Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
File: bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft (raw, json)
Hash identifier: p/P0wTAyFHJmGLuAwAPyGpMlq0F1wGUW1lliBNbojjw=
Subject key identifier: 80:8E:9D:C3:5A:BD:D3:75:C3:2A:04:01:48:12:6D:32:5C:53:FF:F2
Authority key identifier: 6E:A3:B5:02:8C:E3:64:F5:10:2C:1A:EC:27:73:6B:7C:33:BC:04:93
Certificate issuer: /CN=6ea3b5028ce364f5102c1aec27736b7c33bc0493
Certificate serial: 019764DF3F03ABB113FDA9F6E2EF28BC339E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
Manifest number: 1463
Signing time: Thu 12 Jun 2025 16:00:41 +0000
Manifest this update: Thu 12 Jun 2025 16:00:41 +0000
Manifest next update: Fri 13 Jun 2025 16:00:41 +0000
Files and hashes: 1: bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl (hash: wkQWO2PVjEQpcu4fDrn2genwS5TMoRVECnJYqK7FWuI=)
2: xIncpff8t5DuBdap78CZRmBq41M.roa (hash: iuGa85kLc6g4Qd8kr/ZV4w/v+4lb0FJF9McHzQYZMGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:df:3f:03:ab:b1:13:fd:a9:f6:e2:ef:28:bc:33:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ea3b5028ce364f5102c1aec27736b7c33bc0493
Validity
Not Before: Jun 12 16:00:41 2025 GMT
Not After : Jun 13 16:00:41 2025 GMT
Subject: CN=808e9dc35abdd375c32a040148126d325c53fff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:83:3b:c7:3f:3b:6e:d4:32:8c:61:bb:70:8c:
33:bd:f2:4c:2f:29:d2:2b:1a:af:75:42:8f:73:c8:
d5:09:95:75:fb:c6:42:89:03:26:63:9a:e7:7c:b4:
68:c2:20:1f:98:7f:f1:d6:43:10:98:03:e2:11:81:
d7:78:ba:33:da:4e:9a:15:d7:ec:f4:65:58:4d:ef:
69:e6:28:9a:8e:80:8d:54:c0:fa:8d:9f:17:7d:81:
c2:b4:a2:a5:67:de:cd:a7:84:03:f4:d2:9d:c6:ae:
f5:aa:53:0c:4b:5c:73:21:00:9d:46:4c:7c:51:13:
28:6c:2f:43:b4:77:b9:07:c7:d1:af:bb:ab:cb:84:
1a:8f:8f:8f:99:40:ae:1b:05:4b:b6:26:2b:3a:f7:
42:01:77:29:14:b1:58:96:6b:01:4b:c8:94:20:c6:
ff:35:71:e2:51:b2:f6:d3:ac:a5:b1:b9:e2:5b:19:
9c:0e:46:c9:e7:2a:a2:ec:c7:74:a4:0a:1c:c1:ee:
d4:47:e4:3e:b1:62:ea:2e:cb:79:66:b2:b6:44:03:
fa:97:97:9b:15:83:85:75:19:f1:29:1b:58:8b:32:
1b:72:b8:fd:94:b4:ad:2c:ec:25:0b:8b:fa:e8:76:
a1:78:77:f9:6a:e3:dd:80:08:5b:a6:0b:4a:42:b4:
6e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8E:9D:C3:5A:BD:D3:75:C3:2A:04:01:48:12:6D:32:5C:53:FF:F2
X509v3 Authority Key Identifier:
keyid:6E:A3:B5:02:8C:E3:64:F5:10:2C:1A:EC:27:73:6B:7C:33:BC:04:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:78:46:53:b7:17:1b:c9:e4:e4:19:c2:18:f4:2d:9f:2f:ff:
a5:7a:20:33:2a:b2:98:22:3e:e2:43:2e:7c:0d:b1:9e:07:a8:
ec:f6:23:c5:80:46:bd:89:c2:3d:5a:b1:10:61:eb:38:2a:27:
fc:20:27:e6:4e:ac:72:62:f1:fd:ba:8d:60:ac:78:18:1c:0c:
67:b5:f9:49:b2:59:e8:ab:2b:3a:6d:a6:62:e6:96:af:fa:fb:
30:39:60:87:f1:26:66:27:33:df:a9:06:58:da:2c:26:a4:35:
64:52:4b:11:a4:95:b3:53:34:c1:ad:46:29:7e:0f:4d:5f:07:
16:19:03:7a:39:48:69:4c:b9:6a:71:8c:73:61:a0:6d:a2:ce:
d5:58:25:66:9d:cd:55:f9:a3:97:95:ad:ff:00:2f:1f:d5:b0:
a2:8b:dd:75:49:8d:e3:27:0a:73:c9:a6:13:4f:62:bb:60:e2:
79:2d:52:3d:0a:f7:dd:74:54:42:88:da:31:27:84:24:8f:13:
6f:61:f0:56:7e:50:a8:b7:42:d8:52:e7:99:d0:df:28:31:3b:
f2:e2:cf:86:fd:95:2f:95:24:8c:2d:79:33:d1:1f:32:a1:85:
83:1b:b1:81:ac:ff:d3:a3:92:f9:c3:e7:56:d5:08:37:f3:35:
f1:18:ab:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 23:20:10 2025 by rpki-client