
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
File: Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft (raw, json)
Hash identifier: bG+OD+oXDD2yM2c9jUW1oubfUU2KRXxE4PDuKM205bk=
Subject key identifier: 2B:F7:6F:38:C0:BF:DE:C4:EB:78:2E:BD:21:F8:66:F3:60:D9:A5:A7
Authority key identifier: 06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F
Certificate issuer: /CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
Certificate serial: 01963C537D022658C445D1EC7A9972AD8A54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
Manifest number: 11CC
Signing time: Wed 16 Apr 2025 02:00:26 +0000
Manifest this update: Wed 16 Apr 2025 02:00:26 +0000
Manifest next update: Thu 17 Apr 2025 02:00:26 +0000
Files and hashes: 1: Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl (hash: X2qeVrM0kU8SgFepVcMi6wWKz1AbBcOVe/XmsYZNG7E=)
2: kVsLk-GwVR6PxNcCkI01AGuQido.roa (hash: rA9QYx0rx3lXPqBazEwKKf6dcd24i+QHCtscNmScr3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:53:7d:02:26:58:c4:45:d1:ec:7a:99:72:ad:8a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
Validity
Not Before: Apr 16 02:00:26 2025 GMT
Not After : Apr 17 02:00:26 2025 GMT
Subject: CN=2bf76f38c0bfdec4eb782ebd21f866f360d9a5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d1:65:9c:55:6c:a5:a6:8e:76:8d:95:15:ad:
48:98:ac:ac:54:35:5a:82:6c:b0:c1:3d:2f:01:59:
2a:bb:af:df:2d:70:0c:ec:11:28:32:9f:d9:92:c2:
b7:dd:9c:e2:bc:4f:f0:44:f1:09:fd:41:4b:c9:58:
31:8b:27:1e:f3:a6:79:9e:fa:91:ae:26:fe:46:55:
52:81:af:ad:2f:71:ab:a7:c9:81:d5:11:e6:15:5b:
f3:57:87:3f:03:eb:2c:f7:4f:0c:02:45:f9:51:e6:
8c:34:e2:3f:0c:82:d1:8f:c4:59:75:3b:d0:79:08:
2e:ca:e2:2e:1b:fc:a0:bd:a1:4f:1a:de:5f:05:c6:
05:6c:04:0e:3e:61:eb:5e:d2:61:f0:e6:c5:00:3d:
a3:c7:bb:2d:2c:2e:c0:c9:e5:8b:c1:1e:f5:13:8b:
74:f8:82:0d:33:9d:60:bc:ab:04:7b:c1:fe:99:18:
34:45:3d:a6:97:a9:53:e6:a2:82:cf:1e:84:67:d3:
ed:2f:3e:de:b2:06:29:0c:11:53:ee:ab:58:0f:db:
93:ff:fc:a6:26:94:81:d7:ba:05:6c:a7:63:a1:68:
25:9d:6b:39:20:58:42:06:fb:0d:54:5a:a4:27:99:
2f:69:c0:a2:36:2a:3d:3e:72:a0:66:fd:e4:c1:7f:
09:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F7:6F:38:C0:BF:DE:C4:EB:78:2E:BD:21:F8:66:F3:60:D9:A5:A7
X509v3 Authority Key Identifier:
keyid:06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ec:61:a1:fe:0e:f8:e7:97:ca:2a:78:aa:da:18:f9:af:16:
a3:f4:4b:31:a3:67:bd:ae:64:e3:2b:e7:f1:98:de:7d:3b:d8:
b6:05:03:37:52:26:a4:05:93:22:c4:bf:94:c6:6e:e6:27:cd:
12:42:a9:2c:d5:f7:a4:f8:bf:32:0c:8a:a7:51:5a:97:60:a6:
6f:a6:8e:15:ce:37:79:d9:99:a5:63:cd:ec:d8:68:22:0b:96:
42:0f:a2:99:d9:ba:b5:6a:25:7f:f6:3b:70:b6:aa:12:5a:1e:
0e:33:ac:68:73:bf:97:de:6a:55:95:33:41:a1:5e:e2:75:44:
ec:41:49:65:c3:76:21:89:3b:67:02:97:c5:f2:0d:98:79:6d:
08:0d:81:de:03:b6:77:c6:9b:d0:56:77:55:c1:e6:3c:1e:c1:
ee:54:cf:ab:59:b7:5f:b4:02:ba:66:c5:c4:4a:39:2f:be:34:
8b:b1:d8:0c:c9:d0:96:ff:bf:d0:5b:70:2d:0c:56:4c:c9:86:
8e:99:68:89:f8:4d:4c:45:c6:e5:66:36:8e:f8:de:26:bc:ea:
d0:d9:1a:81:58:6a:93:e4:b8:92:54:9a:26:92:4c:65:7a:cb:
b0:32:d2:a4:33:1e:db:1a:82:2e:2b:a1:bc:6a:25:32:ff:b4:
f9:60:0f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:44:53 2025 by rpki-client