Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
File: bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft (raw, json)
Hash identifier: 01606bgiOBtI2G75G42thSM4jLuxuCdMcJZFsUSIu3o=
Subject key identifier: 03:F7:4D:6A:C3:06:03:CD:1F:19:F3:F5:CA:B8:0B:4B:01:E0:C2:32
Authority key identifier: 6E:A3:B5:02:8C:E3:64:F5:10:2C:1A:EC:27:73:6B:7C:33:BC:04:93
Certificate issuer: /CN=6ea3b5028ce364f5102c1aec27736b7c33bc0493
Certificate serial: 0197556BF6A98A38E33B053E8F59CE377FD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
Manifest number: 145B
Signing time: Mon 09 Jun 2025 16:00:28 +0000
Manifest this update: Mon 09 Jun 2025 16:00:28 +0000
Manifest next update: Tue 10 Jun 2025 16:00:28 +0000
Files and hashes: 1: bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl (hash: o1UI9eGcAr6cHX+Z1Ks2UrMu01wSJ6bgXfNzl+e8L8k=)
2: xIncpff8t5DuBdap78CZRmBq41M.roa (hash: iuGa85kLc6g4Qd8kr/ZV4w/v+4lb0FJF9McHzQYZMGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:6b:f6:a9:8a:38:e3:3b:05:3e:8f:59:ce:37:7f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ea3b5028ce364f5102c1aec27736b7c33bc0493
Validity
Not Before: Jun 9 16:00:28 2025 GMT
Not After : Jun 10 16:00:28 2025 GMT
Subject: CN=03f74d6ac30603cd1f19f3f5cab80b4b01e0c232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bd:62:88:6a:5d:8e:7c:97:46:a9:bc:5d:a2:
a1:44:f7:db:0b:34:6a:81:57:cb:6f:d3:ea:ea:42:
db:e5:a3:a1:e3:bb:71:1f:76:d4:04:b7:8b:4a:47:
0f:c6:ff:28:2c:e7:c5:b4:b1:6b:2f:df:1a:ee:5b:
43:42:1b:d4:c6:0a:d8:d9:53:c5:2b:ab:d8:d2:06:
52:31:bb:ef:3c:18:0b:3a:bc:90:57:1a:16:1a:b0:
61:52:51:f5:99:2b:b8:e0:5a:12:e4:77:e1:a0:e4:
34:2e:b8:81:2d:3f:3e:dd:71:72:43:18:f8:43:db:
33:14:39:e7:66:72:36:79:21:2b:f9:59:bf:d4:c1:
3b:ad:cb:c0:a9:51:06:c2:4e:56:4d:9d:80:9f:78:
35:5e:39:81:dd:97:61:70:5b:28:ca:a0:1b:db:39:
0c:1e:05:50:5f:15:0b:b5:fa:a5:48:0a:2c:45:13:
95:84:e5:56:4f:6a:00:86:0a:0c:68:cf:e0:54:3b:
55:b6:e0:69:67:fa:19:a0:81:e9:22:a9:26:e0:13:
df:f2:83:c8:b6:91:13:bb:8f:7b:b8:9c:56:4c:3f:
ee:3b:d2:36:1a:f4:b2:0f:f7:94:2e:63:bd:62:ed:
a2:90:e1:5f:b3:16:76:c2:eb:25:03:37:6f:a2:6c:
fc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F7:4D:6A:C3:06:03:CD:1F:19:F3:F5:CA:B8:0B:4B:01:E0:C2:32
X509v3 Authority Key Identifier:
keyid:6E:A3:B5:02:8C:E3:64:F5:10:2C:1A:EC:27:73:6B:7C:33:BC:04:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:8e:77:d0:e0:5e:cb:38:27:85:7c:93:c4:29:a8:e8:ef:7c:
6f:4e:59:7a:3b:e5:1c:8d:f0:6e:a7:25:9e:7a:a7:7c:7e:2c:
c3:b0:b3:a0:3e:f5:95:e0:8d:ca:63:84:66:d3:64:54:a6:96:
cc:23:60:fe:21:f9:30:01:d0:1d:5c:18:05:63:c8:1d:3e:c6:
94:73:d8:e3:75:fa:d1:31:67:a7:81:99:60:f4:7e:77:a8:6c:
f5:64:95:aa:39:45:8e:78:e2:4b:0e:f9:4a:c3:a2:9b:75:a4:
7d:d0:27:51:eb:1d:f8:89:70:7a:32:a5:ca:b5:8e:09:be:6d:
63:81:65:7f:82:f0:b4:ac:b3:eb:bb:9b:f8:37:77:30:f1:17:
7c:30:5c:55:7f:f6:07:d0:36:cf:2c:d7:c2:3c:0a:a6:50:d5:
27:f1:ff:b6:04:59:d7:40:2d:c3:65:8e:9f:48:64:f7:64:00:
52:e7:a2:02:6c:d0:9d:6e:72:c2:b3:4c:5f:85:25:fc:c1:94:
4d:97:73:1d:5f:78:ca:93:cf:26:9f:ee:91:fa:6c:95:0e:e1:
f6:02:99:43:fa:5f:97:59:3c:9a:ad:b2:32:8e:9a:a7:92:05:
e0:cb:56:d5:ad:3d:10:ec:89:4b:17:f3:f9:f2:48:e5:17:d8:
24:44:ab:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:02:48 2025 by rpki-client