Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
File: bO-kEfCTakZthB7CkM2AzFUKf24.mft (raw, json)
Hash identifier: Iw1UeMYXj656ZbPxdj9drNshBrXnePDdN3I6L3N4HHg=
Subject key identifier: AC:6A:C5:52:43:38:DA:10:07:19:FF:E1:10:46:A8:41:03:BA:B1:1E
Authority key identifier: 6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
Certificate issuer: /CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Certificate serial: 0197488D4640FF6BFC82DFBFE7B87641F408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
Manifest number: 0CEE
Signing time: Sat 07 Jun 2025 04:01:47 +0000
Manifest this update: Sat 07 Jun 2025 04:01:47 +0000
Manifest next update: Sun 08 Jun 2025 04:01:47 +0000
Files and hashes: 1: NReTA04T-77ajSQKWxM1eqqKR6E.roa (hash: R7bW888WzZHhXdeD1e6y9tpUbGADNmO2hfMW/oe0deE=)
2: bO-kEfCTakZthB7CkM2AzFUKf24.crl (hash: Pli5ypsjVOwPn6qlpuhdClVnCNb1syuGT4kYFnHqDjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:46:40:ff:6b:fc:82:df:bf:e7:b8:76:41:f4:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Validity
Not Before: Jun 7 04:01:47 2025 GMT
Not After : Jun 8 04:01:47 2025 GMT
Subject: CN=ac6ac5524338da100719ffe11046a84103bab11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4b:ed:b7:a9:04:14:86:ea:66:33:bd:88:fa:
85:e6:66:d2:03:e2:f1:40:bf:a7:8b:bd:0d:38:86:
29:48:35:79:fb:ea:ef:e9:0c:0e:8d:a4:36:25:ee:
0e:18:91:af:b4:c3:d4:3a:bc:6e:d2:89:02:56:49:
a9:8e:43:c0:c0:22:2f:46:30:c1:b0:ac:5f:bc:4e:
ce:34:c4:e8:7a:41:c1:10:35:67:b6:f2:6b:62:a0:
0f:bf:a0:66:94:b8:de:21:ec:87:b6:d2:29:bd:88:
78:6b:84:c0:7e:f6:a0:11:bb:39:8e:99:81:64:b9:
d9:7e:16:21:97:22:57:58:8f:9b:92:0b:78:7c:a0:
b5:54:26:ee:d0:0c:f6:7f:d5:7d:d9:1e:48:5a:8c:
b2:65:c1:3d:61:63:b1:c4:21:96:9b:0c:20:ff:b7:
86:b4:ca:21:56:00:e8:b3:53:82:87:88:a9:36:04:
07:b0:7c:06:1c:5d:bd:f3:fe:87:f6:77:2e:5d:dd:
65:9a:cb:57:0d:30:f0:0d:4b:7a:d3:40:ec:63:00:
d6:7c:4c:80:e1:48:5b:ec:4a:9d:84:0d:fb:25:df:
01:6a:53:6b:69:6e:75:b2:7b:77:b4:f5:87:b4:4d:
33:5f:51:23:b6:09:1b:52:6e:13:89:44:90:ab:0b:
18:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6A:C5:52:43:38:DA:10:07:19:FF:E1:10:46:A8:41:03:BA:B1:1E
X509v3 Authority Key Identifier:
keyid:6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:31:1e:4c:2b:a4:79:10:f1:d1:33:ed:cb:fc:20:d0:79:73:
95:41:e6:09:41:f1:5a:52:64:de:b0:b3:30:a1:67:47:fa:e7:
60:1b:70:11:62:c5:24:ab:eb:7c:83:1b:e8:6d:81:4e:21:22:
ca:cc:5c:6d:5f:30:6e:bf:39:b2:ff:f9:3d:5d:e1:37:fa:62:
d8:fc:b7:be:b2:d0:76:6f:a4:99:e9:a3:22:34:1b:a3:08:e6:
e4:58:ca:00:64:29:53:bc:e2:c0:5c:24:5d:34:05:6c:b1:32:
50:ea:38:f0:55:f9:9a:80:1c:52:92:d4:42:62:6a:19:44:13:
10:d3:41:fd:24:92:bf:19:28:5a:34:fd:04:98:50:9a:02:f6:
26:57:2b:24:a0:0a:fe:f6:e7:74:83:8b:e1:7a:46:87:e8:af:
7e:fc:ab:15:f6:78:7f:0a:c6:da:6a:cc:73:6f:fd:56:c9:a6:
03:fb:19:a8:41:00:2b:1b:df:db:f3:f4:c8:08:e4:04:d3:75:
b3:89:67:d9:7a:23:99:f1:b4:b0:ce:86:ca:64:09:b5:cc:9b:
f3:3c:72:f7:4c:95:bd:35:de:ab:32:32:00:84:2b:71:bf:0e:
0f:4e:ca:14:26:d1:57:cc:6b:44:7e:5d:2b:ae:67:ed:d0:cc:
c3:cd:b5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:56:36 2025 by rpki-client