjGLIwLYbmQrPwBI6XlMB8GA1UdIwQY
MBaAFGwy3J5SSftBxH30kUEhqbGmrvH/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkRMY25sSkotMEhFZmZTUlFTR3BzYWF1OGY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS81MWJhMjctMjVlMi00NzI3LWE0YjUt
M2ZiYzk3NTllYjZhLzEvYkRMY25sSkotMEhFZmZTUlFTR3BzYWF1OGY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS81MWJhMjctMjVlMi00NzI3LWE0YjUtM2ZiYzk3NTllYjZh
LzEvYkRMY25sSkotMEhFZmZTUlFTR3BzYWF1OGY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF6aej/Xu
6sEZsxseFQdUaNRyq3fStEiiBsvWdrujLUBaZSpkZUsdDRhbiIQ/1U+UR724SPWr
WzAb4UIfYRcmZ7rX+K7GswFPzexH3glPgYgkCgyal4+9Mdy3jhFiuEfHE8uFhUNN
4Zqy9ebrH2zeC8GS8hBjMum9RnYkanRcb/nGOTsi3I0V0fqAOT3nGk1eiNHssN4d
cySHnQ6pb6u7lCivKPxP74cNONK4oiUROrP8TgiEQWQVud2+8/zBlcXFVuUbU4Y9
Onj5qOVMsWwUJakA0s9OBkrBhXy/6bqoeFnmxNpp4LwPCHquio/AjA+pvDZgBIzM
wkbVijKjEOUYVg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:27:03 2025 by rpki-client