Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
File: bHOgSn0Ost9H2vDDn7p142XIhT0.mft (raw, json)
Hash identifier: /MvJentQS1JSziDnI9qj3yqalFiXclopyhRx0PabkOY=
Subject key identifier: 68:2C:73:BE:1C:3D:1A:61:82:F4:75:3F:41:0F:D7:0E:3D:5B:71:CE
Authority key identifier: 6C:73:A0:4A:7D:0E:B2:DF:47:DA:F0:C3:9F:BA:75:E3:65:C8:85:3D
Certificate issuer: /CN=6c73a04a7d0eb2df47daf0c39fba75e365c8853d
Certificate serial: 01974D0DB54DAEA624C85DE889A68BC88AF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
Manifest number: 0F50
Signing time: Sun 08 Jun 2025 01:00:33 +0000
Manifest this update: Sun 08 Jun 2025 01:00:33 +0000
Manifest next update: Mon 09 Jun 2025 01:00:33 +0000
Files and hashes: 1: 1g8u0Gir8yCyVBvzcuA27ZsMTcA.roa (hash: hLEqWjYzmOf232eRZFufaSm1niRcj5QeYBzcD6/dycc=)
2: bHOgSn0Ost9H2vDDn7p142XIhT0.crl (hash: 26kyHIdUw7skIMwSYHEk+I6LxA1oy/87TkGGAmNMKvM=)
3: uSLH-6azWyM6_toWim6PNb4arp4.roa (hash: imwU+Zb8TWocoYkIF0ZGoxJDK+doen6jZopoR2zFVWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:b5:4d:ae:a6:24:c8:5d:e8:89:a6:8b:c8:8a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c73a04a7d0eb2df47daf0c39fba75e365c8853d
Validity
Not Before: Jun 8 01:00:33 2025 GMT
Not After : Jun 9 01:00:33 2025 GMT
Subject: CN=682c73be1c3d1a6182f4753f410fd70e3d5b71ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:75:49:6c:05:b4:66:90:ff:d1:d3:c0:e2:e0:
cf:03:0d:bd:25:33:b0:73:78:8a:fe:32:b9:35:bd:
1f:32:26:83:e2:3a:7b:89:e6:36:45:30:5f:86:12:
78:66:0f:b6:3c:0f:e1:5a:ad:d6:9d:cc:ee:b0:10:
ad:e4:02:3b:aa:46:a7:75:2c:87:d1:4c:cf:f7:28:
e1:53:c4:90:0b:ed:00:ae:ad:42:48:15:c7:59:c1:
e5:31:82:86:a6:de:88:8e:13:52:36:fc:0d:f2:7a:
b4:94:8b:1d:c1:1b:2c:76:5a:42:14:22:2e:01:0a:
8e:2f:2f:44:88:ad:b8:cc:25:c3:80:64:91:00:81:
65:a8:d3:bb:46:00:e8:f0:91:21:f5:73:16:4f:be:
2f:ab:77:8e:94:a7:04:17:0c:54:b5:5a:7a:6b:06:
46:df:03:0d:cb:96:d1:49:06:4b:1a:d1:27:44:70:
21:56:f3:ec:4c:6c:e8:81:a5:93:31:cd:28:4d:e3:
82:08:2e:9d:a5:71:15:d8:b7:3d:23:d9:0e:67:4a:
50:be:38:7d:01:d9:1a:18:c5:79:d3:87:c4:ab:fd:
f7:45:1a:a8:db:df:c0:46:a7:9e:4e:9f:44:ac:cf:
f9:e6:24:f4:fc:77:3e:38:b9:3f:23:5d:3a:dc:bf:
23:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2C:73:BE:1C:3D:1A:61:82:F4:75:3F:41:0F:D7:0E:3D:5B:71:CE
X509v3 Authority Key Identifier:
keyid:6C:73:A0:4A:7D:0E:B2:DF:47:DA:F0:C3:9F:BA:75:E3:65:C8:85:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:8e:bd:00:f8:73:d2:cf:23:19:a2:34:23:cd:c3:17:55:d1:
c6:79:6f:c8:15:8e:bc:ef:15:92:10:1c:37:6b:93:c0:e8:74:
58:d8:f2:2b:89:10:dc:7c:02:51:51:cd:bb:fd:af:e8:b6:21:
c2:24:79:70:32:ca:54:75:87:fe:08:fa:60:cf:58:60:a0:97:
48:7b:cf:d4:9e:27:44:88:2a:05:c6:ac:65:d2:17:45:8b:00:
90:55:52:19:75:cc:60:26:58:51:5d:de:3f:4c:13:cf:3e:02:
07:11:f1:9b:20:36:9d:d3:68:78:0a:c2:89:19:ad:c9:a4:b1:
fb:e3:3c:0f:d3:ca:d7:bc:54:da:5e:01:ea:71:47:09:a2:b9:
5a:d8:f1:a4:9f:cb:e5:32:f4:54:7b:a7:d8:42:0b:1f:52:c7:
25:09:2b:fd:d2:e6:c8:a4:9a:99:ae:2a:4b:34:26:36:59:43:
76:b4:e1:97:19:28:b1:54:80:b8:fe:05:15:f3:1d:4e:2c:80:
65:44:6f:84:b0:33:d8:c9:f1:54:e2:8a:46:77:c4:12:bd:dd:
46:7a:45:4c:6b:14:ef:33:f7:b0:49:8c:3c:56:8b:9f:de:74:
a6:37:97:ed:6a:e4:22:4b:5d:e7:4e:0f:43:66:8f:43:f3:a9:
04:c6:58:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:50:10 2025 by rpki-client