Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
File: bO-kEfCTakZthB7CkM2AzFUKf24.mft (raw, json)
Hash identifier: w47VbVpTZtWzs3TIrpfqMCYqjIQp4foQHzU/XeNe9S4=
Subject key identifier: 4A:C7:AA:56:10:85:F2:F2:43:75:C4:F7:F6:56:E1:5E:97:01:D6:B9
Authority key identifier: 6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
Certificate issuer: /CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Certificate serial: 0197B6A1ED9799CC702845A369D43D1F173F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
Manifest number: 0D27
Signing time: Sat 28 Jun 2025 13:02:34 +0000
Manifest this update: Sat 28 Jun 2025 13:02:34 +0000
Manifest next update: Sun 29 Jun 2025 13:02:34 +0000
Files and hashes: 1: NReTA04T-77ajSQKWxM1eqqKR6E.roa (hash: R7bW888WzZHhXdeD1e6y9tpUbGADNmO2hfMW/oe0deE=)
2: bO-kEfCTakZthB7CkM2AzFUKf24.crl (hash: /h8sykaNMnq4jGRAsFzEK76I5uTzBdpd8V4vTmYMbvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:ed:97:99:cc:70:28:45:a3:69:d4:3d:1f:17:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Validity
Not Before: Jun 28 13:02:34 2025 GMT
Not After : Jun 29 13:02:34 2025 GMT
Subject: CN=4ac7aa561085f2f24375c4f7f656e15e9701d6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:81:f5:70:0d:07:80:1d:b5:1a:7d:b3:ac:39:
08:78:23:c7:3f:da:01:4c:d1:25:44:b1:0f:18:99:
3f:6e:1d:04:01:98:b5:85:c2:46:5e:9f:23:e5:e2:
06:3c:53:23:3b:b6:8b:a4:f6:db:e5:ab:6c:2b:13:
48:06:5a:bb:ba:55:31:9e:92:4e:eb:69:4e:db:fa:
e8:93:24:0a:ee:f4:7a:64:58:5a:1c:82:75:a5:6c:
be:5a:c1:f1:d5:7b:a4:27:59:41:9d:31:1d:63:e3:
6d:46:a8:b0:e5:44:37:ed:f5:5a:53:19:27:2e:0c:
bf:99:82:2e:5c:2e:bd:aa:4e:6d:4f:2e:13:7e:33:
ca:69:66:0a:f5:08:88:67:24:6b:a0:ef:20:ed:0d:
79:93:7f:87:3d:5d:63:d7:54:c4:fa:aa:39:61:cd:
a9:cd:ab:b7:45:b5:4c:a4:c5:ae:ec:22:c5:64:73:
81:f1:6b:b4:05:c9:2b:d4:66:02:de:ec:d2:45:9d:
5a:cf:1d:5a:76:7f:6e:c8:4f:df:c1:9c:4a:a7:ae:
e1:61:0d:7a:f9:31:54:78:44:05:fd:cf:a8:2c:3f:
40:47:00:4c:f0:98:3a:ad:18:cc:61:69:d2:27:74:
27:f9:b4:be:b1:29:1d:db:77:17:34:5d:f9:a2:91:
c3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C7:AA:56:10:85:F2:F2:43:75:C4:F7:F6:56:E1:5E:97:01:D6:B9
X509v3 Authority Key Identifier:
keyid:6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f1:05:8d:e0:70:bb:41:5f:cd:07:4e:77:b5:67:aa:23:1b:
25:60:09:46:89:89:44:c9:a8:57:8a:0d:3a:5b:b8:e9:02:1f:
