Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
File: bOrnoCiJYKda-M6A54iFQ8f3fNc.mft (raw, json)
Hash identifier: UxC84GWGkvyKpZeaDRnAjixW/c+1rG0puGVolPPCQxA=
Subject key identifier: 9C:DB:23:29:DD:52:B3:AE:4B:D1:1F:58:B4:37:72:BA:A8:8C:E4:AC
Authority key identifier: 6C:EA:E7:A0:28:89:60:A7:5A:F8:CE:80:E7:88:85:43:C7:F7:7C:D7
Certificate issuer: /CN=6ceae7a0288960a75af8ce80e7888543c7f77cd7
Certificate serial: 01974A7AE111DEA0A15352FAD648DCB13EC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
Manifest number: 128B
Signing time: Sat 07 Jun 2025 13:00:56 +0000
Manifest this update: Sat 07 Jun 2025 13:00:56 +0000
Manifest next update: Sun 08 Jun 2025 13:00:56 +0000
Files and hashes: 1: 6Zx8tvFW-otCSIx-0XXwdAcWAvY.roa (hash: vXtudZUUi1vh+dqd99m5Me5cUdKc0jshPf9ev6mVJpw=)
2: bOrnoCiJYKda-M6A54iFQ8f3fNc.crl (hash: JAnAyt4I9ttAH6Sh0B+A38MyohCHpU/yBcNATTyhHmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:e1:11:de:a0:a1:53:52:fa:d6:48:dc:b1:3e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ceae7a0288960a75af8ce80e7888543c7f77cd7
Validity
Not Before: Jun 7 13:00:56 2025 GMT
Not After : Jun 8 13:00:56 2025 GMT
Subject: CN=9cdb2329dd52b3ae4bd11f58b43772baa88ce4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:59:72:9f:9c:2d:85:b6:4c:e3:64:ab:01:a3:
47:f2:d6:bd:e5:86:76:75:83:10:70:37:63:21:54:
ec:53:8a:4f:5a:ea:26:11:62:04:a6:f7:e0:ec:59:
83:c3:a7:6b:a0:6b:65:d2:06:ac:1b:27:a8:08:f7:
00:dd:44:59:c9:ec:55:81:53:bd:6a:67:39:24:96:
3a:6a:36:c2:31:1b:4c:a3:9c:0d:e6:7f:6b:79:d8:
a6:be:67:ab:d8:f4:68:27:bc:80:2e:23:ef:07:e8:
50:de:c6:ba:f9:41:a3:db:0f:8b:fc:83:2d:18:f0:
ba:28:c9:02:98:32:8f:94:a2:4f:7b:36:7f:2b:e8:
ab:b7:29:10:bc:7a:da:d8:5e:90:0e:4e:0c:2d:8c:
ed:c4:e2:51:36:26:c4:76:db:59:df:fe:c1:fd:6b:
d3:91:ad:86:24:d3:b6:b2:54:6a:89:79:2c:30:40:
d2:8e:f1:2f:f3:5d:9a:8c:31:af:af:b6:57:fe:db:
77:e5:10:f1:b6:39:14:9d:e5:67:97:fe:a6:db:e1:
0e:33:7e:92:2a:5c:48:72:b4:73:3d:83:10:5b:27:
5f:ab:d4:09:63:70:66:ce:e7:06:51:ef:4d:58:11:
66:4e:bc:4b:4b:0c:9b:aa:8d:10:ba:d5:db:40:d3:
2c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DB:23:29:DD:52:B3:AE:4B:D1:1F:58:B4:37:72:BA:A8:8C:E4:AC
X509v3 Authority Key Identifier:
keyid:6C:EA:E7:A0:28:89:60:A7:5A:F8:CE:80:E7:88:85:43:C7:F7:7C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ce:ca:cd:f6:eb:45:96:2b:4e:0f:fb:d7:0b:09:7d:3c:b7:
91:13:2a:fd:17:34:3d:bb:04:ad:9f:94:5e:22:ef:62:1c:8f:
66:a2:11:52:27:b7:a3:b8:80:41:29:fa:2a:62:a5:42:92:56:
aa:8d:fa:5f:15:c5:71:f5:1b:d8:86:f5:40:89:e0:b0:7b:e9:
b9:ff:80:ed:1e:dd:1c:19:57:53:42:62:62:df:17:e9:23:fc:
8f:0b:ca:9d:60:95:3d:2b:e0:00:c5:48:98:80:ca:bd:5d:e3:
58:0e:52:f2:ed:47:13:ab:d6:20:be:ab:25:c9:df:09:f8:f8:
c2:0e:b5:ba:e5:5b:4a:a5:ee:e1:2a:4e:87:cf:1f:f4:da:b9:
47:73:cc:97:96:16:12:80:c5:3f:53:ee:8d:3e:a6:82:71:ed:
3d:84:35:f5:d5:92:09:60:20:60:d1:33:b3:8a:19:f7:64:99:
9b:92:16:ad:66:dd:5e:59:4a:b0:e4:04:20:12:29:c4:38:e0:
50:88:57:45:30:e8:0a:57:78:12:da:51:c9:f5:8d:5d:c9:dc:
e8:f1:d9:f4:ac:bc:c4:83:34:ce:51:fb:69:fa:97:49:5c:10:
e5:12:1f:30:d1:bd:50:65:da:7a:41:73:69:8b:ce:3d:02:79:
6e:f8:24:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:29:11 2025 by rpki-client