Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
File: bO-kEfCTakZthB7CkM2AzFUKf24.mft (raw, json)
Hash identifier: P/yJCDFH0NyLJL3YMuzFA2bchnEknZ0HOiCmhRqn8X0=
Subject key identifier: 5B:EB:9C:D6:5A:98:FC:93:48:40:17:09:49:C8:31:DB:AB:EB:6A:48
Authority key identifier: 6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
Certificate issuer: /CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Certificate serial: 019A2C326190B5C7094EDF7682586A8B0E8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
Manifest number: 0E6D
Signing time: Tue 28 Oct 2025 19:01:30 +0000
Manifest this update: Tue 28 Oct 2025 19:01:30 +0000
Manifest next update: Wed 29 Oct 2025 19:01:30 +0000
Files and hashes: 1: NReTA04T-77ajSQKWxM1eqqKR6E.roa (hash: R7bW888WzZHhXdeD1e6y9tpUbGADNmO2hfMW/oe0deE=)
2: bO-kEfCTakZthB7CkM2AzFUKf24.crl (hash: F564u/JDDmiqUkDjh1ptxMhGn0rzPr+50yub1KnPHWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 19:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:32:61:90:b5:c7:09:4e:df:76:82:58:6a:8b:0e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Validity
Not Before: Oct 28 19:01:30 2025 GMT
Not After : Oct 29 19:01:30 2025 GMT
Subject: CN=5beb9cd65a98fc934840170949c831dbabeb6a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a7:1e:c2:1d:f4:fc:e7:a2:bf:e0:b0:e2:52:
d0:9b:1c:11:24:84:8e:93:5f:68:1c:47:fc:49:7e:
e7:2a:bc:24:ff:cd:b2:0f:1a:24:b3:81:2b:42:8f:
c4:7e:14:42:0e:17:ee:ca:22:f3:ab:2d:e7:93:c2:
5b:bd:4d:66:59:6c:43:91:5f:f3:a8:e6:82:11:27:
c6:fd:16:9f:2d:14:63:02:df:13:5e:77:1f:8b:1f:
86:3c:d6:0d:e3:77:76:aa:ec:1b:52:48:96:88:8c:
04:9a:96:4c:ed:87:c8:42:38:9d:67:52:43:d0:22:
8c:c2:57:2f:60:23:25:26:6e:41:da:e5:7f:10:25:
14:c5:5e:b0:56:dc:80:f3:da:b7:a9:96:98:3a:61:
0c:ff:bb:1d:0c:cd:35:bd:13:05:8d:14:a8:a2:c6:
9a:fb:6b:2a:67:c3:00:4b:74:04:96:de:fb:9a:c5:
f2:88:19:5a:f3:89:bb:68:dd:86:06:0b:9f:0d:57:
1a:c2:b5:2f:8d:87:32:af:0b:05:13:d0:c4:19:c2:
ad:1a:5b:de:59:5c:e0:16:2f:a5:38:be:4c:31:52:
f6:d3:b7:86:9b:81:fa:32:e4:d4:f4:98:9f:62:0c:
d2:1c:71:b7:e8:94:d8:1c:0b:b6:37:e4:b8:31:3f:
9f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EB:9C:D6:5A:98:FC:93:48:40:17:09:49:C8:31:DB:AB:EB:6A:48
X509v3 Authority Key Identifier:
keyid:6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e8:d9:cc:2f:e4:eb:d3:ff:f3:34:c4:c8:67:4a:49:17:b1:
97:fd:9e:83:a5:7b:9c:94:f2:e9:ec:28:c5:fc:58:db:a0:5d:
6e:1a:c4:83:bf:52:2d:ce:82:43:ce:23:87:1d:ed:63:9c:19:
08:cb:da:da:a2:8b:29:cb:5c:57:c3:6d:ad:a5:ee:89:33:7f:
b7:e0:c7:46:8c:94:18:5a:6c:5c:b9:54:c2:bb:b3:f3:33:4c:
0b:99:3c:af:9a:84:06:bb:be:86:4d:7f:d0:3c:56:68:f4:b8:
b1:cc:06:79:bc:c7:93:c5:66:29:2f:5f:82:0d:b5:ae:5f:ae:
38:3b:a2:5a:12:3b:26:95:84:d9:8d:6e:9c:98:23:58:fc:26:
7d:da:7e:d9:0a:8b:ad:17:c0:f8:28:74:81:07:0a:f9:7e:0c:
84:e2:fd:22:44:36:6d:e9:75:da:59:88:95:14:35:d8:4e:71:
f4:63:e7:bf:70:c6:ea:27:16:7d:53:30:12:54:16:aa:65:17:
06:7c:c8:ee:61:1c:67:79:40:68:65:db:12:7a:a0:05:ed:00:
8e:d6:91:5b:e8:03:bc:fb:47:b4:4d:55:40:f8:dd:87:28:b3:
aa:77:c8:2a:37:da:31:5c:20:9a:3f:46:60:fc:cd:0b:d1:2c:
b6:a7:43:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 00:50:05 2025 by rpki-client