Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
File: bO-kEfCTakZthB7CkM2AzFUKf24.mft (raw, json)
Hash identifier: hP4XQAu/NMVGBcP0totrLQRosUWaJuLEsptY8ganI9A=
Subject key identifier: 0B:A7:DF:2B:93:D7:EB:3D:12:EF:8E:03:6D:AF:96:8A:F1:10:E1:AB
Authority key identifier: 6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
Certificate issuer: /CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Certificate serial: 019A4EF5958511E8FA9B7FF72B336BE9C5C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
Manifest number: 0E7F
Signing time: Tue 04 Nov 2025 13:01:48 +0000
Manifest this update: Tue 04 Nov 2025 13:01:48 +0000
Manifest next update: Wed 05 Nov 2025 13:01:48 +0000
Files and hashes: 1: NReTA04T-77ajSQKWxM1eqqKR6E.roa (hash: R7bW888WzZHhXdeD1e6y9tpUbGADNmO2hfMW/oe0deE=)
2: bO-kEfCTakZthB7CkM2AzFUKf24.crl (hash: 2yN5DlbiZBguVn1o5Ruuss92qSod1wWzeMEwX8fB+Y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:95:85:11:e8:fa:9b:7f:f7:2b:33:6b:e9:c5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Validity
Not Before: Nov 4 13:01:48 2025 GMT
Not After : Nov 5 13:01:48 2025 GMT
Subject: CN=0ba7df2b93d7eb3d12ef8e036daf968af110e1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:55:5f:68:47:51:05:8a:8b:2f:2c:8b:8b:78:
6e:a7:80:20:09:6c:ca:c5:f1:27:a9:ae:70:fc:9a:
67:0a:cd:36:2d:a9:22:9c:c0:b6:f7:d0:b2:39:a9:
88:58:77:46:46:7c:e5:ee:4a:49:69:27:e6:c6:f1:
d3:c6:b7:a4:ae:83:a1:c9:d7:70:e4:3e:fd:35:62:
5f:ef:c1:d9:1f:e8:76:56:d1:35:d6:fa:22:1b:b2:
c6:d9:ff:4c:71:4e:aa:3c:8f:36:b8:27:b0:1f:45:
54:a8:0b:79:5f:6b:e6:46:a8:6d:b5:a3:96:53:a6:
aa:e7:d3:c6:5b:35:1c:ba:ea:24:f5:fe:b6:da:6c:
a2:a4:86:6d:99:d6:2f:3c:77:8a:4c:7c:e0:96:d6:
fa:5f:21:d6:0d:c5:67:c6:e2:85:91:9d:11:38:b9:
71:d6:fc:28:a4:87:88:a8:b7:22:88:94:62:3b:67:
11:89:1f:bd:8c:86:af:4c:95:ce:fa:ec:0b:66:74:
e5:5d:04:f4:ea:fb:90:af:ba:44:ae:45:a1:98:22:
b5:f7:2f:15:b2:c8:f9:58:6e:98:1d:5c:59:1a:13:
b8:b9:be:da:33:a5:50:9c:9b:34:41:bd:95:54:38:
ad:fb:45:29:c3:1e:13:e5:88:0a:35:22:40:90:01:
50:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A7:DF:2B:93:D7:EB:3D:12:EF:8E:03:6D:AF:96:8A:F1:10:E1:AB
X509v3 Authority Key Identifier:
keyid:6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ea:6e:1d:87:e6:fd:3c:43:29:46:59:94:c0:eb:47:d1:c5:
f7:49:9d:25:43:70:4d:6e:a8:1d:6a:a9:d0:b2:92:07:9d:77:
ae:6c:f0:db:a6:f1:a6:03:2a:03:10:71:17:12:fc:f4:97:f7:
13:0e:9d:0f:ce:10:df:f9:3d:aa:d1:13:93:b7:aa:fa:89:31:
e9:ff:b5:ae:de:3a:e9:08:2b:a6:48:a4:58:8f:44:09:e7:6b:
f2:c2:74:85:e4:d6:3a:0c:de:9a:1d:d8:7b:28:b2:71:31:9d:
ad:96:24:81:0a:66:ec:62:e1:ed:bb:0e:5d:47:33:5f:06:69:
50:ea:c7:8f:17:f2:81:b0:be:a6:fc:fe:10:ed:55:80:6c:bd:
79:5a:d3:1d:c8:2b:1c:dd:de:99:1b:a5:0f:14:02:17:97:bb:
44:f9:2e:c8:e6:c4:b9:8c:93:b9:d4:9c:83:bb:db:d9:84:d3:
0d:15:7f:86:6e:b2:14:69:47:79:4b:d5:6d:b6:4b:32:81:89:
bd:28:15:7a:5b:30:9b:ac:09:ae:28:31:5e:9e:d7:9a:a0:c1:
fd:a1:eb:15:c3:a2:52:6a:1f:5a:f3:9d:a6:15:d0:6d:e8:d0:
55:2e:4f:38:3a:eb:0e:ab:bb:6d:38:a8:91:7c:26:b8:cb:4a:
2c:92:87:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:15 2025 by rpki-client