d0:23:01:be:4e:2f:1b:4a:84:df:5a:e0:52:fa:97:1d:e7:11:
0c:24:ca:50:a4:35:08:86:14:de:7b:e8:68:0f:0c:a6:6c:31:
7f:9f:03:ce:0d:25:9f:af:69:14:fd:f2:6f:89:fa:9c:98:e8:
05:6c:a0:b7:89:2f:32:0c:2e:5f:a5:f4:cc:99:cd:0e:9d:48:
73:3d:43:25:3e:01:e6:3b:ce:2f:27:dc:d2:f0:06:a7:82:f7:
19:8d:9f:4f:82:5a:95:a7:f9:54:bf:d3:6e:f1:ac:f3:49:4f:
be:5d:b2:20:7e:74:f9:d1:95:02:d3:66:d7:e8:a3:4d:b5:75:
42:56:c2:0f:78:68:b6:cc:fe:f8:12:67:f8:fd:69:bf:b9:56:
8c:3d:58:61:e4:45:50:00:5c:38:c0:8c:d7:8a:7c:7b:92:ce:
ed:8b:84:91:7d:a9:ac:17:fc:d2:37:0e:94:83:40:8a:15:aa:
15:83:4d:ee:93:2e:e0:a5:28:a9:fa:9b:c3:5d:fa:73:e5:bb:
ca:dd:f6:e6:62:06:39:85:03:21:d1:90:3d:a9:59:f1:a6:30:
05:7c:a5:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oe2XmcxwKEWjadQ9Hxc/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZWZhNDExZjA5MzZhNDY2ZDg0MWVjMjkwY2Q4MGNjNTUw
YTdmNmUwHhcNMjUwNjI4MTMwMjM0WhcNMjUwNjI5MTMwMjM0WjAzMTEwLwYDVQQD
Eyg0YWM3YWE1NjEwODVmMmYyNDM3NWM0ZjdmNjU2ZTE1ZTk3MDFkNmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IH1cA0HgB21Gn2zrDkIeCPHP9oB
TNElRLEPGJk/bh0EAZi1hcJGXp8j5eIGPFMjO7aLpPbb5atsKxNIBlq7ulUxnpJO
62lO2/rokyQK7vR6ZFhaHIJ1pWy+WsHx1XukJ1lBnTEdY+NtRqiw5UQ37fVaUxkn
Lgy/mYIuXC69qk5tTy4TfjPKaWYK9QiIZyRroO8g7Q15k3+HPV1j11TE+qo5Yc2p
zau3RbVMpMWu7CLFZHOB8Wu0Bckr1GYC3uzSRZ1azx1adn9uyE/fwZxKp67hYQ16
+TFUeEQF/c+oLD9ARwBM8Jg6rRjMYWnSJ3Qn+bS+sSkd23cXNF35opHDXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFErHqlYQhfLyQ3XE9/ZW4V6XAda5MB8GA1UdIwQY
MBaAFGzvpBHwk2pGbYQewpDNgMxVCn9uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk8ta0VmQ1Rha1p0aEI3Q2tNMkF6RlVLZjI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81M2IxM2UtZGViYi00NTZhLThkYzEt
ZTgxMWQ5NDA3ZTdhLzEvYk8ta0VmQ1Rha1p0aEI3Q2tNMkF6RlVLZjI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi81M2IxM2UtZGViYi00NTZhLThkYzEtZTgxMWQ5NDA3ZTdh
LzEvYk8ta0VmQ1Rha1p0aEI3Q2tNMkF6RlVLZjI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW/EFjeBw
u0FfzQdOd7VnqiMbJWAJRomJRMmoV4oNOlu46QIf0CMBvk4vG0qE31rgUvqXHecR
DCTKUKQ1CIYU3nvoaA8Mpmwxf58Dzg0ln69pFP3yb4n6nJjoBWygt4kvMgwuX6X0
zJnNDp1Icz1DJT4B5jvOLyfc0vAGp4L3GY2fT4Jalaf5VL/TbvGs80lPvl2yIH50
+dGVAtNm1+ijTbV1QlbCD3hotsz++BJn+P1pv7lWjD1YYeRFUABcOMCM14p8e5LO
7YuEkX2prBf80jcOlINAihWqFYNN7pMu4KUoqfqbw136c+W7yt325mIGOYUDIdGQ
PalZ8aYwBXylHw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:30 2025 by rpki-client