Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
File: bHOgSn0Ost9H2vDDn7p142XIhT0.mft (raw, json)
Hash identifier: ZZP8WbZrkaaWTOX6PxbCqJfyZahbT8pF4X/Ue8PW/QE=
Subject key identifier: A0:27:00:15:F6:AB:67:F0:14:00:C7:0A:BA:90:2C:EA:94:F9:CF:DF
Authority key identifier: 6C:73:A0:4A:7D:0E:B2:DF:47:DA:F0:C3:9F:BA:75:E3:65:C8:85:3D
Certificate issuer: /CN=6c73a04a7d0eb2df47daf0c39fba75e365c8853d
Certificate serial: 019897499F83B999FECED3AAB7429C79C6FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
Manifest number: 0FFB
Signing time: Mon 11 Aug 2025 04:00:41 +0000
Manifest this update: Mon 11 Aug 2025 04:00:41 +0000
Manifest next update: Tue 12 Aug 2025 04:00:41 +0000
Files and hashes: 1: 1g8u0Gir8yCyVBvzcuA27ZsMTcA.roa (hash: hLEqWjYzmOf232eRZFufaSm1niRcj5QeYBzcD6/dycc=)
2: bHOgSn0Ost9H2vDDn7p142XIhT0.crl (hash: yWXsVpldh2q6MczOxNdztj3qn3nibfefBAzF1gThreI=)
3: uSLH-6azWyM6_toWim6PNb4arp4.roa (hash: imwU+Zb8TWocoYkIF0ZGoxJDK+doen6jZopoR2zFVWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:49:9f:83:b9:99:fe:ce:d3:aa:b7:42:9c:79:c6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c73a04a7d0eb2df47daf0c39fba75e365c8853d
Validity
Not Before: Aug 11 04:00:41 2025 GMT
Not After : Aug 12 04:00:41 2025 GMT
Subject: CN=a0270015f6ab67f01400c70aba902cea94f9cfdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3e:70:ba:cf:9f:b3:9d:01:a8:ec:39:7a:c3:
18:77:6e:68:b0:28:8a:eb:67:b8:ad:8e:fe:42:97:
84:58:c7:40:23:75:c6:f5:c4:50:94:93:ab:3f:7d:
c9:61:1f:9a:5a:29:9a:39:cd:e2:ef:f6:ea:6e:4a:
5f:b8:ed:53:44:ca:22:db:33:eb:fe:da:9b:21:3c:
17:46:04:57:65:24:a2:2c:7a:fc:9e:95:2d:46:e2:
ed:5c:35:8c:ac:d8:47:50:47:ec:90:3f:92:94:3b:
a4:a2:93:d5:af:64:2d:53:e7:39:74:bf:c9:4e:bb:
5d:36:42:7e:76:f3:b9:c9:77:b8:7f:7a:e8:4d:32:
7e:2b:09:1b:a9:de:95:25:b8:69:85:e3:37:de:8f:
94:dd:98:3d:12:b7:b7:3a:ce:98:0f:6e:ad:d2:8a:
44:b9:c7:17:a0:0a:a8:13:b8:ed:6f:8b:85:cd:dd:
1b:50:37:e6:34:21:37:f0:cf:66:d1:0e:95:a0:53:
b6:e7:fb:79:16:89:11:07:ab:6c:40:d3:3e:0c:45:
d6:16:50:aa:2f:7d:80:85:03:ee:6e:09:d1:ad:8d:
9e:d1:ad:82:ba:fa:8b:e1:78:1c:fb:1b:97:90:4a:
8f:4d:a1:25:93:9d:1b:00:84:c9:23:95:1f:e4:c8:
8f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:27:00:15:F6:AB:67:F0:14:00:C7:0A:BA:90:2C:EA:94:F9:CF:DF
X509v3 Authority Key Identifier:
keyid:6C:73:A0:4A:7D:0E:B2:DF:47:DA:F0:C3:9F:BA:75:E3:65:C8:85:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e5:80:ab:88:59:8c:08:e3:9c:6b:f1:9e:3b:63:54:fc:bb:
51:12:f8:f5:fb:bc:cb:db:13:2f:d6:ed:6e:35:69:8e:31:d6:
9b:d6:3e:d3:64:f9:e8:a7:90:d3:3d:35:79:34:44:08:0d:59:
a2:1b:d0:72:ac:00:1f:50:19:60:29:f2:f4:67:d6:5e:ae:9a:
cc:42:40:ec:29:a8:bd:f9:19:59:a8:7c:ff:92:6e:c8:56:ec:
0f:d8:d5:fc:b8:f6:9e:64:3f:fc:d9:4f:26:f8:8f:df:08:63:
c4:56:cd:f9:07:fb:c2:f1:71:e0:2e:64:34:7a:5f:f7:8e:17:
fe:61:a3:fe:ac:d0:51:dc:21:f6:dd:38:2f:af:a2:db:89:36:
7e:cb:53:f4:be:a9:d1:b2:4c:a8:40:d1:78:e9:57:86:f8:99:
91:8e:d6:e8:c1:ae:68:5b:97:0a:ce:7b:4d:b1:39:18:fa:39:
12:99:00:cc:c7:d8:21:59:da:da:e1:27:a1:a7:e8:af:92:4b:
25:2b:32:5b:38:3b:91:6f:cb:20:3e:5f:9a:9a:c9:08:bd:b6:
9f:a2:11:27:0d:d5:60:8c:81:08:4a:41:c2:27:cb:d2:03:04:
53:3a:ee:39:72:87:94:7d:b2:da:6e:dd:f8:7f:5e:32:62:94:
0a:8c:69:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:44 2025 by rpki-client