Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
File: Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft (raw, json)
Hash identifier: KbBHS4TZ+MfFd0DcWYRT7wE4I1CcCMGBLFgYKl2JKQA=
Subject key identifier: 69:83:CA:0E:D1:52:3B:73:F3:35:A9:6A:1E:76:75:34:C0:05:D8:2E
Authority key identifier: 06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F
Certificate issuer: /CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
Certificate serial: 01958C974EB2899268CA4BFA9D6E7ECFE594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
Manifest number: 1171
Signing time: Wed 12 Mar 2025 23:01:21 +0000
Manifest this update: Wed 12 Mar 2025 23:01:21 +0000
Manifest next update: Thu 13 Mar 2025 23:01:21 +0000
Files and hashes: 1: Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl (hash: nETFMD1NTEiyweZNVAFWk7/wZ1ROpW8Zsy/Y7KMrrYE=)
2: kVsLk-GwVR6PxNcCkI01AGuQido.roa (hash: rA9QYx0rx3lXPqBazEwKKf6dcd24i+QHCtscNmScr3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:97:4e:b2:89:92:68:ca:4b:fa:9d:6e:7e:cf:e5:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
Validity
Not Before: Mar 12 23:01:21 2025 GMT
Not After : Mar 13 23:01:21 2025 GMT
Subject: CN=6983ca0ed1523b73f335a96a1e767534c005d82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8b:0d:e6:c2:95:57:63:00:44:d0:b2:07:f4:
fa:d6:85:51:6e:d4:67:d2:1d:6f:11:a4:00:50:13:
ea:5e:f2:72:3c:b5:38:e8:84:ce:7f:85:4f:5d:76:
14:85:be:60:6a:e6:08:27:29:2c:59:c2:81:96:34:
1b:53:7c:5c:ea:12:06:c8:fa:93:65:37:d1:ab:1c:
86:0b:9e:49:a0:2d:2c:6c:83:a4:4f:64:39:50:6d:
67:72:56:92:0d:50:82:bf:a2:9e:e4:56:a2:a5:00:
b5:5d:5d:5a:e1:9c:be:dd:a4:85:f3:35:3a:f1:6d:
3d:b4:78:49:de:77:f7:f7:30:b2:0f:31:7e:04:aa:
d9:4e:e7:0e:c7:39:08:00:ee:b7:de:6f:33:85:39:
1d:ad:81:85:15:ee:cf:d7:ce:36:5e:a7:fd:95:1d:
74:b7:1c:44:dc:93:12:f8:86:47:7a:a1:7f:84:d1:
b4:bb:9f:76:7e:29:c6:1b:7a:b9:3a:c0:fb:e5:71:
3f:22:a4:c1:ae:e4:38:68:05:2b:c5:23:c2:13:90:
89:31:11:14:e9:2c:ec:21:23:56:19:f5:82:f6:ce:
cf:6e:2f:85:e4:48:48:a6:f9:e7:2d:99:a9:5b:2a:
c9:fe:c9:5b:0b:d9:e2:71:38:eb:16:a4:47:7c:7e:
4d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:83:CA:0E:D1:52:3B:73:F3:35:A9:6A:1E:76:75:34:C0:05:D8:2E
X509v3 Authority Key Identifier:
keyid:06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:97:bf:72:5d:e0:5d:d2:19:82:cf:51:0d:13:95:e2:f1:fe:
b3:87:d9:36:ef:0b:03:ef:83:15:b1:f6:7f:88:6d:92:34:5a:
6a:2c:29:bb:58:15:b2:56:f1:3e:b0:c1:f3:b4:26:6b:c2:20:
f7:8c:11:d5:6a:ff:a5:1a:70:02:ec:b0:a9:13:4e:79:88:ab:
2c:f0:5b:ba:f9:02:e0:11:9b:7e:97:5d:b4:1f:6c:25:72:12:
71:b7:7f:5b:76:2e:2e:d3:bc:61:87:de:c7:b2:29:8c:56:34:
98:b1:62:99:63:bb:d0:d6:e0:40:4d:36:3a:3e:d8:07:2e:ad:
82:c8:c4:20:c0:0e:b3:c5:94:d0:a4:89:3d:e8:67:99:76:9a:
e3:11:4a:05:4e:50:d9:23:f7:47:09:28:35:61:34:f7:26:15:
ce:c1:d4:00:5a:aa:52:82:8a:4d:55:55:31:8b:af:d5:1b:d4:
e6:94:7f:fa:ed:ac:05:22:57:f0:2f:ea:98:38:2a:3e:71:57:
e3:b4:b7:70:20:29:69:23:20:9f:a5:57:99:3a:07:00:6c:97:
69:23:5c:f4:f3:6f:bd:01:6f:dd:b5:41:64:74:2b:0d:8f:fa:
d4:1c:1c:8e:aa:78:05:81:07:16:77:ba:27:ef:0a:7d:e7:ab:
36:ee:76:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:55:54 2025 by rpki-client