Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
File: bOrnoCiJYKda-M6A54iFQ8f3fNc.mft (raw, json)
Hash identifier: DECmdHUO58vUtk5YUwXu6Ra1gYVRC55Too1z08ivqE4=
Subject key identifier: FD:3F:82:68:14:C3:4D:16:5A:3D:0B:47:53:7C:26:89:FD:60:5A:4B
Authority key identifier: 6C:EA:E7:A0:28:89:60:A7:5A:F8:CE:80:E7:88:85:43:C7:F7:7C:D7
Certificate issuer: /CN=6ceae7a0288960a75af8ce80e7888543c7f77cd7
Certificate serial: 0199239FCAB8B4349AAB90CEA47EA5425B13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
Manifest number: 1380
Signing time: Sun 07 Sep 2025 10:01:38 +0000
Manifest this update: Sun 07 Sep 2025 10:01:38 +0000
Manifest next update: Mon 08 Sep 2025 10:01:38 +0000
Files and hashes: 1: 6Zx8tvFW-otCSIx-0XXwdAcWAvY.roa (hash: vXtudZUUi1vh+dqd99m5Me5cUdKc0jshPf9ev6mVJpw=)
2: bOrnoCiJYKda-M6A54iFQ8f3fNc.crl (hash: 1+cCNXWA2tfbavLecbcbBzBSeYOZuzAwk5GVjy3nV18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:ca:b8:b4:34:9a:ab:90:ce:a4:7e:a5:42:5b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ceae7a0288960a75af8ce80e7888543c7f77cd7
Validity
Not Before: Sep 7 10:01:38 2025 GMT
Not After : Sep 8 10:01:38 2025 GMT
Subject: CN=fd3f826814c34d165a3d0b47537c2689fd605a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a7:1e:c2:39:72:cc:b3:61:be:fe:18:a7:0a:
13:5b:10:23:bc:fc:bc:87:90:0e:99:2f:bd:da:d3:
19:bb:8f:00:0c:79:8f:26:c4:bc:ed:b4:4f:7b:54:
f6:ed:0f:c7:bc:b0:8c:9b:2e:c2:25:33:b4:2e:c2:
ca:73:8d:22:a2:ae:b0:3a:75:82:e2:3a:8d:3d:c0:
78:3a:31:d0:38:0d:5e:10:1f:04:1c:89:c4:6b:f6:
bf:43:e3:bf:b1:f9:13:7f:46:68:f2:98:11:2d:ab:
99:7e:31:e7:d6:85:e1:33:78:0b:ea:9a:67:bc:0c:
61:17:cc:93:bc:b9:84:3e:a1:32:68:3f:99:45:54:
a0:37:96:2f:64:03:b9:45:85:65:e3:0a:e2:e9:1d:
55:95:6d:f6:98:01:3c:e1:cc:e6:f8:93:72:25:da:
45:11:1f:63:a6:9b:29:39:29:53:ae:74:31:01:d9:
c4:33:93:a4:db:df:25:ab:65:58:bd:d3:60:b9:b8:
17:94:72:3c:f0:29:70:27:74:ed:3c:6b:0c:3e:eb:
52:4e:cb:01:b7:d3:22:c3:22:aa:cf:9b:77:a0:20:
58:ec:33:39:17:42:f4:7e:de:ff:66:2b:6d:6e:1f:
f2:c4:81:0d:27:27:ac:ed:3b:df:23:b4:f7:bb:2a:
e4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3F:82:68:14:C3:4D:16:5A:3D:0B:47:53:7C:26:89:FD:60:5A:4B
X509v3 Authority Key Identifier:
keyid:6C:EA:E7:A0:28:89:60:A7:5A:F8:CE:80:E7:88:85:43:C7:F7:7C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b3:16:23:10:1e:66:a3:1d:ac:f5:3a:d9:81:04:f9:da:00:
53:1e:29:b9:b9:9e:07:a4:23:30:9f:63:e1:63:24:b3:1a:b4:
ac:85:d4:c7:17:70:72:30:71:67:ce:29:04:9e:21:74:69:ea:
4e:8e:98:8e:28:ba:ea:4f:bb:0b:a9:eb:53:9c:57:49:ab:7b:
65:cc:04:ea:46:cb:02:05:8b:d2:7a:b0:53:1c:fc:fa:4f:5a:
cb:c2:e0:69:0d:86:54:e2:76:40:e5:3f:d9:97:9a:97:97:57:
c7:b9:8c:88:48:22:72:f7:c2:77:87:78:41:27:0f:78:47:d5:
4e:00:f2:38:43:ee:23:a4:bd:e0:81:bb:36:09:35:76:c5:80:
ac:2a:98:db:0f:5d:59:fe:c9:20:95:fd:a6:6e:0a:a7:43:7b:
11:3d:4e:ef:02:ad:f0:cb:e2:ee:a5:0a:3f:30:61:cf:b0:28:
66:64:d0:74:a1:40:e6:6a:1f:54:2c:02:29:fe:73:c4:ce:28:
5c:c6:26:82:0f:04:1a:54:19:da:70:f2:9a:70:ca:ac:4b:9b:
0e:04:2d:85:6b:a8:bc:14:f7:b8:15:59:18:6d:48:07:7e:42:
93:dd:c6:24:3b:fa:77:a3:d8:d7:13:77:fd:e6:45:f5:b1:30:
62:86:c5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:37 2025 by rpki-client