Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
File: BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft (raw, json)
Hash identifier: U+kNyzy8yTIx0EpxIn8CfKG81wAsWTdK9SBpU8bU2tE=
Subject key identifier: 92:02:62:3A:EA:44:6D:24:FB:B3:AA:89:91:5A:7C:17:B1:0F:DE:CF
Authority key identifier: 04:EE:E3:F0:9A:BE:B6:A4:34:E9:90:5C:BC:0B:00:00:44:E7:9D:E7
Certificate issuer: /CN=04eee3f09abeb6a434e9905cbc0b000044e79de7
Certificate serial: 01988B0F5A49777FAA6B6E8CBDE1516710B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
Manifest number: 1620
Signing time: Fri 08 Aug 2025 19:01:35 +0000
Manifest this update: Fri 08 Aug 2025 19:01:35 +0000
Manifest next update: Sat 09 Aug 2025 19:01:35 +0000
Files and hashes: 1: BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl (hash: NZ7FOJiXLWocEhHcwlF/k+iddWq/cTTWrwYOU77IN38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:5a:49:77:7f:aa:6b:6e:8c:bd:e1:51:67:10:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04eee3f09abeb6a434e9905cbc0b000044e79de7
Validity
Not Before: Aug 8 19:01:35 2025 GMT
Not After : Aug 9 19:01:35 2025 GMT
Subject: CN=9202623aea446d24fbb3aa89915a7c17b10fdecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:82:61:a3:13:b6:1d:51:0c:dc:4e:a4:65:74:
3c:85:98:85:a0:03:8e:0f:6e:2b:8e:ad:c9:1f:0c:
7a:8b:b3:65:db:34:0b:2d:3e:c8:ec:c3:46:8f:77:
3c:d1:5d:bc:04:d8:cf:39:0b:bb:7a:b4:2c:34:5b:
35:83:38:ba:24:96:22:b6:9f:ac:c0:3b:46:bf:65:
30:33:24:d1:84:84:63:cb:f5:15:90:24:dc:88:da:
63:87:5e:5c:98:ea:35:50:6d:cb:29:7f:4b:13:f5:
d1:b6:86:89:6b:c0:20:0e:ca:3d:b5:cd:ae:53:93:
3e:95:16:f8:b4:ee:c7:23:28:a0:b8:2c:bc:fa:bd:
76:95:44:72:97:88:95:67:67:1d:11:99:2f:05:bd:
c0:40:24:64:38:7d:1f:e0:03:e6:8d:6b:be:ef:48:
57:ab:ae:3b:17:0f:19:88:3f:a6:6e:64:80:7c:5b:
ac:a2:d4:fc:16:d1:d7:e6:d8:6f:11:ea:a0:54:16:
18:21:b3:73:b3:e7:cb:cc:b9:6e:e7:d8:d1:0e:77:
34:b2:0f:d6:b6:69:64:32:9b:00:ff:16:17:19:f4:
04:a3:78:c8:4b:c4:7a:05:34:98:72:8e:ce:5f:7c:
a6:91:d7:73:27:8f:e7:35:cc:d8:97:02:8f:eb:1c:
c1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:02:62:3A:EA:44:6D:24:FB:B3:AA:89:91:5A:7C:17:B1:0F:DE:CF
X509v3 Authority Key Identifier:
keyid:04:EE:E3:F0:9A:BE:B6:A4:34:E9:90:5C:BC:0B:00:00:44:E7:9D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:97:e5:6d:cf:a2:b8:51:f4:f9:b9:c0:c0:8f:22:ff:7d:78:
8e:19:b5:7c:77:60:f5:4b:b3:c1:3f:10:7a:3a:38:c7:e1:5c:
ae:eb:e9:5a:8c:4b:99:b1:7a:eb:8f:92:e3:91:98:06:2f:cb:
4a:b2:96:81:b1:1b:84:c5:81:d5:c6:57:11:9f:88:9d:07:3a:
d7:c8:fc:ee:b5:0e:00:e0:40:6b:23:0a:23:06:d8:a1:ec:23:
d5:55:43:6a:45:ad:89:9f:90:c4:65:0d:4d:df:b2:5d:0e:f6:
28:88:4c:81:91:d6:be:1e:3d:64:11:d0:37:0f:5f:54:6a:54:
2f:33:98:b5:ee:23:07:ac:55:fa:82:df:ab:de:20:c7:f8:a2:
6d:fd:7a:fd:2a:28:39:94:ff:7a:52:05:87:af:b6:85:01:b6:
21:6b:4a:26:0a:59:11:2a:7f:fa:24:88:07:79:15:0d:8b:fa:
87:61:5c:af:14:da:22:56:3a:cd:29:c7:28:cc:05:67:6b:95:
25:49:c8:af:a4:01:6a:00:38:77:fc:30:67:28:40:6b:ce:6f:
82:21:59:4e:c8:ec:4e:95:02:b5:62:60:a1:cc:11:60:6c:f8:
cf:12:9e:bc:59:6c:7e:84:75:77:24:ec:11:6b:36:62:da:b3:
f9:14:a5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:59:41 2025 by rpki-client