Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
File: BOZbg9ITFfi6dXjoi984Eyld3go.mft (raw, json)
Hash identifier: Q45AK8ncXWejUJ5sMWyQWH6RXEhKDUDOZtZivPIR+5g=
Subject key identifier: E4:8B:81:3A:BA:8E:0B:F4:46:45:01:DD:FE:7E:71:B0:27:8A:49:1D
Authority key identifier: 04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A
Certificate issuer: /CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
Certificate serial: 01976C990BADA441AF68A3D25CFDED97C03B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
Manifest number: 0CAB
Signing time: Sat 14 Jun 2025 04:00:58 +0000
Manifest this update: Sat 14 Jun 2025 04:00:58 +0000
Manifest next update: Sun 15 Jun 2025 04:00:58 +0000
Files and hashes: 1: BOZbg9ITFfi6dXjoi984Eyld3go.crl (hash: 92OdWE1X3DiX/DocKM0LWyBmSe1vxmvPU6Hr4ojqmuM=)
2: E9Q22GIdMyoqpYS3_A3Sv4bLQrU.roa (hash: U3UIBvBEgw3rK3s+0sDC6RFjCDwgftn5pIAbSSrZ/Fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:99:0b:ad:a4:41:af:68:a3:d2:5c:fd:ed:97:c0:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
Validity
Not Before: Jun 14 04:00:58 2025 GMT
Not After : Jun 15 04:00:58 2025 GMT
Subject: CN=e48b813aba8e0bf4464501ddfe7e71b0278a491d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ca:d2:36:c0:07:7f:18:ab:34:2d:ad:34:b2:
1b:8f:26:e4:ea:48:30:60:05:be:0d:b2:34:7e:48:
0c:e2:ad:50:f9:8c:18:da:d2:60:fb:d2:ca:5e:4a:
42:2f:66:ac:e9:67:21:08:f5:83:9d:41:bb:95:e9:
7c:94:8e:38:83:c8:fd:2c:e2:f0:40:4f:55:30:a5:
6d:e9:8e:0b:87:c5:19:1a:26:d6:c6:ad:96:d1:55:
aa:c2:77:9d:3a:d2:03:bb:fc:05:7e:96:f9:84:ed:
dd:7b:40:a2:88:fb:d7:aa:a0:f6:c4:a0:9a:26:a0:
11:1d:89:4c:5f:59:77:7e:be:d6:f0:8a:dd:ed:77:
ff:4b:97:7a:7d:3c:8e:65:ce:9b:ad:27:94:08:62:
17:eb:ea:0f:e9:aa:ae:18:7b:2d:e8:d9:d7:11:bc:
4d:cf:69:82:64:aa:e2:6c:d8:e4:29:64:af:e0:59:
c9:6c:eb:84:8e:4a:df:c2:f2:a7:23:9c:65:4f:38:
00:a4:1f:ab:fe:5f:cd:f6:d3:b7:cd:48:b1:f7:bc:
3c:c0:2a:d3:90:60:b5:04:28:98:f8:22:db:1b:a3:
60:15:c4:29:11:8d:98:88:69:52:4f:86:20:44:77:
dc:17:84:f9:ef:48:28:3f:63:ce:a0:d4:a8:fe:48:
20:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8B:81:3A:BA:8E:0B:F4:46:45:01:DD:FE:7E:71:B0:27:8A:49:1D
X509v3 Authority Key Identifier:
keyid:04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c0:11:91:98:8f:79:d8:bd:a3:db:91:62:45:f9:1e:8d:f3:
ea:07:ad:98:d1:e7:fe:74:4c:1e:e2:a3:5c:d0:b4:f0:a7:52:
61:79:2d:ed:15:4e:24:3c:b5:be:ec:92:8d:53:6d:ed:85:68:
ee:b1:d4:92:9b:1e:00:b3:2e:40:6c:7b:c9:2e:8c:7d:02:70:
02:ae:fa:d8:0f:eb:b8:1b:03:3c:05:ca:50:1e:e2:56:ad:19:
85:cc:b7:51:0d:b7:59:65:6d:d6:21:ee:fb:ac:be:61:51:92:
a6:3f:90:df:ce:da:f0:5a:49:96:21:39:95:4b:99:0b:d5:0c:
b3:39:62:db:1c:31:a2:ed:4a:2a:28:e8:ca:37:da:58:45:cf:
f9:58:43:59:5b:5f:d3:c6:bf:0d:a5:cc:19:3e:6e:27:2e:57:
1a:7f:ce:79:98:d1:1b:f5:3f:66:f6:22:bd:e8:ba:ac:36:b1:
73:b8:3b:0a:aa:d4:37:75:78:b6:ba:bd:b6:12:ca:05:a6:1d:
90:c4:38:5d:58:fa:a4:48:fa:e0:77:3b:15:35:d8:a1:a2:47:
bd:ec:26:9c:ac:f0:b7:54:80:6b:4f:76:56:51:68:da:df:5a:
b0:f3:dd:5f:db:25:39:53:78:00:6a:8c:a7:81:80:c1:cc:94:
45:b1:c0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:53:13 2025 by rpki-client