Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
File: bOrnoCiJYKda-M6A54iFQ8f3fNc.mft (raw, json)
Hash identifier: RLEmMmF/yF8Xo9YR6g0CLNUF+xb+AAC0fcpyOUKW0mA=
Subject key identifier: E5:BE:ED:1F:15:EA:35:3D:90:04:1D:28:F6:85:91:24:2B:7F:8C:BF
Authority key identifier: 6C:EA:E7:A0:28:89:60:A7:5A:F8:CE:80:E7:88:85:43:C7:F7:7C:D7
Certificate issuer: /CN=6ceae7a0288960a75af8ce80e7888543c7f77cd7
Certificate serial: 0197B88F2335A827E6E6873C5E8CDFA7532E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
Manifest number: 12C4
Signing time: Sat 28 Jun 2025 22:01:17 +0000
Manifest this update: Sat 28 Jun 2025 22:01:17 +0000
Manifest next update: Sun 29 Jun 2025 22:01:17 +0000
Files and hashes: 1: 6Zx8tvFW-otCSIx-0XXwdAcWAvY.roa (hash: vXtudZUUi1vh+dqd99m5Me5cUdKc0jshPf9ev6mVJpw=)
2: bOrnoCiJYKda-M6A54iFQ8f3fNc.crl (hash: moofMRDySqZdNzeTxNOCZPn87aLU2CaAUfDDLoG4mQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:23:35:a8:27:e6:e6:87:3c:5e:8c:df:a7:53:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ceae7a0288960a75af8ce80e7888543c7f77cd7
Validity
Not Before: Jun 28 22:01:17 2025 GMT
Not After : Jun 29 22:01:17 2025 GMT
Subject: CN=e5beed1f15ea353d90041d28f68591242b7f8cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:aa:5a:ce:4b:9e:15:4c:d3:1c:42:83:36:2c:
38:25:dd:13:a1:cb:19:97:16:9d:20:7f:7f:2e:b2:
a1:e6:14:d4:7a:1f:e3:e1:00:0f:6a:7c:13:c9:3f:
b4:14:72:2e:60:c2:12:ef:ea:65:d0:5c:78:ea:d7:
63:19:3c:43:9e:90:ca:91:04:bc:2d:0f:bc:75:ee:
37:74:d2:2a:ff:aa:d7:ed:5f:33:de:b6:81:59:2f:
ce:cb:46:fd:c6:e0:8b:84:03:79:b3:30:b7:0b:44:
4e:6a:40:f1:d9:33:55:29:c6:e3:a4:72:28:40:42:
d9:a2:d5:99:b8:4c:a0:fd:3d:60:b7:e8:73:53:60:
50:ed:aa:74:0f:c5:8d:73:d8:67:a7:08:63:23:e7:
eb:d7:7c:df:78:45:07:29:8b:31:dd:b8:64:f1:ca:
67:57:59:b9:92:0c:fe:bb:ee:1a:b5:5a:99:82:97:
c5:9b:6a:95:9a:b3:1e:ae:ff:e8:ea:0d:d6:fd:95:
f1:8c:dd:ba:60:dd:9b:d7:0c:fc:91:63:f6:3e:53:
90:d6:eb:16:c2:f8:5c:be:00:c3:35:1f:9e:76:11:
78:96:d9:4e:a8:28:cf:01:b5:b5:96:9d:e0:19:1a:
da:3d:6c:e3:75:e2:e0:a6:ad:78:1b:2b:c8:a5:34:
36:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BE:ED:1F:15:EA:35:3D:90:04:1D:28:F6:85:91:24:2B:7F:8C:BF
X509v3 Authority Key Identifier:
keyid:6C:EA:E7:A0:28:89:60:A7:5A:F8:CE:80:E7:88:85:43:C7:F7:7C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:34:63:c5:fb:b3:d7:5c:56:00:68:a4:3d:53:d7:b1:31:b9:
eb:d3:21:bc:1e:ab:a2:23:c6:7c:88:5f:35:f3:4d:26:cf:d8:
b8:ad:58:a1:bf:e1:3a:8c:87:09:bc:18:7d:85:13:86:09:0d:
f7:70:5e:f2:32:18:ad:35:36:3b:ec:66:9c:33:80:f1:65:ac:
c2:f9:9d:e6:17:6e:6c:89:90:f2:a6:f2:3f:82:f8:ff:cd:24:
83:5b:f3:73:c7:d7:2f:e1:51:87:bb:59:0e:6e:37:59:aa:6d:
8a:61:13:a0:a1:3b:77:30:c0:e3:8f:30:97:28:4d:ee:34:34:
48:58:b2:4e:c8:b6:90:84:82:75:a1:cc:fa:e7:1a:37:24:dd:
2a:f7:fd:b1:e8:0a:b7:5b:fb:34:5e:4e:b7:b9:50:48:02:92:
6c:18:fe:bf:09:ac:45:d3:71:50:17:a7:ea:59:95:48:f0:e0:
92:ef:24:6a:d0:f1:f2:a2:0e:7e:a0:72:21:a7:c3:bd:ac:85:
b8:d1:93:72:c9:6a:d3:19:24:5b:86:1e:d3:f9:9f:d7:bd:da:
1d:18:11:49:cd:6a:6a:bf:ee:73:55:c4:f3:dd:14:ef:36:48:
4c:89:77:fd:09:0c:81:88:f8:47:82:a7:72:37:d3:2a:94:1c:
38:5e:27:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:38:28 2025 by rpki-client