Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
File: bHOgSn0Ost9H2vDDn7p142XIhT0.mft (raw, json)
Hash identifier: IszilzEZjfaWXBWpQVVzqyW9Qg97oc5s+WHNEiMN/yc=
Subject key identifier: B7:D6:3B:CE:C1:D7:9A:CD:17:A0:50:F0:44:0D:20:FE:2A:40:04:74
Authority key identifier: 6C:73:A0:4A:7D:0E:B2:DF:47:DA:F0:C3:9F:BA:75:E3:65:C8:85:3D
Certificate issuer: /CN=6c73a04a7d0eb2df47daf0c39fba75e365c8853d
Certificate serial: 01976FD0DDEB33F7ABF4D571B7C2B6E0DCEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
Manifest number: 0F62
Signing time: Sat 14 Jun 2025 19:00:48 +0000
Manifest this update: Sat 14 Jun 2025 19:00:48 +0000
Manifest next update: Sun 15 Jun 2025 19:00:48 +0000
Files and hashes: 1: 1g8u0Gir8yCyVBvzcuA27ZsMTcA.roa (hash: hLEqWjYzmOf232eRZFufaSm1niRcj5QeYBzcD6/dycc=)
2: bHOgSn0Ost9H2vDDn7p142XIhT0.crl (hash: GhxoNRmwKayqoqUBIqoEOJYz+T8ztbehF11ok4365tA=)
3: uSLH-6azWyM6_toWim6PNb4arp4.roa (hash: imwU+Zb8TWocoYkIF0ZGoxJDK+doen6jZopoR2zFVWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:dd:eb:33:f7:ab:f4:d5:71:b7:c2:b6:e0:dc:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c73a04a7d0eb2df47daf0c39fba75e365c8853d
Validity
Not Before: Jun 14 19:00:48 2025 GMT
Not After : Jun 15 19:00:48 2025 GMT
Subject: CN=b7d63bcec1d79acd17a050f0440d20fe2a400474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:45:65:18:19:e7:41:22:8b:98:c1:22:19:82:
bf:46:3d:92:ed:9b:78:eb:08:07:78:d6:ca:5d:ed:
df:a5:48:ec:fd:80:34:60:ae:66:1b:6d:59:06:e7:
68:63:e3:9f:48:70:fe:3c:d6:77:de:58:70:e8:32:
5e:b4:6f:36:ba:77:64:fa:92:24:53:0a:42:cf:4d:
0c:d6:48:61:4d:c4:e7:83:26:b0:d0:b5:47:80:07:
ad:ef:ea:27:a3:b1:87:57:70:c4:2a:e4:f1:54:c9:
0d:5e:fc:a1:16:63:5c:7c:ea:05:d2:ba:8b:43:31:
0f:30:55:eb:22:8f:bd:58:e4:ba:24:1c:8b:8e:1e:
df:8e:57:11:8e:07:a8:64:06:0a:2a:13:8c:8c:5c:
a7:58:e9:8e:93:ea:4c:f1:c0:d8:e6:f6:eb:fc:4b:
7b:81:2f:02:b4:1c:6a:b4:ea:98:24:6b:5a:e0:e8:
b8:9e:ac:87:17:d6:5c:ac:43:e2:24:80:4a:77:1c:
c3:3b:93:54:4b:7c:8f:ab:71:fe:63:25:d6:7e:ce:
fb:f0:6d:4f:e5:33:a7:23:fb:77:49:48:7c:2a:67:
f9:08:7c:37:a1:98:d3:8f:c4:40:bc:3c:4c:ff:a1:
c2:57:20:b1:19:de:9c:3a:49:5f:49:5f:95:60:c9:
8a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D6:3B:CE:C1:D7:9A:CD:17:A0:50:F0:44:0D:20:FE:2A:40:04:74
X509v3 Authority Key Identifier:
keyid:6C:73:A0:4A:7D:0E:B2:DF:47:DA:F0:C3:9F:BA:75:E3:65:C8:85:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:97:dc:ba:f9:4d:3f:a8:7f:23:55:07:b8:6b:0e:27:21:66:
7c:59:1f:80:3a:be:55:9a:ef:51:04:a7:85:4d:22:6c:00:0e:
f5:be:b3:d0:c2:38:34:2b:d6:3b:4a:de:32:e5:57:94:f8:7b:
46:e8:54:ad:33:37:29:b2:be:1a:22:f6:ec:1c:5e:75:4f:62:
ea:72:33:15:79:bc:f2:33:0c:e6:f0:d1:4f:6b:78:6e:be:db:
7b:dd:5e:47:a8:eb:a8:d7:10:2c:6c:fb:c7:d6:42:64:93:fb:
b1:aa:2c:73:ed:51:11:05:f8:55:78:97:e1:b1:d1:5f:aa:ac:
e7:40:45:1f:5a:16:d7:2f:bd:20:1e:01:a0:c3:f9:e5:55:07:
b9:0b:ee:6e:f8:6a:84:57:6a:e1:ca:9a:65:6d:85:31:01:97:
bc:51:4d:00:d4:e7:7d:e0:08:40:6e:09:cc:56:7f:30:b2:35:
26:81:d9:37:05:83:10:9c:b6:bc:c4:d6:2a:a9:69:70:06:b3:
f0:e9:a0:d1:6d:86:8c:bb:9f:4a:e3:96:88:d4:08:2e:06:19:
2f:89:79:e4:d2:39:79:1c:48:1f:c0:de:79:fd:9d:21:24:b2:
df:c9:f8:5e:56:39:ba:b1:f7:cb:20:4a:5a:50:86:72:19:86:
13:2a:7e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:15:27 2025 by rpki-client