Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
File: bHO9JP2DCIa_otKWFBbSGF3jN3I.mft (raw, json)
Hash identifier: AQWtgIr0MgbqtODxNbfqIejEbdW9uwlc6gE0z/yKuSk=
Subject key identifier: 0B:E1:E9:21:B2:D2:42:13:11:CB:8F:DE:4E:5C:13:27:89:1A:C7:85
Authority key identifier: 6C:73:BD:24:FD:83:08:86:BF:A2:D2:96:14:16:D2:18:5D:E3:37:72
Certificate issuer: /CN=6c73bd24fd830886bfa2d2961416d2185de33772
Certificate serial: 0197488C5EA5E84D403FC1CE66DAB7147697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
Manifest number: 08C8
Signing time: Sat 07 Jun 2025 04:00:47 +0000
Manifest this update: Sat 07 Jun 2025 04:00:47 +0000
Manifest next update: Sun 08 Jun 2025 04:00:47 +0000
Files and hashes: 1: bHO9JP2DCIa_otKWFBbSGF3jN3I.crl (hash: al9M3Iev/ioCRTbnd5/AexUXoASlPbAIN5TCcAw1mhc=)
2: qHEAWZ6N3iBzcK7IIzIjqot58Rk.roa (hash: n8u6jtIG9RsDk/UjBbBpLB8puiC2i8ky96Vt7ctj0eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:5e:a5:e8:4d:40:3f:c1:ce:66:da:b7:14:76:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c73bd24fd830886bfa2d2961416d2185de33772
Validity
Not Before: Jun 7 04:00:47 2025 GMT
Not After : Jun 8 04:00:47 2025 GMT
Subject: CN=0be1e921b2d2421311cb8fde4e5c1327891ac785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:02:70:25:85:d1:be:32:9d:a1:e5:3e:d9:d7:
5c:26:71:23:f3:73:20:90:2a:7e:ae:96:31:48:ab:
67:b6:50:c4:b2:42:98:54:2f:2c:ad:c6:46:0a:b8:
c1:3f:9b:d0:62:4e:84:42:ba:41:de:58:70:36:20:
67:00:d8:f0:f3:bd:de:72:eb:8c:91:83:91:91:a7:
0f:e3:71:bf:bd:16:12:78:46:15:af:6e:7c:40:f2:
c6:5c:36:c0:3f:0d:5d:2b:6d:7d:7c:32:da:9c:b2:
01:23:ca:11:ce:13:45:b9:81:52:b8:13:f3:89:a0:
24:53:ab:5d:f1:50:6c:f8:00:aa:ec:3e:46:b4:bb:
b9:29:c3:29:be:fe:1e:45:1f:52:77:54:be:45:56:
a6:2e:66:60:30:b8:20:1f:30:d1:e1:f1:20:16:2d:
45:35:6b:fe:a6:3d:cc:5f:77:f5:64:e4:68:0d:a8:
79:8d:b8:f0:ff:1e:7d:cf:b2:59:12:53:e6:62:e4:
9d:ae:eb:f8:16:d5:b2:5a:35:e4:8a:eb:4f:ab:88:
b4:1b:8e:f7:e4:fc:cc:e9:48:6c:8f:e8:0c:4c:74:
82:70:d1:54:db:aa:a6:30:cd:b6:74:a6:e4:c6:39:
6d:48:a2:00:7e:53:77:38:70:9e:fb:25:a2:c1:33:
f2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E1:E9:21:B2:D2:42:13:11:CB:8F:DE:4E:5C:13:27:89:1A:C7:85
X509v3 Authority Key Identifier:
keyid:6C:73:BD:24:FD:83:08:86:BF:A2:D2:96:14:16:D2:18:5D:E3:37:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:36:4c:1b:87:55:e9:99:91:7f:0e:62:f9:09:10:8e:c2:d6:
3f:84:ac:ac:cf:e2:b0:c9:23:86:6d:99:df:e4:34:46:16:9c:
8b:60:6b:14:a2:61:6c:36:cc:5a:b0:5a:44:d5:27:bc:b7:f5:
89:52:ef:fb:91:6e:d7:78:df:4e:56:6e:26:15:9b:62:ef:d2:
72:75:b1:c7:c7:59:6c:f6:6a:2d:09:b8:bb:f5:19:1e:04:16:
21:23:ed:6b:88:e8:05:48:17:94:e2:ca:5d:78:00:f3:59:a0:
a4:c1:10:83:38:75:7e:f6:9d:e8:5b:67:f9:a4:27:52:7e:49:
36:a4:67:4e:c2:dc:51:80:f8:8c:58:1e:b0:0f:87:71:af:83:
7b:20:57:36:80:7d:6e:37:36:95:9f:73:8c:f7:8a:ed:28:3f:
3c:4b:90:f6:ef:b5:fc:19:cd:3e:20:8e:3a:5b:2d:89:70:e5:
16:dd:42:4a:37:97:f6:d6:f6:19:15:07:a3:ef:04:e1:d7:2b:
e9:df:0d:94:7c:fd:1a:72:56:c4:b9:df:ba:65:be:5d:b5:48:
af:87:76:11:8c:df:d8:d8:b9:6c:9c:d8:96:3a:0b:8e:1c:60:
c8:cb:8c:82:b0:c5:b7:ab:93:01:bc:42:1e:4e:16:d3:79:b9:
96:87:69:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:57:15 2025 by rpki-client