Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
File: bO-kEfCTakZthB7CkM2AzFUKf24.mft (raw, json)
Hash identifier: hrcUkH8FpQ4F/WaBNHqtmiFBiBT9DAi6hjM0rTMUZM4=
Subject key identifier: CD:30:4D:C1:AB:40:30:C6:C5:DC:32:DE:0A:5C:B0:A4:19:FF:69:3F
Authority key identifier: 6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
Certificate issuer: /CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Certificate serial: 0199FBEB4BBEF4302EF81F2855CD9639C85C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
Manifest number: 0E54
Signing time: Sun 19 Oct 2025 10:02:05 +0000
Manifest this update: Sun 19 Oct 2025 10:02:05 +0000
Manifest next update: Mon 20 Oct 2025 10:02:05 +0000
Files and hashes: 1: NReTA04T-77ajSQKWxM1eqqKR6E.roa (hash: R7bW888WzZHhXdeD1e6y9tpUbGADNmO2hfMW/oe0deE=)
2: bO-kEfCTakZthB7CkM2AzFUKf24.crl (hash: lCU/5i7bx2Ecs8cabvaKSx17QKPQ33pWsAYlJ8/CQaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:4b:be:f4:30:2e:f8:1f:28:55:cd:96:39:c8:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Validity
Not Before: Oct 19 10:02:05 2025 GMT
Not After : Oct 20 10:02:05 2025 GMT
Subject: CN=cd304dc1ab4030c6c5dc32de0a5cb0a419ff693f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8f:d6:52:02:3d:25:29:83:39:cc:15:f0:dd:
f5:24:bf:b1:5d:d0:c4:e4:66:a7:2a:1c:bc:9d:5e:
a1:25:76:52:98:b3:e2:14:8d:06:a0:4f:d3:31:84:
e6:07:ba:72:17:c4:6d:ae:bf:a3:cb:3d:38:7d:43:
c5:41:43:89:05:b1:4d:f3:6e:e0:ae:16:af:e0:05:
29:46:99:70:2e:e7:e1:cb:a5:80:76:d1:f3:b0:63:
15:8e:c5:3a:9b:06:d8:9e:56:d4:33:ef:ab:27:87:
1a:e0:d3:19:45:3f:7d:77:da:b0:ff:4b:7e:d1:db:
57:49:d6:37:5d:de:eb:9c:74:91:d3:a2:67:b3:fc:
57:7f:28:3b:b9:31:3f:86:55:44:81:13:5b:5f:cc:
2c:8a:58:b3:d1:8d:bc:9b:f6:b0:06:99:70:53:0c:
ad:3a:49:45:c0:d8:02:88:56:ed:bc:12:97:ae:e6:
8a:5c:54:22:b3:7a:a2:30:d5:c6:c8:dd:41:8f:fd:
27:d0:4f:45:ee:6b:9d:15:11:97:4f:67:9d:94:a9:
1a:3d:3a:57:3d:9e:26:5a:bf:25:4d:91:6c:ae:5a:
94:8f:72:0e:95:f4:bf:10:91:d0:c8:8e:9b:3b:2b:
15:f5:8f:f1:a3:c6:8a:54:b1:36:c1:87:66:1f:5e:
00:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:30:4D:C1:AB:40:30:C6:C5:DC:32:DE:0A:5C:B0:A4:19:FF:69:3F
X509v3 Authority Key Identifier:
keyid:6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:6d:3d:52:e2:9f:06:f4:b9:93:1c:65:5e:f0:59:17:75:ed:
7f:5b:f3:14:3a:1f:4a:15:ab:56:82:f0:b9:83:45:e1:f1:fa:
92:37:0e:43:7c:09:0e:b2:42:7d:cc:20:b5:1a:57:19:4b:0d:
34:39:73:da:b8:f6:9d:09:b1:13:de:b4:21:c2:c4:52:df:46:
1c:3e:b4:2b:05:85:4a:59:c9:0f:f5:9b:a6:2a:13:46:68:f3:
ba:78:b2:2a:a3:45:00:1e:90:7d:20:aa:f0:ff:bc:84:09:fd:
f6:a3:a2:4f:13:36:76:68:ad:4e:0a:e2:87:ac:76:e7:c1:32:
fd:17:2f:e3:bf:cf:cc:a9:0c:7f:be:6c:70:ce:57:8b:11:a4:
08:b5:bb:1a:c8:da:59:ae:91:48:02:a5:0f:8c:80:de:44:f1:
ec:c7:e6:77:3b:56:8d:c0:24:79:9a:a4:46:27:9d:ab:b7:f9:
c5:4e:9d:3f:6c:51:e3:05:81:88:36:73:03:e8:c4:30:db:37:
62:7f:c4:7e:ee:d5:3a:72:ae:1b:f7:ed:31:99:df:e4:96:f0:
0f:d6:f9:a6:68:2e:ce:db:c4:c2:27:fc:68:83:0d:0d:04:a6:
aa:aa:86:ef:3f:da:2f:75:c4:6e:23:ad:67:71:7b:85:91:8e:
f5:fc:91:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:23 2025 by rpki-client