Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
File: BoekrKWB2OvN_iS2Xx5woS8omng.mft (raw, json)
Hash identifier: 22SNfmugwbtNAjNBWX1wOKNbGmH6NAiHR7mwPngOHCg=
Subject key identifier: 30:93:20:0C:57:5B:0F:20:D4:9F:28:16:E9:EE:2B:A4:14:79:37:6E
Authority key identifier: 06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78
Certificate issuer: /CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78
Certificate serial: 019675D52285BB97C01D142243CF8B2DB096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
Manifest number: 06C8
Signing time: Sun 27 Apr 2025 06:00:24 +0000
Manifest this update: Sun 27 Apr 2025 06:00:24 +0000
Manifest next update: Mon 28 Apr 2025 06:00:24 +0000
Files and hashes: 1: BoekrKWB2OvN_iS2Xx5woS8omng.crl (hash: 6HGtPC+m17KzS9wxgest1K6elYcWyKOrbXh2mB4It6M=)
2: JTkFn5E31NEi0T3jHFsEReuBpS0.roa (hash: kKlmo0yCwDoRfIckDgl+hlLcGOfvby6dj08uXZBlD8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:22:85:bb:97:c0:1d:14:22:43:cf:8b:2d:b0:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78
Validity
Not Before: Apr 27 06:00:24 2025 GMT
Not After : Apr 28 06:00:24 2025 GMT
Subject: CN=3093200c575b0f20d49f2816e9ee2ba41479376e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:30:22:5c:fe:47:f9:a1:85:ab:68:73:1b:41:
0a:ee:4a:3f:29:92:13:76:21:87:5b:b2:30:13:5b:
1e:b7:fd:d0:f7:1d:44:29:0c:96:ae:39:17:0a:45:
38:17:21:c7:95:bc:35:21:ec:9d:b5:b0:06:e4:25:
56:f5:6d:56:fe:66:45:34:af:6e:0d:14:aa:b8:e2:
da:5b:09:cd:47:42:b2:60:fa:fa:3f:26:f7:77:51:
62:fc:14:a9:b7:9c:3c:2e:64:4f:9b:7a:f5:24:48:
de:54:61:48:ac:e9:a4:dd:bf:69:7e:ce:3b:16:fe:
2e:de:06:bb:02:7e:61:a6:78:70:91:ec:9a:d0:3a:
af:21:ed:a1:c6:ec:06:34:4b:38:99:4d:9a:28:a0:
c2:94:11:0b:7d:d1:93:0c:98:4d:76:d2:c4:fd:08:
1c:90:15:54:ae:25:d1:0e:99:e5:f0:96:be:a2:e5:
98:06:fc:33:e6:18:5a:8f:b0:0c:7e:c7:37:99:fe:
19:5d:89:79:1e:7b:e8:2f:d9:71:7e:65:7b:c8:1f:
17:28:dd:d2:80:2e:e4:13:7d:d7:d6:57:c3:7e:d3:
36:62:fd:8d:d2:76:9d:37:76:b9:52:7b:24:25:f8:
fb:e2:e3:5b:a8:5b:e5:27:27:15:1e:77:76:7a:6a:
6b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:93:20:0C:57:5B:0F:20:D4:9F:28:16:E9:EE:2B:A4:14:79:37:6E
X509v3 Authority Key Identifier:
keyid:06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:fb:c2:c4:36:29:9e:72:de:0d:22:cb:f7:b0:cc:9e:82:27:
6d:77:44:1c:93:6d:94:4d:af:71:6d:0e:2e:df:e0:a7:01:ee:
a3:bc:59:92:6c:3b:79:51:21:c8:88:fe:18:c7:16:ba:f8:dc:
5a:72:d5:8a:55:6c:af:28:b5:b0:7e:71:5c:44:6e:50:9f:e3:
81:a3:cd:e4:e2:29:14:2b:31:8a:02:30:12:f9:c1:83:81:df:
e3:7b:2d:ab:27:06:2f:90:1f:9c:bb:c7:4e:90:77:e4:ae:b1:
f2:1d:ca:f1:64:0c:02:74:b4:b5:1f:27:87:10:df:43:89:99:
8e:f1:13:61:e6:f2:ab:b4:d5:a9:ba:e9:38:ad:4e:11:a8:ed:
6e:eb:7f:6f:6a:32:72:6b:ab:aa:75:58:13:e2:c8:b5:80:de:
03:e9:96:79:99:cd:f2:b0:a8:74:70:94:f5:4c:74:6f:34:53:
15:0f:0b:8c:4a:4c:91:33:58:15:d1:53:a5:5d:6e:57:6a:0d:
de:50:77:ed:f9:a9:0d:ea:de:3f:f6:d0:46:f7:bd:47:0a:74:
58:d8:b5:d0:12:6d:a1:58:57:ff:8b:3d:f4:c2:eb:46:ad:c6:
2e:ad:f5:80:ad:6e:38:2c:aa:31:2d:38:02:e2:73:82:ef:0c:
15:87:55:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:56:19 2025 by rpki-client