
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
File: bO-kEfCTakZthB7CkM2AzFUKf24.mft (raw, json)
Hash identifier: ihptvWIwjN6eU8FtDTNeqAS0cokEYPSeiZDHanowKwQ=
Subject key identifier: D7:BE:58:90:0F:E0:9F:00:A4:FB:D9:B6:B2:C7:35:D3:69:E9:0B:17
Authority key identifier: 6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
Certificate issuer: /CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Certificate serial: 01987F78C844129B7066B47ED9A4B725F677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
Manifest number: 0D8F
Signing time: Wed 06 Aug 2025 13:01:18 +0000
Manifest this update: Wed 06 Aug 2025 13:01:18 +0000
Manifest next update: Thu 07 Aug 2025 13:01:18 +0000
Files and hashes: 1: NReTA04T-77ajSQKWxM1eqqKR6E.roa (hash: R7bW888WzZHhXdeD1e6y9tpUbGADNmO2hfMW/oe0deE=)
2: bO-kEfCTakZthB7CkM2AzFUKf24.crl (hash: jZZeFHekY+1j6tJiHNCHtAFb4GQvUKSHPjDVtNQk+KQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:78:c8:44:12:9b:70:66:b4:7e:d9:a4:b7:25:f6:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Validity
Not Before: Aug 6 13:01:18 2025 GMT
Not After : Aug 7 13:01:18 2025 GMT
Subject: CN=d7be58900fe09f00a4fbd9b6b2c735d369e90b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9d:cf:71:f8:58:78:8f:81:43:98:8b:2e:97:
56:77:7e:9c:9b:08:d3:de:d5:a6:0f:4d:fa:d7:4e:
b0:c4:91:61:75:b1:16:9a:89:cf:e2:ed:72:93:d6:
c0:e2:c8:c1:98:50:09:2d:2e:5a:21:09:ae:9e:44:
b7:84:a1:06:22:0e:46:0a:b7:3d:aa:e9:bb:06:7d:
09:8d:eb:95:1f:b2:48:af:59:fd:94:96:37:78:e5:
25:c4:6e:3f:c8:5f:6b:e7:61:d5:98:12:2b:21:f0:
9f:9d:9c:58:a5:4a:25:98:4f:16:ac:c0:35:f3:98:
9a:92:ad:bc:b3:07:d0:40:bf:97:4c:bb:af:73:75:
d1:66:a2:66:2b:e6:c8:8b:e7:c6:64:cc:8b:55:cf:
dc:b4:aa:98:31:8f:20:2b:f1:5e:98:a3:7c:50:1b:
64:c9:b2:69:a0:6d:3f:d5:6a:50:43:94:07:47:91:
66:10:c8:6f:71:1a:5c:62:15:98:1e:2f:ac:b9:9e:
13:84:71:68:8f:4d:21:ff:b1:9f:58:02:be:04:4b:
c3:de:be:42:a2:d3:09:21:15:66:85:6b:3d:cc:6a:
51:61:4d:56:34:10:c5:3b:1b:d5:fd:d7:a9:bd:c0:
12:11:20:e8:0d:2f:d5:bf:2c:31:a7:aa:da:9c:e7:
a4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:BE:58:90:0F:E0:9F:00:A4:FB:D9:B6:B2:C7:35:D3:69:E9:0B:17
X509v3 Authority Key Identifier:
keyid:6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:c8:25:81:e7:57:46:a1:28:9a:ac:bc:7b:aa:40:78:7b:0f:
8d:24:3d:9a:1a:be:29:b4:c0:e9:79:48:ed:32:4d:06:8b:5b:
35:ad:5e:db:5d:35:01:18:c7:21:ba:98:bf:d4:53:17:f1:36:
45:b2:b8:bd:c0:3f:cf:57:bb:cd:09:42:66:57:f3:cc:af:db:
aa:27:49:28:80:14:53:eb:4c:cf:97:6d:3f:83:63:2b:30:d0:
c6:16:0f:cf:c0:4a:d2:67:fc:3d:60:bf:9d:1b:a4:df:39:e6:
10:3a:65:98:ff:d1:b6:aa:99:6f:f8:db:27:32:49:5b:ce:41:
d5:d5:e9:7d:d5:19:84:04:08:67:d0:f9:d7:54:ca:a8:48:dd:
32:8b:d6:1a:9d:52:7d:a5:4f:a9:58:8d:64:30:c7:bf:ea:5b:
65:a8:86:b4:e7:80:eb:71:17:fb:c9:a0:13:34:00:9f:b3:79:
25:0b:68:7a:04:65:51:00:bf:23:c1:de:6a:34:56:b4:82:87:
51:39:7d:d7:79:59:55:41:fd:96:d7:04:bb:fd:1f:11:f8:93:
11:c9:92:b0:ee:4f:1e:45:4d:b5:3a:ec:2d:4e:61:f3:8b:f8:
51:24:ea:ef:06:6b:46:b6:e1:34:f6:7d:90:81:72:65:96:c0:
39:c3:a4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:24:14 2025 by rpki-client