Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
File: BOUCQK9A6yrWD8MHisM_xTVdRBY.mft (raw, json)
Hash identifier: Eeu9O/ZfcsWF+CnRekybmqeyl0DLH6wltmUnj+DKpio=
Subject key identifier: 84:14:74:CC:F3:8C:29:70:B1:11:5C:45:93:10:1D:E3:BC:DF:3B:03
Authority key identifier: 04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
Certificate issuer: /CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Certificate serial: 01976E50518F06B53B021EE0479F182E23B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
Manifest number: 1593
Signing time: Sat 14 Jun 2025 12:00:46 +0000
Manifest this update: Sat 14 Jun 2025 12:00:46 +0000
Manifest next update: Sun 15 Jun 2025 12:00:46 +0000
Files and hashes: 1: BOUCQK9A6yrWD8MHisM_xTVdRBY.crl (hash: wW1AGz9YnfwC/C0GkuOMN92uDqwKXFQG3XcB7OgRroM=)
2: Ra939hYa4qHS53vnLZC8uQUEM-E.roa (hash: B/7jSSNr2C5FakUSARiA8ySImCt+J6e0YeVP0cyVsSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:51:8f:06:b5:3b:02:1e:e0:47:9f:18:2e:23:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Validity
Not Before: Jun 14 12:00:46 2025 GMT
Not After : Jun 15 12:00:46 2025 GMT
Subject: CN=841474ccf38c2970b1115c4593101de3bcdf3b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:86:e2:c1:91:ce:7d:e2:d0:bd:ef:c8:30:89:
a6:c5:61:c0:4e:c9:1f:c5:2a:15:bb:2b:80:c9:8e:
52:0f:22:6f:02:88:f0:71:17:98:35:c8:fe:76:bf:
a2:90:03:e0:d7:ee:76:95:1d:50:6b:dd:cb:cb:2f:
d8:8e:71:c4:57:8f:1c:79:db:75:d6:63:6f:36:1d:
3d:ae:ed:33:83:18:dc:0d:87:b7:65:e2:4e:50:49:
8d:de:18:97:ec:78:fb:7d:3d:5c:f0:10:dd:19:d2:
b8:63:84:f8:7e:44:4c:ff:5a:a7:bd:eb:93:97:93:
e5:82:88:d0:0d:1a:c1:3f:1a:3b:c5:bf:26:f1:e0:
e7:09:ec:95:3e:e0:76:40:96:58:0c:8a:94:72:73:
24:f3:fd:5b:1a:73:50:f4:15:75:32:ea:32:10:1d:
5e:6a:47:e0:0d:8f:ec:12:bb:00:72:97:ab:67:b0:
a5:38:8f:1e:15:69:2d:a8:42:68:f8:eb:d4:c6:3a:
1b:45:89:2c:16:de:d9:22:94:c4:75:4a:3b:dd:66:
f6:77:7b:21:09:b4:cb:6b:57:c3:27:7a:54:ba:8e:
b3:b5:1b:59:a0:a0:93:a7:2b:87:7c:d6:e9:94:21:
2c:02:a9:09:3b:ae:08:a5:c8:05:14:72:d5:13:a6:
a9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:14:74:CC:F3:8C:29:70:B1:11:5C:45:93:10:1D:E3:BC:DF:3B:03
X509v3 Authority Key Identifier:
keyid:04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:75:76:22:65:55:e1:51:6e:77:7f:0c:c7:e7:aa:25:c4:be:
43:6d:db:1e:5d:45:aa:2a:8d:af:01:ec:d0:07:7e:9e:a8:16:
72:63:f0:2f:00:d2:f0:9e:aa:e4:09:43:5a:05:3e:5b:fc:1b:
e5:7e:8e:bc:b3:09:69:19:55:fb:50:25:8b:d0:8e:be:79:b6:
62:c5:05:50:ed:b7:cf:64:2c:49:6c:f6:35:ac:c5:df:df:c7:
22:31:ed:79:2f:68:2f:a3:73:9f:42:59:44:ac:e3:43:de:48:
32:92:21:55:92:ad:64:1a:36:e0:1c:04:94:4b:48:c0:fb:4d:
9e:8d:71:8c:19:78:4b:e2:5a:c5:d7:84:45:32:72:8f:5c:14:
38:22:4a:9f:9b:6e:f0:1d:0a:81:b8:81:d9:09:80:a3:fe:9c:
4d:57:18:8d:32:36:45:13:5c:b9:7f:6b:4e:e4:e8:2e:23:2c:
17:a2:8e:9d:6d:b3:5d:33:b1:1c:29:b8:8b:3e:43:85:bf:3d:
c8:0a:db:20:d3:9e:fb:39:b0:47:12:c0:ef:f6:e6:85:58:6e:
b3:ba:fe:22:95:4a:2a:62:c8:4a:b3:91:35:57:84:7b:74:c2:
6a:c8:49:1e:af:c9:87:dc:fb:15:6d:25:11:d2:85:69:46:c1:
65:08:ec:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:02:47 2025 by rpki-client