Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
File: bOrnoCiJYKda-M6A54iFQ8f3fNc.mft (raw, json)
Hash identifier: 3q/sc5GHKrJBZoRi3CRuVIJCYOaPf59FHlxAkzY14sM=
Subject key identifier: D6:B2:61:AB:48:F9:2C:AC:C7:AD:0F:FC:D4:48:74:0E:A4:60:17:62
Authority key identifier: 6C:EA:E7:A0:28:89:60:A7:5A:F8:CE:80:E7:88:85:43:C7:F7:7C:D7
Certificate issuer: /CN=6ceae7a0288960a75af8ce80e7888543c7f77cd7
Certificate serial: 0198D47308A7DD62963DA593FFE608AAA451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
Manifest number: 1357
Signing time: Sat 23 Aug 2025 01:02:45 +0000
Manifest this update: Sat 23 Aug 2025 01:02:45 +0000
Manifest next update: Sun 24 Aug 2025 01:02:45 +0000
Files and hashes: 1: 6Zx8tvFW-otCSIx-0XXwdAcWAvY.roa (hash: vXtudZUUi1vh+dqd99m5Me5cUdKc0jshPf9ev6mVJpw=)
2: bOrnoCiJYKda-M6A54iFQ8f3fNc.crl (hash: Eb6rX5zvY4g3BjndDrfBkl8o5oIPI6A5852ZfCcrDPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:08:a7:dd:62:96:3d:a5:93:ff:e6:08:aa:a4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ceae7a0288960a75af8ce80e7888543c7f77cd7
Validity
Not Before: Aug 23 01:02:45 2025 GMT
Not After : Aug 24 01:02:45 2025 GMT
Subject: CN=d6b261ab48f92cacc7ad0ffcd448740ea4601762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d4:13:2a:ab:38:18:98:1d:78:26:df:79:a0:
e9:88:e6:51:41:1a:8a:46:a3:75:76:54:a0:33:fa:
89:a9:0f:4f:fb:fd:90:aa:1e:d2:87:14:59:6c:28:
9d:0b:8b:a3:50:eb:e6:55:c5:7d:4a:30:9c:07:ad:
41:f0:00:af:67:f2:c1:4a:b9:9e:49:64:fd:c0:f0:
a1:1c:a6:e8:b4:bb:bf:44:42:a2:51:28:49:c5:ba:
21:b2:dd:b3:bd:b5:9f:ff:35:3b:de:b8:b1:c4:1e:
88:7d:74:85:ec:0c:bd:64:55:51:14:cd:4d:7f:c8:
c7:ee:c8:e7:87:d6:7a:10:75:17:40:1d:da:44:22:
a6:c6:0a:1b:62:8f:e3:fc:86:a0:5f:b3:14:90:d6:
b7:db:aa:34:5a:e6:d7:ea:f8:43:ea:f1:af:33:a2:
80:2a:e5:97:1a:e5:78:68:a7:da:c3:84:f4:65:14:
30:e5:43:c7:a1:ab:d1:e0:7e:d7:7e:78:ea:1d:50:
00:ed:e7:64:fc:2c:7c:12:74:19:01:64:da:73:7e:
a7:a4:7e:12:5e:c3:eb:c9:81:81:d8:b8:ed:09:a2:
0b:6a:60:fc:20:45:f6:2a:33:cc:32:72:b4:79:32:
e5:6a:8a:7b:bb:77:24:c0:3a:30:1d:80:62:d5:8d:
d6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B2:61:AB:48:F9:2C:AC:C7:AD:0F:FC:D4:48:74:0E:A4:60:17:62
X509v3 Authority Key Identifier:
keyid:6C:EA:E7:A0:28:89:60:A7:5A:F8:CE:80:E7:88:85:43:C7:F7:7C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:50:1e:29:46:ca:73:2f:5e:c2:eb:8b:85:53:8a:ab:c0:9b:
57:85:da:f0:2e:be:1a:d7:1f:01:75:f5:da:27:4b:1a:69:88:
bd:a5:8a:73:56:77:f6:4a:ad:86:36:e1:25:d3:ae:e7:42:a1:
ee:57:ea:cb:c6:7d:6d:64:af:d0:f8:f4:8f:90:36:fd:d8:ce:
84:09:2e:60:37:0e:51:5f:76:01:fb:da:d2:6c:ed:b8:e1:94:
ea:63:a6:21:a9:2d:b9:7c:2d:de:7b:73:e4:4c:6c:01:9b:c2:
ac:60:3e:09:f6:0a:29:cd:45:f1:1f:b3:e6:09:ad:4c:86:af:
1a:65:90:2c:ef:bc:7a:55:db:62:eb:47:16:4d:78:f3:0e:bc:
2b:6b:e1:c2:f7:83:cb:b3:81:7b:04:0b:db:96:1a:b8:cc:af:
4a:78:5e:1a:68:f4:72:bb:63:30:2f:78:38:04:89:70:fa:2d:
d1:67:f3:0c:65:b2:b7:a1:44:c3:7e:fc:55:e7:fc:a0:b0:e8:
f0:82:9c:d6:e4:5c:65:6e:24:c7:dd:90:aa:a0:8c:79:0f:e8:
27:84:98:7d:99:d6:71:a2:12:60:e0:55:40:e3:03:57:c9:82:
b3:2d:4d:74:2e:eb:c5:10:c8:4e:34:f0:95:cf:5e:34:65:19:
7f:bd:e7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:31 2025 by rpki-client