Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
File: bHO9JP2DCIa_otKWFBbSGF3jN3I.mft (raw, json)
Hash identifier: ig3xlpRnuqmpoBuX5Ozo2MVpW2tOKg7G2aXc3oF5yGw=
Subject key identifier: 93:F5:3C:6C:28:8B:70:46:63:C3:1B:8B:E3:47:54:1C:23:97:13:6F
Authority key identifier: 6C:73:BD:24:FD:83:08:86:BF:A2:D2:96:14:16:D2:18:5D:E3:37:72
Certificate issuer: /CN=6c73bd24fd830886bfa2d2961416d2185de33772
Certificate serial: 019921B0ECB24464A8C21665930A4D2D4C9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
Manifest number: 09BD
Signing time: Sun 07 Sep 2025 01:01:06 +0000
Manifest this update: Sun 07 Sep 2025 01:01:06 +0000
Manifest next update: Mon 08 Sep 2025 01:01:06 +0000
Files and hashes: 1: bHO9JP2DCIa_otKWFBbSGF3jN3I.crl (hash: rxxEAk8BNavhpa7Jfp5ZLCdcMWgR89othnIv9PkflEU=)
2: qHEAWZ6N3iBzcK7IIzIjqot58Rk.roa (hash: n8u6jtIG9RsDk/UjBbBpLB8puiC2i8ky96Vt7ctj0eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:ec:b2:44:64:a8:c2:16:65:93:0a:4d:2d:4c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c73bd24fd830886bfa2d2961416d2185de33772
Validity
Not Before: Sep 7 01:01:06 2025 GMT
Not After : Sep 8 01:01:06 2025 GMT
Subject: CN=93f53c6c288b704663c31b8be347541c2397136f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7f:96:66:7b:4d:18:cd:ff:40:62:87:b3:14:
f5:77:5d:a8:75:e2:32:ab:f4:fa:b7:42:83:02:95:
cc:84:25:6e:65:8f:a4:64:ce:d0:93:77:fe:3b:0f:
48:dc:bb:f5:ae:0d:4a:f0:98:9d:10:8c:3a:3c:b9:
4f:98:05:33:c6:d8:7f:51:2c:40:f7:43:ae:73:03:
6f:6b:4b:06:6c:8d:0c:49:d1:7a:58:fb:8f:98:29:
6c:42:f6:1b:19:b7:ac:c9:12:e5:83:12:43:7d:d7:
c8:b8:9a:59:7a:ea:91:e1:47:b5:88:7c:d5:fd:f7:
2e:ea:8a:c9:1f:a6:78:ba:69:3d:61:2d:d3:cd:37:
70:e9:10:6d:7f:08:4a:2c:a7:68:66:2c:70:04:a0:
f4:e1:69:52:07:55:3c:47:df:a8:3d:31:1f:29:fc:
3c:92:c0:b0:e3:b6:09:bd:a5:3d:ba:04:6a:e9:1d:
06:05:72:ba:15:5f:95:c5:18:5b:4c:19:78:e8:c8:
f1:82:b9:10:e6:0a:99:02:dc:ba:49:d6:2b:ea:96:
47:4d:37:83:03:85:d2:f4:d1:15:a9:3c:59:26:92:
05:9c:08:ca:71:bd:65:e2:12:05:dc:6f:f0:89:f1:
12:ab:fc:d4:b1:db:78:13:9f:51:59:81:11:3e:05:
e5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F5:3C:6C:28:8B:70:46:63:C3:1B:8B:E3:47:54:1C:23:97:13:6F
X509v3 Authority Key Identifier:
keyid:6C:73:BD:24:FD:83:08:86:BF:A2:D2:96:14:16:D2:18:5D:E3:37:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:37:59:a2:9a:b9:25:ec:a4:ae:a4:27:6d:ce:a5:59:b7:ad:
4a:b7:30:b1:7c:0b:64:6e:ae:b0:44:e3:71:42:73:eb:59:e4:
c7:13:eb:ca:a1:76:5c:3d:db:0d:8b:da:a2:d4:b9:8b:8e:11:
27:9f:70:4b:2b:cd:81:b8:60:46:99:02:c6:a1:87:06:8d:fa:
5b:5d:1e:2d:b8:40:a1:6b:cd:1c:7f:a2:0f:66:6b:9e:e7:2a:
8b:52:0e:eb:1d:99:44:2f:a5:62:f9:50:62:aa:fd:c1:f6:7a:
fb:17:74:53:80:ab:ee:09:8d:ad:22:d0:53:92:e9:2a:da:1a:
22:5f:d8:c2:ed:ee:f6:97:4e:99:0b:86:da:19:d1:9b:73:f7:
48:18:3f:c0:04:c7:bc:94:ef:38:ba:4c:8b:cc:d0:8e:2e:99:
39:ed:ac:7d:19:c0:d7:eb:52:2f:dd:5a:5e:0a:24:67:91:e1:
7d:b9:40:50:8e:da:9a:c4:9e:a4:43:7d:70:3e:cb:6a:d8:9a:
f0:f5:c6:9d:48:4b:cc:33:92:97:ff:af:20:d8:f1:15:6d:83:
4e:b7:4a:04:7e:6d:11:98:9c:3c:dd:39:58:6c:8b:47:cc:40:
f0:85:a3:e2:a5:ad:10:0a:a4:40:52:9e:24:eb:8b:df:d3:9d:
f8:25:45:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:16 2025 by rpki-client