Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
File: bO-kEfCTakZthB7CkM2AzFUKf24.mft (raw, json)
Hash identifier: tyWG5Pc3X/Wf+tmhjiCb+XyKNq3Y2slhenOG3Kwvfqk=
Subject key identifier: 1E:51:EB:E8:38:89:6B:7A:1E:AF:13:FC:9A:4F:27:26:4E:9C:F4:01
Authority key identifier: 6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
Certificate issuer: /CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Certificate serial: 0198D65F52C6BCD88211DEF7BE5236B9DC18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
Manifest number: 0DBC
Signing time: Sat 23 Aug 2025 10:00:27 +0000
Manifest this update: Sat 23 Aug 2025 10:00:27 +0000
Manifest next update: Sun 24 Aug 2025 10:00:27 +0000
Files and hashes: 1: NReTA04T-77ajSQKWxM1eqqKR6E.roa (hash: R7bW888WzZHhXdeD1e6y9tpUbGADNmO2hfMW/oe0deE=)
2: bO-kEfCTakZthB7CkM2AzFUKf24.crl (hash: jiqTl/hflxNZL85ubGxJXAw1M7f8E779irbxtlvvhNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:52:c6:bc:d8:82:11:de:f7:be:52:36:b9:dc:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Validity
Not Before: Aug 23 10:00:27 2025 GMT
Not After : Aug 24 10:00:27 2025 GMT
Subject: CN=1e51ebe838896b7a1eaf13fc9a4f27264e9cf401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:be:ca:f2:8c:89:4f:a6:31:56:82:17:f9:82:
ce:01:41:c5:37:58:ae:c9:2d:31:40:16:63:32:7d:
8e:09:b5:81:49:0c:70:e9:08:5f:cd:dd:32:b8:ff:
7a:03:06:88:3c:80:25:6c:a5:27:81:d7:28:3c:01:
d0:b7:05:64:04:5b:b0:bb:29:d0:d0:44:39:64:9c:
af:50:25:16:21:a2:71:7c:d7:96:fc:fe:31:24:25:
71:28:07:ad:cb:85:d0:8d:28:90:e0:44:fb:c3:9e:
f0:1d:ad:0e:f4:45:35:4d:ca:1e:81:0e:d4:0c:0b:
28:dd:35:29:32:a5:07:05:2a:a4:f5:c1:27:fc:af:
74:fe:92:cb:1d:47:9f:94:96:82:07:72:74:35:1b:
6d:f2:59:ec:ff:fa:e8:39:df:cf:46:94:7c:d6:1e:
e7:3a:d7:1c:0b:04:15:0a:78:3e:76:5d:0f:f1:42:
cd:93:2d:ce:54:cf:b6:76:15:32:37:f3:93:c5:e3:
c3:1a:c9:ed:0e:4a:40:ec:97:ae:8f:4d:9f:f6:4f:
52:61:f4:35:5a:ce:ef:c1:ea:4e:14:bd:5f:67:68:
a5:8b:1d:c5:f4:f0:fb:82:cd:36:a1:f0:fe:8c:80:
82:eb:df:d3:5a:83:ab:f3:a8:73:02:6b:e9:61:57:
9d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:51:EB:E8:38:89:6B:7A:1E:AF:13:FC:9A:4F:27:26:4E:9C:F4:01
X509v3 Authority Key Identifier:
keyid:6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:16:aa:e6:7f:c0:0f:20:8a:aa:b3:b6:04:23:83:f5:f5:8b:
1e:7b:bd:25:63:c1:bd:b1:65:53:a1:81:36:16:f4:cf:f7:60:
22:65:d1:24:d9:a1:cc:de:f8:e3:90:1f:0c:ec:7c:c7:1d:dc:
44:8e:43:1b:ed:5b:db:11:0f:68:bc:ad:13:d2:5e:26:e6:a3:
ee:6d:75:a9:66:5f:2c:f2:a8:99:ec:db:a4:93:d5:03:5e:9e:
93:9c:78:0d:cf:2e:33:b6:df:f9:a4:96:5c:d0:69:05:b1:b2:
ef:49:17:b6:22:75:ee:84:3a:32:ec:cc:85:bd:0e:88:dd:4b:
23:3e:cb:87:5e:f6:3b:d7:c0:2b:dd:c1:71:ae:ac:3f:1d:c3:
f3:09:84:fa:25:cd:ae:33:d2:2b:45:f8:74:50:38:df:93:d6:
3f:0e:5c:30:b8:ff:64:60:ed:25:e2:54:ad:a5:07:8c:3a:a1:
8d:60:91:08:1b:ce:e4:2a:95:89:4f:7f:b7:a8:db:da:21:4f:
a9:b0:03:a0:3c:dd:ee:d7:5b:75:30:6c:51:00:02:5b:d2:1d:
d9:ca:4f:59:df:cb:fc:c1:10:1e:9c:97:70:5e:82:d6:ab:ab:
a9:d0:b5:13:ca:67:2e:08:99:a0:43:ab:78:83:39:52:56:80:
37:8d:73:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:32:40 2025 by rpki-client