Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
File: bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft (raw, json)
Hash identifier: PtSDcnNrcEJLtA4V3LOyxKvwEmFcZVEyBafj+XDMPlw=
Subject key identifier: 0C:FE:44:F4:D2:77:98:DB:C6:71:15:B0:02:1A:5E:60:EC:1C:B4:D7
Authority key identifier: 6C:E3:FB:86:78:61:DA:AF:D7:81:27:98:97:FE:25:A8:EB:37:14:68
Certificate issuer: /CN=6ce3fb867861daafd781279897fe25a8eb371468
Certificate serial: 019880F96F863702E9A039B7FC55AE005CDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
Manifest number: 0271
Signing time: Wed 06 Aug 2025 20:01:27 +0000
Manifest this update: Wed 06 Aug 2025 20:01:27 +0000
Manifest next update: Thu 07 Aug 2025 20:01:27 +0000
Files and hashes: 1: EH31K6AeAlTxuZgsWC0CP6nqgCw.roa (hash: 5F10SKVR7MZweS+vgHdYbBmQMLKWeQTvpJE6zRYHQ8A=)
2: bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl (hash: vWmN5muS1pOCKtF6ACfR9P+1su7nlTF7Z/clirRCoYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f9:6f:86:37:02:e9:a0:39:b7:fc:55:ae:00:5c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce3fb867861daafd781279897fe25a8eb371468
Validity
Not Before: Aug 6 20:01:27 2025 GMT
Not After : Aug 7 20:01:27 2025 GMT
Subject: CN=0cfe44f4d27798dbc67115b0021a5e60ec1cb4d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6a:df:c2:6f:6e:fb:57:b0:9c:f7:3b:2f:10:
89:d3:40:58:66:e8:66:67:71:bf:7b:04:b0:a4:3e:
35:88:03:05:b5:51:a9:f3:25:7d:3f:97:d8:1a:15:
2e:53:42:f2:ba:53:d5:fa:3c:12:01:3c:23:e3:4d:
3c:47:d7:74:44:ee:e2:17:b5:84:a3:b5:a0:d5:f2:
5b:24:7f:dc:73:06:c5:81:3a:60:52:85:8e:3d:0d:
fe:49:05:dd:cf:5a:c5:fa:6f:e5:02:28:3e:3b:0e:
94:fb:73:c8:43:d5:3c:6c:48:03:fd:c5:a1:3a:be:
2b:21:d3:09:80:9e:81:f4:ab:77:32:b8:df:1e:3d:
91:ba:ed:cd:19:54:de:33:4a:92:37:b2:bb:86:43:
73:0a:8e:49:d9:45:8b:6c:61:d6:8c:47:ff:55:dd:
c8:2f:09:d8:2c:94:1c:64:be:c6:d9:c0:78:c4:8a:
ec:40:eb:2b:d2:64:1f:a8:d0:d1:d0:0f:d1:fc:93:
95:d1:e4:d1:a8:82:e6:99:03:00:05:ef:f8:6f:86:
58:1d:47:47:a1:5f:45:5b:bc:e6:54:15:8c:f3:25:
c5:12:f1:b6:69:92:a0:f1:24:9c:3f:9c:90:f3:be:
42:51:a3:37:25:d3:7f:2c:d7:e4:fc:53:dd:b9:a0:
cc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FE:44:F4:D2:77:98:DB:C6:71:15:B0:02:1A:5E:60:EC:1C:B4:D7
X509v3 Authority Key Identifier:
keyid:6C:E3:FB:86:78:61:DA:AF:D7:81:27:98:97:FE:25:A8:EB:37:14:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:5c:cf:13:c7:19:ea:b8:cf:b8:df:a4:e5:d8:70:6b:f8:58:
55:5e:1c:57:c4:d2:b9:ba:bf:c4:90:d4:e6:a2:3c:c9:89:98:
e0:ff:8a:f1:d2:8f:15:00:03:32:97:f2:79:de:2e:34:80:f1:
b9:fc:f2:98:2a:21:94:95:07:07:f2:f4:31:b7:23:56:06:e3:
d7:54:5f:81:e3:6e:02:96:f0:20:f4:2a:49:00:10:e9:8e:0c:
af:39:bd:e1:de:37:aa:56:3b:bf:69:0d:42:3a:43:34:a3:d0:
2e:f2:41:e0:bd:7e:31:6b:77:4f:f1:ca:f4:1f:ee:ff:2d:99:
66:57:ad:91:02:62:0d:fa:d8:64:52:68:83:87:66:bb:0e:83:
59:81:9e:d3:1d:47:ec:6d:7b:d3:da:c3:ae:6d:ac:a9:26:42:
f5:6b:e2:02:62:e1:26:ee:e7:26:b5:c4:e7:8b:5f:21:19:19:
95:f8:75:c0:db:b1:09:61:68:53:31:04:14:6d:ad:0f:9a:06:
33:e7:15:39:4f:fe:6f:d6:d6:66:16:e5:fc:eb:1b:4d:f4:06:
2f:0a:68:40:bc:14:a7:70:bf:19:0e:e8:d0:a7:35:61:58:c5:
cb:9d:02:08:b0:a8:16:32:ab:a9:2b:80:03:18:cc:ff:63:4b:
70:1b:58:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:02:37 2025 by rpki-client