Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
File: BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft (raw, json)
Hash identifier: z4hP8AIhPy/SRoMm5prqi5kvj+1paUkznV0sJaGypr8=
Subject key identifier: 7A:C4:B9:42:E3:14:D5:BF:B9:43:30:BD:F5:24:94:C0:26:FD:DC:87
Authority key identifier: 04:EE:E3:F0:9A:BE:B6:A4:34:E9:90:5C:BC:0B:00:00:44:E7:9D:E7
Certificate issuer: /CN=04eee3f09abeb6a434e9905cbc0b000044e79de7
Certificate serial: 01976F2C2925901E32E6B929EB016E3A69A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 16:00:54 +0000
Manifest this update: Sat 14 Jun 2025 16:00:54 +0000
Manifest next update: Sun 15 Jun 2025 16:00:54 +0000
Files and hashes: 1: BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl (hash: 8U1iQPFbgUOwqnCee3vzULnVTbnyahP4Zl3Iga5bG6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:29:25:90:1e:32:e6:b9:29:eb:01:6e:3a:69:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04eee3f09abeb6a434e9905cbc0b000044e79de7
Validity
Not Before: Jun 14 16:00:54 2025 GMT
Not After : Jun 15 16:00:54 2025 GMT
Subject: CN=7ac4b942e314d5bfb94330bdf52494c026fddc87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ae:0a:d8:78:5f:71:d3:b0:e1:6e:5d:38:a9:
fe:51:50:9b:8c:59:b6:6c:6c:7d:48:a0:de:19:61:
b9:92:3f:90:24:12:05:4a:55:9e:a7:b8:04:71:15:
c0:e9:31:81:51:22:fa:70:d3:29:a2:00:d9:72:93:
d9:5a:93:d2:20:f5:95:35:bb:6b:fc:22:c0:94:cd:
f9:13:77:50:ec:5c:2a:9d:fc:4c:e7:50:7f:f0:35:
d2:46:a3:b2:17:c9:69:40:4e:75:53:5e:5c:51:71:
3b:55:78:16:a9:be:43:31:cc:6f:c5:6a:0b:ed:b8:
86:66:37:02:ac:33:00:91:64:0e:9f:52:9a:eb:b5:
81:52:80:44:57:2f:b4:c0:d7:3e:fb:10:a2:a5:20:
6a:32:55:a3:39:a4:71:06:6e:a7:2f:1b:13:70:fe:
55:ab:93:a6:00:9e:03:63:44:65:06:9b:e8:52:fc:
35:f5:f9:5d:78:62:5a:47:2f:e5:74:68:9c:4c:f6:
38:0a:d3:24:99:25:47:bd:c8:f0:df:96:35:28:54:
57:00:93:ba:7c:8f:f0:85:a0:e2:0b:5f:ae:f3:7c:
9b:84:2a:9e:da:7b:9c:df:10:83:5b:fd:92:58:2a:
a3:7b:21:85:98:6b:59:87:2f:e9:2e:93:89:2f:9a:
ba:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C4:B9:42:E3:14:D5:BF:B9:43:30:BD:F5:24:94:C0:26:FD:DC:87
X509v3 Authority Key Identifier:
keyid:04:EE:E3:F0:9A:BE:B6:A4:34:E9:90:5C:BC:0B:00:00:44:E7:9D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:29:12:d5:e2:db:6a:0c:10:3f:9c:c5:09:0f:b1:b0:50:79:
9e:7a:72:83:28:4a:81:2b:13:3d:a2:bc:7f:13:ff:5c:96:3b:
07:43:2e:91:7d:5f:d7:29:2c:cf:8f:36:f3:fd:04:33:e9:a3:
e7:79:93:88:76:39:6b:39:a9:4a:6f:5d:9e:9d:fd:e7:fc:cc:
6a:3d:2d:70:35:0f:c9:6b:8a:0e:8f:f8:0c:b6:ab:00:22:6a:
f3:16:fe:fa:2c:67:48:7e:4a:2c:59:66:76:57:cf:3d:86:3d:
78:7b:64:81:89:3e:b6:46:15:65:42:bb:50:95:d4:f4:06:f9:
84:78:a4:19:ea:2f:cb:2c:57:69:b8:0e:2c:d9:cc:51:30:97:
f3:c7:b3:09:6a:e3:8f:08:77:30:95:2b:dd:f5:00:f9:8a:5d:
0d:c6:f0:ac:70:e4:0a:74:de:83:48:ef:88:8e:8a:82:f9:8c:
a5:44:c9:4a:08:cf:a2:26:43:14:48:20:b2:0f:4c:eb:cb:35:
8c:cf:19:12:f1:a0:57:fe:98:08:25:f9:26:4e:d3:5d:d5:ec:
80:03:96:f2:79:d6:e7:fb:b4:fc:02:36:5a:55:0a:98:73:4d:
76:e9:db:c9:2f:99:67:8b:43:d1:b7:52:4b:f5:6f:21:c4:f4:
ee:d9:62:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:12:31 2025 by rpki-client