Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
File: boMQZuqP4gsGehNgBrevkGYzhDs.mft (raw, json)
Hash identifier: fHGgcX+iFezHFDZbs0pNC9/9mNJL+THQRzAVeBuEBIM=
Subject key identifier: 50:49:8D:E5:46:9B:37:E3:AA:FA:45:2D:BC:47:DD:DE:A1:1E:F3:B8
Authority key identifier: 6E:83:10:66:EA:8F:E2:0B:06:7A:13:60:06:B7:AF:90:66:33:84:3B
Certificate issuer: /CN=6e831066ea8fe20b067a136006b7af906633843b
Certificate serial: 0196881285D9E739585B031B0EF5692BB162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
Manifest number: 151B
Signing time: Wed 30 Apr 2025 19:00:37 +0000
Manifest this update: Wed 30 Apr 2025 19:00:37 +0000
Manifest next update: Thu 01 May 2025 19:00:37 +0000
Files and hashes: 1: K0elnSjthwyDpqUrzqz0WWkS5i4.roa (hash: gy/lZpvudI4NuVtj5Cr7txBBixWEIa8xyvy8FV7O+jc=)
2: boMQZuqP4gsGehNgBrevkGYzhDs.crl (hash: D3uhZuGw4w3vpWGO2zkHHj4R0WlUI45+nW8ArDgL+As=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:12:85:d9:e7:39:58:5b:03:1b:0e:f5:69:2b:b1:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e831066ea8fe20b067a136006b7af906633843b
Validity
Not Before: Apr 30 19:00:37 2025 GMT
Not After : May 1 19:00:37 2025 GMT
Subject: CN=50498de5469b37e3aafa452dbc47dddea11ef3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ce:1f:c1:fb:df:ec:54:e6:a0:e7:42:c6:5e:
d1:ac:8b:ae:ab:b0:e9:1b:e6:b7:90:b3:6e:84:f1:
23:63:80:5c:a6:3a:12:15:16:2a:25:b9:16:11:d0:
fb:f3:aa:02:d9:da:bb:4b:4f:f1:d6:69:e9:17:ab:
6a:e7:2c:f2:f0:e1:01:29:b3:bb:ee:c5:2f:d6:2e:
90:fe:37:30:de:f5:d1:81:77:cb:53:d5:f9:42:f9:
57:05:f0:02:0c:99:ea:a2:d8:f3:5a:35:c8:86:51:
76:90:4c:ba:89:0f:d5:4f:41:1b:6c:7e:8c:05:a3:
5e:da:8a:ff:ad:0b:96:12:35:0c:98:63:07:d7:06:
d5:e9:9e:86:94:19:8c:54:bf:bf:61:dc:8d:bb:80:
27:7e:f6:8f:72:86:63:c4:1b:ab:ce:63:65:ab:e7:
f8:c4:47:93:93:62:79:8c:34:aa:42:b5:1f:66:28:
ba:66:55:3b:e0:a2:87:cd:5d:aa:06:21:37:4c:65:
1b:57:3e:63:9f:3d:0b:39:90:ab:03:d8:5f:5c:63:
d7:13:bc:74:7a:1a:ee:6d:fa:1a:eb:73:d2:c3:a5:
53:4d:a7:66:86:d8:86:0c:4d:4f:50:3a:5e:fe:3d:
19:4d:d3:2d:91:32:97:b6:2d:8b:31:f4:6b:a3:cb:
bb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:49:8D:E5:46:9B:37:E3:AA:FA:45:2D:BC:47:DD:DE:A1:1E:F3:B8
X509v3 Authority Key Identifier:
keyid:6E:83:10:66:EA:8F:E2:0B:06:7A:13:60:06:B7:AF:90:66:33:84:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a7:8f:36:d7:b1:9a:88:22:8c:28:29:ad:b1:23:f3:5b:35:
ff:f4:40:15:7d:98:a4:f3:d5:75:c4:66:bf:30:e7:f9:a3:28:
18:1e:88:fc:bc:bc:87:2c:03:e3:72:54:1b:07:e6:c7:09:c1:
f1:ff:e7:f7:17:b1:14:ce:50:31:05:8c:3b:b2:63:9a:74:f6:
a4:b5:18:30:97:8d:6f:1f:24:53:2b:06:1e:8a:49:d8:95:58:
38:1b:dc:b1:af:4d:91:c5:cb:86:49:43:fe:cc:ce:e9:f7:e1:
dd:dc:fa:af:7c:ce:f8:7b:53:e3:6b:e1:2a:c6:8d:1d:04:fd:
f4:32:b8:b1:0d:29:0a:1e:ed:3a:dc:d0:32:97:ce:5f:83:c7:
9b:cf:b5:0d:59:81:54:d3:73:ef:a7:c7:c0:92:bc:14:8b:7e:
3c:f8:7e:16:93:b4:2b:95:e4:be:5b:0c:78:98:a7:06:b4:4d:
2c:ca:7e:a4:a7:d8:74:c8:a6:03:4a:e8:c1:62:2b:ba:ff:57:
4c:2a:f4:cb:81:88:f0:aa:7f:66:17:45:86:bc:de:c0:35:ff:
61:64:1c:28:f7:73:b6:34:06:7a:74:75:d9:8f:5a:8d:7f:c6:
c7:56:f5:98:10:0e:87:bc:00:91:ca:a9:dc:d6:89:e3:53:70:
0d:24:f2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:11:51 2025 by rpki-client