Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
File: bO-kEfCTakZthB7CkM2AzFUKf24.mft (raw, json)
Hash identifier: dDBS335NgHWvH9jWfwMSIaOndu9Im9LydfqqjFEHf7c=
Subject key identifier: 74:CD:0C:55:44:02:09:43:17:63:E0:65:2C:26:9D:F6:A8:44:EE:AC
Authority key identifier: 6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
Certificate issuer: /CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Certificate serial: 01984965C2813E7F1E9959E8F5C763026B6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
Manifest number: 0D73
Signing time: Sun 27 Jul 2025 01:01:02 +0000
Manifest this update: Sun 27 Jul 2025 01:01:02 +0000
Manifest next update: Mon 28 Jul 2025 01:01:02 +0000
Files and hashes: 1: NReTA04T-77ajSQKWxM1eqqKR6E.roa (hash: R7bW888WzZHhXdeD1e6y9tpUbGADNmO2hfMW/oe0deE=)
2: bO-kEfCTakZthB7CkM2AzFUKf24.crl (hash: EvgYXnvFObQ5+uulDLpI+01QazIXw0+M2LH0kwbMYco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:c2:81:3e:7f:1e:99:59:e8:f5:c7:63:02:6b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Validity
Not Before: Jul 27 01:01:02 2025 GMT
Not After : Jul 28 01:01:02 2025 GMT
Subject: CN=74cd0c55440209431763e0652c269df6a844eeac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:53:c1:87:28:48:e5:9a:dd:e0:1f:81:2f:17:
fc:d5:db:10:0c:04:57:de:7f:d2:03:30:0e:44:a7:
83:02:4b:f2:85:6d:07:fd:46:d5:f7:a6:c5:b5:6f:
07:a3:a7:e6:50:11:b7:b3:22:48:ba:5c:7e:2f:6b:
61:19:01:1d:d5:6e:77:70:11:40:14:8c:59:55:8c:
d8:65:d6:88:36:d4:3d:80:ef:bf:27:6c:24:1c:70:
3b:e0:63:26:77:c3:3d:9e:35:db:c8:b3:29:07:e0:
17:86:ff:e7:2e:3f:b3:3a:28:10:25:be:3e:a5:4f:
0d:c8:e2:28:98:46:fa:05:c0:87:29:33:38:78:1b:
d0:44:90:fd:95:9a:3a:eb:e8:8c:1f:61:02:b4:2d:
52:ba:d7:e7:d1:0a:c0:3b:11:d6:f7:a7:3e:74:93:
96:1d:bc:8a:3c:a1:5b:60:d8:bb:e9:cd:95:30:8f:
df:ee:4f:4e:83:a0:b3:89:96:30:46:72:84:19:0b:
32:a7:1a:09:e4:ca:78:2f:43:7f:cb:88:2f:fb:2e:
63:e9:cb:13:9f:b8:c0:86:c4:19:b3:9e:b3:ef:81:
88:88:fd:18:5c:ab:ee:b7:51:ce:2f:70:bb:3a:00:
e9:1b:e9:c7:fa:2e:df:80:17:ac:4e:8f:6d:85:96:
5f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CD:0C:55:44:02:09:43:17:63:E0:65:2C:26:9D:F6:A8:44:EE:AC
X509v3 Authority Key Identifier:
keyid:6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:55:9a:ff:b6:e7:ba:31:c2:86:46:1f:39:08:ee:23:02:79:
0a:18:40:2d:4d:09:ee:22:47:f4:6c:e7:74:7f:f5:75:01:5b:
78:69:d6:b4:d2:80:c6:53:19:cd:14:4f:17:17:e4:8d:e1:a0:
6f:e0:a7:40:27:03:91:bc:28:2d:56:4a:06:f5:94:66:fb:39:
cc:5d:d0:6a:f4:11:e8:6a:47:8d:a7:b0:da:50:40:d1:15:10:
12:de:1b:43:d3:20:21:71:95:7d:c7:c5:0d:2b:22:3a:20:d8:
f2:05:6b:f6:65:0d:65:38:62:4f:7b:35:bf:70:c4:88:e8:38:
78:08:5b:2f:97:0e:1b:43:46:af:84:4c:75:cc:22:b4:8c:43:
16:d7:10:53:a1:d5:54:e9:14:cd:c3:16:2e:ef:75:0c:de:2a:
62:a6:cd:16:fb:86:c7:2c:b1:70:e4:4f:db:46:5b:d8:7e:d4:
3d:03:23:c9:b1:6c:22:82:18:a7:5b:61:c7:a1:4a:73:6e:68:
c0:b6:84:56:fd:38:e3:6c:7b:64:98:79:d7:56:4e:90:7e:49:
ff:f9:de:27:b7:27:2c:48:15:b5:58:4e:b4:ce:cf:16:1e:a9:
8a:a5:aa:b8:34:56:1a:c2:df:92:2d:cb:32:75:fb:6c:1c:c2:
d3:97:8d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:28:50 2025 by rpki-client