Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
File: bO-kEfCTakZthB7CkM2AzFUKf24.mft (raw, json)
Hash identifier: kDAjM6gCSVX15CA28Cef3F9c5+SX2U66c8rwLZodeMg=
Subject key identifier: 9B:1C:40:0B:84:2F:AE:5C:65:85:0E:D3:3F:D5:61:3C:05:F2:31:40
Authority key identifier: 6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
Certificate issuer: /CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Certificate serial: 0196C916E485A3F9F98A79AB2C2B92FEAF48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
Manifest number: 0CAC
Signing time: Tue 13 May 2025 10:00:42 +0000
Manifest this update: Tue 13 May 2025 10:00:42 +0000
Manifest next update: Wed 14 May 2025 10:00:42 +0000
Files and hashes: 1: NReTA04T-77ajSQKWxM1eqqKR6E.roa (hash: R7bW888WzZHhXdeD1e6y9tpUbGADNmO2hfMW/oe0deE=)
2: bO-kEfCTakZthB7CkM2AzFUKf24.crl (hash: zmPn0U8pGy2tpSjvogVIkC1Y9HY6dCUVIox/zNs+wbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:16:e4:85:a3:f9:f9:8a:79:ab:2c:2b:92:fe:af:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Validity
Not Before: May 13 10:00:42 2025 GMT
Not After : May 14 10:00:42 2025 GMT
Subject: CN=9b1c400b842fae5c65850ed33fd5613c05f23140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:98:0d:7c:bd:76:8d:3b:6b:d4:44:7e:2b:1d:
95:e3:86:4b:1b:9f:02:53:1a:23:dc:5c:b8:ea:95:
c9:82:6c:e1:7d:cf:e8:85:3a:85:76:15:ff:45:66:
40:50:78:4a:6e:9f:97:f8:b0:8d:c4:65:15:a4:77:
f5:e9:01:59:8c:1e:61:d5:6d:98:22:65:40:72:83:
f0:57:cb:9f:82:95:e3:76:7a:a5:8c:9f:b0:42:62:
7b:02:75:c3:4d:e7:78:02:2d:05:9f:50:27:4e:1e:
9a:fb:95:28:59:93:9d:35:3c:09:cd:9d:15:9e:62:
4d:93:ff:d7:56:b5:7a:20:83:bb:c6:80:d6:ba:26:
7d:2d:48:aa:f9:e5:62:67:00:f0:af:92:cb:c2:d1:
a3:4d:8b:24:34:25:65:d2:a4:f3:b5:40:3d:49:22:
b5:da:36:df:2d:55:ed:63:93:8b:e3:47:6f:ff:5b:
fe:2f:a5:c2:49:71:f9:c1:37:a9:d9:6e:23:f5:46:
ec:59:57:26:94:dd:2c:0d:80:e5:29:f5:88:84:66:
5e:8a:8b:fc:d2:36:21:09:3a:38:20:15:c2:20:7f:
01:84:33:b8:67:42:bc:6b:a5:4e:0b:78:88:1c:b0:
3f:39:8a:cf:c2:85:f0:85:2d:14:df:b7:b9:89:16:
79:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1C:40:0B:84:2F:AE:5C:65:85:0E:D3:3F:D5:61:3C:05:F2:31:40
X509v3 Authority Key Identifier:
keyid:6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:4e:b8:da:47:39:57:3b:2e:ee:21:78:64:90:35:42:5e:3d:
ea:46:52:53:3c:82:2e:63:e0:15:b6:1f:6f:01:c3:a4:1d:ff:
0e:84:25:9f:20:11:ab:27:c6:f2:c2:c2:e1:2f:84:29:40:c2:
c6:1f:a6:6c:c3:d4:4c:0d:c6:c1:01:bb:75:5c:94:a9:74:40:
a3:f3:e9:6c:94:6b:ea:32:90:66:ae:85:78:7b:c4:c6:98:73:
4a:ea:9d:03:7b:e7:90:13:bb:83:b8:4f:77:dc:02:ba:c8:61:
f0:4e:35:a2:b6:5f:6f:d0:93:a1:eb:5d:c1:b8:da:53:e6:68:
cb:ae:e3:5a:05:d6:1b:26:9d:3b:0d:ae:d5:bf:62:b2:c0:ad:
b5:dd:09:70:c5:53:11:bb:f5:62:08:88:ce:7e:48:8e:0f:7e:
21:ce:39:bb:90:b2:f8:db:e1:55:e7:62:81:17:be:0b:d1:d5:
58:a3:07:83:b5:23:f7:e1:92:8d:f3:aa:2f:58:dd:59:a9:a5:
4f:98:5f:10:65:f5:aa:c7:f4:0a:48:a6:3b:43:dd:f4:36:54:
59:94:1e:f1:f8:d6:06:c6:0e:63:4e:16:12:0c:2b:6e:52:af:
81:a5:e1:54:4f:cb:d6:7c:fa:50:f4:3b:6e:78:05:47:ad:16:
e0:ed:51:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 16:32:23 2025 by rpki-client