Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
File: bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft (raw, json)
Hash identifier: mhx0sIbbkVbOQFyu+krLChYFaSQBwos+3VHLsHU6Fcc=
Subject key identifier: 42:14:34:05:55:90:1E:2B:3E:40:7E:2D:DA:BB:4F:52:8E:05:0F:45
Authority key identifier: 6C:E3:FB:86:78:61:DA:AF:D7:81:27:98:97:FE:25:A8:EB:37:14:68
Certificate issuer: /CN=6ce3fb867861daafd781279897fe25a8eb371468
Certificate serial: 01993492B6E61A8EC8B2425D77C8A0C4E2C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
Manifest number: 02CE
Signing time: Wed 10 Sep 2025 17:00:54 +0000
Manifest this update: Wed 10 Sep 2025 17:00:54 +0000
Manifest next update: Thu 11 Sep 2025 17:00:54 +0000
Files and hashes: 1: EH31K6AeAlTxuZgsWC0CP6nqgCw.roa (hash: 5F10SKVR7MZweS+vgHdYbBmQMLKWeQTvpJE6zRYHQ8A=)
2: bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl (hash: W8rjjD83iv5PvkK+RJvvlVfBy/D83apdbBkbtlC7Ayk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:92:b6:e6:1a:8e:c8:b2:42:5d:77:c8:a0:c4:e2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce3fb867861daafd781279897fe25a8eb371468
Validity
Not Before: Sep 10 17:00:54 2025 GMT
Not After : Sep 11 17:00:54 2025 GMT
Subject: CN=4214340555901e2b3e407e2ddabb4f528e050f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7b:90:8a:87:74:53:11:a0:54:41:13:19:74:
45:78:f0:ef:11:c7:6c:c0:19:fc:c3:51:06:f2:20:
95:c9:cd:78:67:fc:06:7b:5c:94:34:6c:a4:f4:e3:
b0:1d:0f:e4:ec:d2:4c:57:4b:26:4c:8b:c6:89:35:
4a:b5:78:5f:da:26:8a:eb:e3:4b:49:94:39:32:23:
35:bb:5d:7e:ef:89:8b:d9:9d:9b:ac:e5:1f:db:93:
8c:ab:f9:53:cc:bd:2b:71:57:e9:c2:f9:4a:d3:88:
a2:37:b8:fa:fe:2c:5f:08:8a:bb:27:fd:d2:c4:11:
b6:ff:c4:43:e0:8f:22:4b:3b:28:51:44:11:9f:7a:
4e:e9:14:9c:e9:6c:43:3c:04:15:11:16:17:05:19:
3f:e5:cc:ea:56:ce:85:dc:62:5d:ab:01:a1:99:56:
49:6d:a8:6d:d8:13:30:36:99:54:60:92:9a:ca:56:
fd:6d:1b:a3:57:39:0f:0e:aa:07:8d:30:28:4b:1d:
4c:72:b0:b1:f6:2b:ed:36:32:bd:78:f4:8a:da:8c:
40:04:66:51:80:61:3b:7e:85:ed:93:28:5c:ea:bb:
73:d3:53:c1:2c:09:7b:f9:22:14:e7:a6:1b:35:37:
61:2f:f0:6f:64:ca:49:dd:02:07:91:80:40:25:8e:
80:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:14:34:05:55:90:1E:2B:3E:40:7E:2D:DA:BB:4F:52:8E:05:0F:45
X509v3 Authority Key Identifier:
keyid:6C:E3:FB:86:78:61:DA:AF:D7:81:27:98:97:FE:25:A8:EB:37:14:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:6e:9b:77:07:3e:06:5b:7b:ff:77:67:0e:9c:ed:ec:89:5f:
8d:18:cd:d1:e9:46:55:42:11:bb:40:88:3c:01:9d:b4:8c:0f:
03:3f:43:c9:56:19:8a:14:79:0c:2b:55:86:81:13:cc:28:af:
ba:66:ae:d6:74:1d:7c:20:ea:a0:e8:9f:45:4c:eb:37:21:54:
06:8e:d6:e9:39:ca:ff:c3:7b:56:3e:ef:5b:eb:77:d9:f8:d9:
88:37:97:1c:40:a9:8c:a1:42:14:49:80:88:be:36:1d:07:e2:
e1:95:3c:60:b8:7d:fa:29:00:b7:bb:4a:1e:d3:97:b9:91:67:
a1:88:d1:33:f7:81:96:f6:59:9b:aa:d9:06:b2:6a:c6:27:19:
d1:45:7f:a9:46:2e:36:29:51:b8:12:2a:3d:f8:94:c2:9a:70:
9a:89:7d:7b:a4:29:a5:fa:27:99:25:82:0f:0f:c8:67:27:9b:
b3:f2:5c:3d:cc:84:aa:ad:a6:8a:d1:9a:2e:97:f4:d3:f4:4c:
11:41:4a:4e:23:4a:2f:11:e5:c5:42:a8:a0:db:86:f6:9e:c8:
30:96:2c:58:1b:33:5d:7b:ff:b9:5c:4d:49:28:0a:40:c5:9b:
4f:8a:2c:59:d9:d0:a1:64:60:ed:b0:53:de:8b:1f:ca:c6:58:
e8:38:46:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 02:51:46 2025 by rpki-client