Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
File: BOUCQK9A6yrWD8MHisM_xTVdRBY.mft (raw, json)
Hash identifier: 2yvmauqmowl3qPzgGGotmsHAW9GtSGO+mHs1NP5w8/o=
Subject key identifier: 92:4E:B8:8C:7C:02:DB:2C:72:FE:19:F1:7F:6B:E1:94:CD:9D:26:B4
Authority key identifier: 04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
Certificate issuer: /CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Certificate serial: 0196545C477F1131FC7E12924B961E37F47A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
Manifest number: 1501
Signing time: Sun 20 Apr 2025 18:00:55 +0000
Manifest this update: Sun 20 Apr 2025 18:00:55 +0000
Manifest next update: Mon 21 Apr 2025 18:00:55 +0000
Files and hashes: 1: BOUCQK9A6yrWD8MHisM_xTVdRBY.crl (hash: T+FzhvMFtGhA3Z8jC+ryROlcbwy+cwCDvx9quZSKeVw=)
2: Ra939hYa4qHS53vnLZC8uQUEM-E.roa (hash: B/7jSSNr2C5FakUSARiA8ySImCt+J6e0YeVP0cyVsSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:47:7f:11:31:fc:7e:12:92:4b:96:1e:37:f4:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Validity
Not Before: Apr 20 18:00:55 2025 GMT
Not After : Apr 21 18:00:55 2025 GMT
Subject: CN=924eb88c7c02db2c72fe19f17f6be194cd9d26b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:19:6e:7c:e9:ba:86:06:b6:d5:56:fd:0f:23:
ba:0e:54:16:99:88:13:eb:eb:a0:8a:f9:e3:a5:86:
58:5c:47:c0:c0:9c:bc:03:3b:5e:19:05:3f:81:1e:
c4:8d:c8:03:92:6d:6c:fc:cf:2f:47:c9:36:9e:aa:
3f:28:53:bb:5b:cb:d7:80:47:c5:0a:d0:af:0e:df:
bc:9b:a8:22:40:23:8e:8c:95:9c:42:54:a2:de:ee:
b3:f6:e2:50:d7:07:ad:41:0f:55:fd:18:c2:47:51:
0a:da:43:5e:cb:18:42:6e:38:5d:cd:12:2c:13:83:
c8:ac:3d:b3:27:1c:a2:7a:46:6c:0a:f1:2b:c3:c5:
5c:d3:00:d1:9d:8c:3f:41:75:d8:47:4e:5c:ed:ae:
73:df:cf:ff:83:37:09:7e:05:23:65:0a:05:bc:05:
d8:f9:2b:24:2f:19:75:58:8a:41:a9:35:30:d7:23:
ee:05:af:28:a3:d4:a6:66:d6:c1:4c:74:43:2f:a1:
50:be:6f:5e:95:b2:d6:c3:37:f4:2a:b6:03:ca:bc:
c0:96:c9:56:8a:38:b0:f4:cb:cf:d9:fe:63:cf:63:
af:43:bf:8a:38:9b:8d:81:cc:4f:c2:50:0a:f7:0c:
48:74:ea:51:3b:93:0c:31:16:7b:07:a6:e7:d9:2d:
e6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4E:B8:8C:7C:02:DB:2C:72:FE:19:F1:7F:6B:E1:94:CD:9D:26:B4
X509v3 Authority Key Identifier:
keyid:04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d3:dd:e5:f7:f8:d5:df:99:a1:b7:a3:6a:05:9b:c5:b3:89:
c9:e1:ff:cf:91:a1:82:61:ca:4a:ce:4a:64:e4:17:ee:06:a5:
42:04:48:1a:d3:3f:24:0e:b6:b6:25:db:b0:c7:a4:e1:16:bd:
8a:e9:8d:dc:d3:40:fd:7d:57:ee:4f:6e:a2:08:58:d8:57:8f:
f4:60:e2:96:81:22:4f:9e:88:7e:b6:1b:cf:49:18:45:96:81:
3c:14:d6:8a:7c:75:91:ff:e9:90:cc:c9:02:2e:a1:11:a2:1c:
3a:93:7c:90:87:f4:5a:2c:76:d0:86:47:42:d0:ce:03:11:51:
86:9a:a9:5d:7e:98:e2:2a:cf:c7:c9:6f:7b:3d:a4:82:6c:26:
03:ba:ff:ec:7b:15:43:83:0c:90:06:c3:c7:89:a7:fb:38:33:
ae:1b:f6:aa:7f:f1:14:d1:62:81:41:2f:c5:17:42:ec:87:03:
32:9d:5c:b1:5d:91:82:4f:ed:2e:fc:32:fc:4b:f1:04:d7:2c:
d6:de:98:29:9c:2f:eb:22:31:e2:e9:49:04:00:33:c0:62:5b:
d7:ce:97:8f:6f:b8:9a:b9:65:91:38:3b:f5:1e:4b:66:b7:4e:
b5:ff:63:72:f3:0c:b8:44:7e:05:fa:0a:3e:08:50:1f:d9:25:
7c:7e:bc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:09 2025 by rpki-client