Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
File: boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft (raw, json)
Hash identifier: mI7+tMzgxm/dWA9ocv7CUeMazODvSG0B4fO0zHNjt1A=
Subject key identifier: 41:D8:0B:F3:46:F8:86:C6:A0:AE:8F:BC:D0:4F:52:E2:DE:85:0A:EB
Authority key identifier: 6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E
Certificate issuer: /CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
Certificate serial: 01983D611A373D7EB57C03D147D07AC76FB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
Manifest number: 1554
Signing time: Thu 24 Jul 2025 17:00:30 +0000
Manifest this update: Thu 24 Jul 2025 17:00:30 +0000
Manifest next update: Fri 25 Jul 2025 17:00:30 +0000
Files and hashes: 1: 1taXUDcoKkrQ-dr580_7U9lAPFs.roa (hash: v10BOdn0ARMHeuLgu+DFFhQlFSBEpSVcbwEGZOdb93k=)
2: Q5r7HzOrwEP1GGFCPc7woWNwbtw.roa (hash: U5JbPSv/06NMHfKHAXVH+Wi4JladerrLqdwWPT8pKOs=)
3: boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl (hash: rLAP6kFdPmDslQnrQgUvL+jAs+Zy2y9zSCXL7w6gvfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:61:1a:37:3d:7e:b5:7c:03:d1:47:d0:7a:c7:6f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
Validity
Not Before: Jul 24 17:00:30 2025 GMT
Not After : Jul 25 17:00:30 2025 GMT
Subject: CN=41d80bf346f886c6a0ae8fbcd04f52e2de850aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0b:2d:f1:d1:ec:0b:6f:e5:b9:2d:28:77:41:
4a:6f:f9:37:ec:5a:04:5b:54:65:aa:1e:a4:71:84:
7e:ed:06:d6:e7:90:8d:55:f3:80:04:88:7b:f4:b8:
20:d7:0d:04:73:47:a3:14:0d:59:88:d1:f6:c9:d2:
14:66:a8:38:d7:66:29:80:50:97:da:31:8a:3f:53:
30:8c:16:6e:ef:53:6b:7d:e0:3f:ba:fe:e4:0b:ac:
6a:41:de:02:0a:86:e2:5d:59:ef:85:ab:b0:ea:78:
d8:40:c9:29:27:e7:4a:bc:9e:8a:87:fa:40:15:25:
6d:b2:f5:d9:28:44:11:64:0a:7b:f5:69:32:41:cb:
12:49:a7:1b:c3:8d:0e:c5:5d:25:2e:84:c6:fc:79:
1f:19:a2:9a:13:ca:22:10:6d:c2:3e:b3:ad:d8:01:
ba:cd:09:6e:05:52:6f:e0:d2:c9:a2:75:32:20:52:
49:15:c0:5e:5d:1b:76:df:de:e2:79:62:f0:3f:24:
26:1c:83:9f:73:bd:c6:d6:f6:79:56:89:78:4d:2b:
a1:dc:3e:a5:11:c5:8d:88:c8:6c:d4:2a:5a:42:50:
d3:ad:e4:64:d0:79:df:87:ee:77:7d:0a:3c:fb:81:
32:d0:eb:58:b1:33:cc:9c:a1:41:49:a3:0f:c4:b3:
ec:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D8:0B:F3:46:F8:86:C6:A0:AE:8F:BC:D0:4F:52:E2:DE:85:0A:EB
X509v3 Authority Key Identifier:
keyid:6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b9:71:0a:d1:db:fa:87:08:c6:92:3a:f7:19:1f:1d:c7:10:
57:f7:56:bf:ad:dd:7d:ed:fb:43:0a:e4:04:33:83:ca:d8:52:
7f:54:bf:c8:a8:e1:63:54:92:66:13:bf:e2:27:b0:a7:33:dc:
a4:e0:dd:85:1d:fa:ca:b9:1d:b7:e0:df:c6:f9:59:5c:95:43:
71:11:e2:c3:3f:4f:f7:8f:ab:a8:a8:b4:08:b1:7f:4c:54:26:
b1:d0:cb:07:3d:95:7b:61:e4:26:8c:e9:e9:31:17:f7:91:8b:
48:6d:fc:cc:82:7e:86:a5:91:5c:bc:d4:e8:1b:f8:cf:4c:cd:
a3:9e:93:7e:05:62:c5:80:3e:76:8c:6a:2b:90:2d:4b:93:26:
74:8f:be:cc:87:97:fc:e0:0f:58:be:58:61:9f:f9:c9:aa:66:
0c:84:d3:c1:92:ed:3f:d4:e1:43:c2:c8:be:e5:22:12:8d:60:
73:03:80:3e:21:a9:3e:4e:0a:a9:52:68:4e:8e:dd:bb:cf:22:
43:aa:57:27:e2:fc:b4:11:9f:f3:be:8b:41:4b:bc:06:dd:d7:
42:ae:6b:fe:4a:c4:09:c0:75:d7:cc:84:71:e6:cc:ff:55:0f:
dd:a7:e6:d0:18:8c:b5:77:22:9a:61:ac:e6:66:74:eb:48:e4:
d2:9c:8e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:05:14 2025 by rpki-client