Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
File: bO-kEfCTakZthB7CkM2AzFUKf24.mft (raw, json)
Hash identifier: 2Wj9Qv5RRbgIea67zc4Fzm6aJsd0PY37Y8xClWuvq7M=
Subject key identifier: 6C:E0:CC:45:C0:2F:5A:B0:FA:D9:80:81:2F:47:E4:E6:76:C7:FC:0E
Authority key identifier: 6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
Certificate issuer: /CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Certificate serial: 01976961779E57DC3863E0645F7CB2772BEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
Manifest number: 0CFF
Signing time: Fri 13 Jun 2025 13:01:24 +0000
Manifest this update: Fri 13 Jun 2025 13:01:24 +0000
Manifest next update: Sat 14 Jun 2025 13:01:24 +0000
Files and hashes: 1: NReTA04T-77ajSQKWxM1eqqKR6E.roa (hash: R7bW888WzZHhXdeD1e6y9tpUbGADNmO2hfMW/oe0deE=)
2: bO-kEfCTakZthB7CkM2AzFUKf24.crl (hash: afnc69qZ/SYo30BJLb01eRRtrQgqTuvqS158SKqOTHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:77:9e:57:dc:38:63:e0:64:5f:7c:b2:77:2b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Validity
Not Before: Jun 13 13:01:24 2025 GMT
Not After : Jun 14 13:01:24 2025 GMT
Subject: CN=6ce0cc45c02f5ab0fad980812f47e4e676c7fc0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e1:0e:86:da:e4:d1:45:49:c6:8f:c1:c0:f3:
d5:76:f6:fe:b5:b2:e2:a6:a7:40:e7:81:36:3c:4d:
9e:12:15:d3:e3:4e:6a:c8:d9:f2:d7:a6:d7:a7:1a:
c2:66:b5:df:73:e8:89:31:4a:7c:d3:57:ae:2f:98:
69:48:ab:29:05:6e:ee:a9:55:41:00:56:5f:f1:56:
92:85:35:ed:f3:11:f4:01:43:47:f8:95:69:d4:4a:
c0:6f:40:61:8b:76:27:62:38:45:68:4d:7c:ec:c5:
5a:e2:b5:4f:55:04:dd:77:9c:64:90:46:47:44:4f:
a8:d4:8f:f8:78:ab:20:d4:32:1c:46:de:31:61:6b:
1b:b7:a8:d9:93:fe:cf:35:59:2a:bc:8c:66:42:cb:
d9:99:76:c7:fe:e0:3d:ed:ff:76:ed:a2:0d:39:63:
2d:50:f1:28:0d:d4:9a:9f:ee:14:1e:09:ec:11:48:
b0:52:47:4b:8f:d3:cb:18:11:33:83:cc:b8:01:4d:
40:39:a9:1e:d5:e7:eb:21:c3:31:a9:99:c5:2b:19:
40:c4:b3:cc:2f:e2:16:bf:9c:cc:05:e1:52:2f:32:
cb:ea:d8:78:54:35:a3:18:f3:c0:34:1f:bc:47:a5:
b9:f7:2b:cd:74:87:bf:5f:0c:a3:50:be:c3:0d:64:
f9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E0:CC:45:C0:2F:5A:B0:FA:D9:80:81:2F:47:E4:E6:76:C7:FC:0E
X509v3 Authority Key Identifier:
keyid:6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:58:61:94:c5:41:ec:5c:6a:b6:bf:3d:0f:08:a8:1a:9e:f7:
19:c3:02:46:d9:3e:ad:cd:b8:ef:cc:32:3c:ba:cc:af:cc:b6:
5d:c8:a8:04:d8:a9:72:22:ec:5d:ac:d5:cc:fc:04:00:6b:10:
a2:55:b0:e3:3d:5c:c1:6f:a3:02:54:4c:c1:0c:ad:0b:ef:f2:
91:8b:c8:fb:b2:1a:7c:cf:8b:56:18:3f:6c:ee:6d:13:90:da:
3a:0d:e2:37:b4:d8:bd:31:99:eb:3d:c0:1f:df:ea:4c:e6:ab:
4b:6b:2d:e4:70:9f:1d:8f:63:ec:d3:74:19:65:7b:63:5c:b6:
6c:a6:dd:ef:99:18:3a:d0:23:30:73:fd:19:73:36:74:ed:8b:
3f:f6:16:22:ff:bf:a7:8b:3e:ac:93:af:53:03:be:61:1f:1b:
49:11:26:0b:1f:46:d3:de:28:de:44:a8:25:64:f8:c1:9f:d6:
6d:3b:4f:fa:88:3e:aa:5e:a4:01:30:88:54:b6:f4:7f:dc:59:
ed:d3:31:08:e9:78:f9:d5:ca:50:2a:36:93:31:ac:0c:dc:73:
41:28:dc:95:ae:39:39:96:25:ca:d9:44:30:07:cd:55:72:f9:
d8:bd:c8:f0:3e:6d:e2:b9:0d:c0:99:4e:3b:bd:28:ae:c3:7c:
3e:17:da:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:50 2025 by rpki-client