Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
File: bOrnoCiJYKda-M6A54iFQ8f3fNc.mft (raw, json)
Hash identifier: 3TpV7FgU+MxvYJUZf+ZCc5Nj6v3W/SZHiaJFtXl+8Uk=
Subject key identifier: F1:A4:E4:92:AF:EF:64:EA:E4:12:36:EA:20:CA:06:2D:78:77:1B:9D
Authority key identifier: 6C:EA:E7:A0:28:89:60:A7:5A:F8:CE:80:E7:88:85:43:C7:F7:7C:D7
Certificate issuer: /CN=6ceae7a0288960a75af8ce80e7888543c7f77cd7
Certificate serial: 019643D7063B69BD60CA342BB1CE6AF27507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
Manifest number: 1203
Signing time: Thu 17 Apr 2025 13:01:27 +0000
Manifest this update: Thu 17 Apr 2025 13:01:27 +0000
Manifest next update: Fri 18 Apr 2025 13:01:27 +0000
Files and hashes: 1: 6Zx8tvFW-otCSIx-0XXwdAcWAvY.roa (hash: vXtudZUUi1vh+dqd99m5Me5cUdKc0jshPf9ev6mVJpw=)
2: bOrnoCiJYKda-M6A54iFQ8f3fNc.crl (hash: IFNTBnDcr1k8o8HKsNQQOavK7HbLhnNDva/NCZwtVmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d7:06:3b:69:bd:60:ca:34:2b:b1:ce:6a:f2:75:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ceae7a0288960a75af8ce80e7888543c7f77cd7
Validity
Not Before: Apr 17 13:01:27 2025 GMT
Not After : Apr 18 13:01:27 2025 GMT
Subject: CN=f1a4e492afef64eae41236ea20ca062d78771b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:59:37:51:8d:bf:f2:f3:d6:71:be:1f:ab:fe:
8e:2f:bc:1b:c5:45:36:ca:77:a4:d4:49:6c:ae:15:
f6:58:18:2f:ff:fc:de:02:b7:89:83:cc:1c:91:21:
53:2f:9f:dd:af:9d:23:b9:c8:ed:40:dc:08:ed:65:
ce:0e:33:43:b6:ca:61:4f:12:aa:dd:d2:ae:1f:07:
41:23:c2:6c:23:8d:61:b8:cd:7c:c2:fa:b7:70:20:
b1:f5:e7:f3:64:be:f9:f0:5a:e6:40:b1:aa:2a:bf:
ae:2b:11:20:81:bf:a5:dd:82:4d:13:d2:b0:fa:86:
4c:5e:f8:87:8a:08:e7:f3:f9:ea:ee:ed:4f:e1:b1:
6a:57:8c:7f:5c:42:98:f6:c7:a7:87:20:f7:a0:ac:
7d:59:8e:09:0f:05:7f:1e:ff:b3:13:7e:b9:22:af:
90:c2:14:b0:02:32:45:74:e6:a0:11:35:d2:a4:a1:
3c:8f:3b:9e:ff:fd:09:4d:be:5d:1d:85:73:e7:b5:
76:b7:69:f4:7f:7e:5e:13:bc:d4:3c:30:9a:00:6d:
87:fd:07:36:0c:66:54:27:1a:45:b7:b5:3d:37:d2:
8d:7b:88:ac:9c:b8:21:82:1b:8b:da:e2:d2:32:7a:
f5:f2:37:80:72:5b:92:ea:9f:dc:a6:99:13:c9:9b:
fc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A4:E4:92:AF:EF:64:EA:E4:12:36:EA:20:CA:06:2D:78:77:1B:9D
X509v3 Authority Key Identifier:
keyid:6C:EA:E7:A0:28:89:60:A7:5A:F8:CE:80:E7:88:85:43:C7:F7:7C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:85:6d:a5:c1:56:b5:b9:14:1b:25:e9:62:2c:1e:80:26:e9:
a0:68:54:5b:91:76:d8:d8:1c:f3:b0:71:79:d6:76:b9:37:af:
86:4c:84:75:b3:a1:0f:01:ef:d2:08:a9:80:4f:98:de:af:f1:
e6:ff:e8:38:e8:47:99:09:2b:bb:e3:0e:1c:52:c8:14:d6:cf:
92:8a:d8:b4:f2:36:79:42:50:52:dd:32:d9:4e:3e:d2:45:3d:
59:da:5e:37:c4:27:21:2c:db:bc:8e:db:4f:71:c1:6e:e0:bb:
a4:bf:51:12:59:ea:60:4e:39:d3:ef:c6:08:fe:e9:c5:0b:4a:
b0:8a:3e:41:6e:85:36:7c:3f:58:1d:35:7c:97:7a:45:18:bf:
01:e8:f7:47:6e:7d:5e:56:d1:fd:ff:44:39:85:6a:33:da:aa:
ed:ec:45:d9:6b:de:39:a7:38:b1:0b:f1:60:36:d4:3e:11:a1:
31:8b:8d:32:22:77:b6:52:e1:0d:54:97:93:6c:fc:02:63:31:
9b:aa:16:4b:25:a8:ae:4a:d2:d1:cb:3b:b0:be:e4:26:3b:21:
bf:3f:50:74:6a:0c:4a:57:df:ef:19:ea:d1:b7:cf:79:5c:96:
db:34:df:9e:8f:62:bb:0f:dd:e9:ec:9c:7f:57:dc:91:24:96:
39:88:49:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:37:26 2025 by rpki-client