Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
File: bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft (raw, json)
Hash identifier: xMmws4IwZxRyMAsOx7M4jEu4PGlybxQ4oxzeGWyYCfg=
Subject key identifier: D4:AD:1F:F2:64:24:05:E3:BB:A9:EB:54:94:07:D3:2B:E1:97:41:F9
Authority key identifier: 6E:A3:B5:02:8C:E3:64:F5:10:2C:1A:EC:27:73:6B:7C:33:BC:04:93
Certificate issuer: /CN=6ea3b5028ce364f5102c1aec27736b7c33bc0493
Certificate serial: 019768BBFAAA8DFE8BBEDDC0B89716B8CE41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
Manifest number: 1465
Signing time: Fri 13 Jun 2025 10:00:39 +0000
Manifest this update: Fri 13 Jun 2025 10:00:39 +0000
Manifest next update: Sat 14 Jun 2025 10:00:39 +0000
Files and hashes: 1: bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl (hash: 9u5d68FWoal/TBjLn8lzzWIXAKNi+Hd1B1ClMmXfoKU=)
2: xIncpff8t5DuBdap78CZRmBq41M.roa (hash: iuGa85kLc6g4Qd8kr/ZV4w/v+4lb0FJF9McHzQYZMGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:fa:aa:8d:fe:8b:be:dd:c0:b8:97:16:b8:ce:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ea3b5028ce364f5102c1aec27736b7c33bc0493
Validity
Not Before: Jun 13 10:00:39 2025 GMT
Not After : Jun 14 10:00:39 2025 GMT
Subject: CN=d4ad1ff2642405e3bba9eb549407d32be19741f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:40:ab:9a:8d:2a:a8:46:76:20:b6:47:95:79:
5e:69:9e:36:c4:ad:ae:f7:ec:8b:7f:5e:ef:ff:2d:
a8:07:a6:00:be:33:21:96:04:89:e5:50:08:b0:10:
ee:df:ee:40:4a:eb:f6:1d:94:b6:82:4f:4e:1f:00:
bf:59:5c:e8:92:f8:d5:30:c6:99:e3:ca:54:94:a3:
2c:e9:9e:c9:f4:fb:dd:89:12:b9:b5:34:b4:6c:8c:
83:68:96:0e:32:92:08:6b:da:4e:be:ed:c7:ca:06:
ff:eb:24:87:cf:4c:b0:31:a5:12:65:c1:dd:3e:0a:
43:fa:ef:26:df:58:3f:67:2c:3e:d7:62:25:68:86:
96:79:e3:b3:e7:bc:c0:72:8c:13:32:7c:07:54:3e:
ee:8b:c5:36:b7:7a:4f:64:ba:f8:d9:b7:74:23:b2:
72:e6:62:35:1a:7f:e6:98:b6:2e:bd:b3:a0:64:c9:
76:d1:d9:be:e3:ee:13:43:d9:c6:71:cf:8b:e6:35:
1f:75:95:a1:35:b6:93:b1:83:52:0b:9f:61:f1:50:
0d:82:cd:68:f2:be:f9:2f:94:cb:d1:d4:c3:aa:93:
45:5c:7c:84:65:a7:1c:91:76:1f:2f:15:a5:78:f6:
59:34:c1:68:23:9b:56:bc:9d:e1:85:c7:82:99:2f:
f1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AD:1F:F2:64:24:05:E3:BB:A9:EB:54:94:07:D3:2B:E1:97:41:F9
X509v3 Authority Key Identifier:
keyid:6E:A3:B5:02:8C:E3:64:F5:10:2C:1A:EC:27:73:6B:7C:33:BC:04:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:53:d8:15:d5:c8:d7:07:38:f2:d0:4e:fc:ce:0a:7e:6a:1d:
7a:f4:8c:99:33:19:ab:8f:a6:63:6f:f7:e6:ff:b3:4f:e3:2b:
87:5a:11:e7:ef:fe:42:7a:c6:8e:ef:6d:80:8d:0b:2d:58:8d:
a5:72:05:cf:56:22:c2:3e:e1:62:07:38:8c:af:3d:8a:d7:e7:
2e:67:79:12:fc:cc:9f:21:92:36:23:fe:97:2c:f3:39:c8:24:
03:55:e9:b1:d6:ce:ec:90:c1:d7:1a:1c:46:6c:d0:fa:05:f4:
a6:e5:e4:0b:88:0c:d3:46:c6:29:64:9f:1b:d8:18:b4:c9:a6:
f9:6d:8a:91:e9:9e:9e:55:90:c3:4c:ee:8d:2f:55:3e:44:4e:
cb:bb:34:eb:5d:88:db:63:4c:24:44:ca:b4:0b:57:0e:a7:f7:
d3:5d:07:d0:4a:01:a1:1b:5b:b0:e2:a7:ad:b4:be:16:18:7e:
e3:de:1e:80:e6:cf:3b:97:00:6b:18:db:77:2b:74:85:70:71:
e9:9c:5d:f4:06:d6:03:b3:8f:39:52:e9:e4:41:8c:a7:71:66:
44:b2:56:f4:0b:fd:25:11:d4:2d:d3:34:e6:53:eb:93:33:52:
8b:ef:1c:e1:97:2d:1c:46:ae:95:04:6c:02:ff:d4:db:a6:6d:
40:c1:3e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:41:14 2025 by rpki-client