Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
File: BOIiiGeO__Ff6nne8kxgZ84kqic.mft (raw, json)
Hash identifier: KsLmAoGwIIQbhKpd3ehgeId6nqg3wHLEyruta9ceIew=
Subject key identifier: C3:D6:88:1F:8B:C2:62:F9:7B:A1:7B:AD:15:AF:28:97:F9:F8:09:29
Authority key identifier: 04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27
Certificate issuer: /CN=04e22288678efff15fea79def24c6067ce24aa27
Certificate serial: 01964D7DE5BD0DA77978164E14F70CF141BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
Manifest number: 14F6
Signing time: Sat 19 Apr 2025 10:00:18 +0000
Manifest this update: Sat 19 Apr 2025 10:00:18 +0000
Manifest next update: Sun 20 Apr 2025 10:00:18 +0000
Files and hashes: 1: BOIiiGeO__Ff6nne8kxgZ84kqic.crl (hash: fFblAfsBNcfCCAZcgJT6ETZny4J4wo2UE9uO8Pvw89I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7d:e5:bd:0d:a7:79:78:16:4e:14:f7:0c:f1:41:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e22288678efff15fea79def24c6067ce24aa27
Validity
Not Before: Apr 19 10:00:18 2025 GMT
Not After : Apr 20 10:00:18 2025 GMT
Subject: CN=c3d6881f8bc262f97ba17bad15af2897f9f80929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4b:db:4b:7e:13:c5:dc:df:5a:1d:9c:9c:a4:
af:39:1c:04:1a:fb:8c:d1:55:dc:71:e7:48:27:e5:
9b:b8:2b:d0:6c:ca:81:0b:11:5d:6d:07:28:a4:ef:
fb:0f:75:1d:c7:d2:1f:c1:b3:2d:00:64:ad:e3:ee:
de:9a:33:8e:10:38:b1:db:e6:bd:17:fd:cb:9b:bf:
87:fa:20:1e:2b:b6:d7:30:d9:81:a1:3d:79:51:a7:
d4:eb:59:e5:cd:be:c7:ce:fc:6d:9e:b4:cf:a3:62:
fb:41:ed:e7:57:50:a9:d7:0b:a9:df:4d:d4:f0:0a:
9b:db:0a:bd:aa:fd:31:99:56:a0:36:be:6d:b1:89:
f9:a6:e8:88:78:14:20:d1:69:6b:15:1b:36:37:27:
59:96:cd:01:f0:4b:3a:20:66:d3:33:2b:02:d7:60:
93:ff:b1:7a:22:e8:6e:fa:b9:a1:61:77:61:42:91:
f5:5a:7f:e7:d8:ec:4a:9b:6a:6e:88:d3:90:15:df:
7a:ed:ef:b1:c1:8a:b6:69:f0:2c:ee:db:17:02:82:
b9:23:d9:31:73:e3:20:10:88:66:4f:da:a1:9d:90:
71:76:fb:29:d6:93:76:0c:ff:de:1b:26:4d:7b:38:
e7:13:e1:51:ed:5e:9c:a4:74:fe:49:fc:f0:fb:70:
b2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D6:88:1F:8B:C2:62:F9:7B:A1:7B:AD:15:AF:28:97:F9:F8:09:29
X509v3 Authority Key Identifier:
keyid:04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ea:ba:40:4a:49:5d:7a:6b:a9:45:44:9a:66:97:eb:10:94:
4f:58:61:2f:1c:4d:93:33:77:19:38:fe:7e:04:50:4a:25:3a:
08:11:c8:06:b2:b1:6c:b0:5a:3b:32:91:b9:17:03:7e:bf:41:
b3:20:c6:c7:96:a2:6f:74:c8:5a:75:cc:6f:18:3e:f4:27:78:
bd:01:5b:cd:1c:0c:3a:5f:57:bd:b4:8c:f4:41:06:c7:a3:6e:
30:76:6a:8c:75:a5:06:1b:77:99:07:93:e0:40:17:c7:21:65:
3d:58:43:3b:eb:07:0e:8a:b9:d7:5e:db:7a:c9:53:cb:ba:9c:
f2:80:87:9b:14:c4:55:b0:c3:31:1d:2a:e2:8d:6a:c9:c0:af:
30:5f:18:23:27:33:e9:f8:6e:dd:e6:da:e2:af:a2:4f:26:07:
ea:e7:70:fe:b7:58:fc:1d:88:78:5e:9d:e2:52:b8:89:1c:96:
cd:f4:63:a9:e9:b8:cb:f7:e7:b1:46:d0:96:6b:69:95:43:ce:
9e:35:0a:21:b7:a2:e9:17:ad:88:64:0a:ca:d4:27:4f:78:27:
96:58:56:89:36:53:b2:d2:a3:f6:4d:f5:14:7c:88:c8:6e:cc:
e5:6c:46:0c:f8:5f:c5:57:a1:a0:db:de:35:fd:0a:e0:b5:eb:
95:d3:f5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:21:05 2025 by rpki-client