Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
File: boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft (raw, json)
Hash identifier: 1yhQUlWCWq8oCSjwuvpfiPeed0Lt5Q3x/E8neYvvJqQ=
Subject key identifier: 64:EE:C7:3E:89:E0:11:FD:86:07:2E:F5:FB:14:4A:AE:BC:33:20:A3
Authority key identifier: 6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E
Certificate issuer: /CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
Certificate serial: 01974BFB44A319F9C693D056747BE197BCF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
Manifest number: 14D7
Signing time: Sat 07 Jun 2025 20:00:47 +0000
Manifest this update: Sat 07 Jun 2025 20:00:47 +0000
Manifest next update: Sun 08 Jun 2025 20:00:47 +0000
Files and hashes: 1: 1taXUDcoKkrQ-dr580_7U9lAPFs.roa (hash: v10BOdn0ARMHeuLgu+DFFhQlFSBEpSVcbwEGZOdb93k=)
2: Q5r7HzOrwEP1GGFCPc7woWNwbtw.roa (hash: U5JbPSv/06NMHfKHAXVH+Wi4JladerrLqdwWPT8pKOs=)
3: boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl (hash: u7YIJPjUBMwR+IPx88IF7mp7Tucx22RyQaX7iCbZ9Iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:44:a3:19:f9:c6:93:d0:56:74:7b:e1:97:bc:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
Validity
Not Before: Jun 7 20:00:47 2025 GMT
Not After : Jun 8 20:00:47 2025 GMT
Subject: CN=64eec73e89e011fd86072ef5fb144aaebc3320a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:47:85:e5:14:30:9a:b9:06:e5:b0:a1:17:c1:
13:86:ab:ec:53:47:37:1e:38:a6:44:49:a0:be:c7:
2b:79:ab:e2:60:c5:8c:92:2f:14:be:00:63:2e:0b:
c8:00:25:58:f1:a0:9e:29:dc:b3:9f:fa:c1:a6:2f:
2a:2a:b5:1c:15:94:0e:7a:6f:5c:95:66:44:53:57:
9a:e4:30:5e:a0:9b:54:f9:a2:86:b4:0f:c4:0a:95:
47:4b:e1:ca:e0:40:57:f2:31:bf:8e:47:f7:25:51:
b2:ca:8b:8b:be:73:92:cc:a1:8b:7f:d5:68:6d:68:
c1:88:b6:e4:0e:7d:fe:22:ac:e1:f8:7c:b5:77:40:
b3:30:31:be:03:27:78:db:49:e2:28:05:f1:b9:d4:
cf:c8:2a:cd:d6:9d:62:2b:45:69:fc:9e:03:a2:f7:
f5:a3:15:08:ff:b5:6c:76:1a:16:9a:17:54:4e:e5:
68:a3:86:ba:e3:3e:15:be:71:b5:8d:94:46:8f:55:
1d:ee:9b:d5:1f:dd:9e:57:26:1f:fd:54:14:e2:b3:
20:ad:67:f5:22:ed:d7:77:a9:4f:b7:ce:3b:94:93:
6f:b7:a2:79:58:f4:3d:52:b9:8b:e0:9d:1e:51:a1:
e0:93:e0:59:d0:9d:09:9b:7c:4e:7b:75:d5:3b:41:
03:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EE:C7:3E:89:E0:11:FD:86:07:2E:F5:FB:14:4A:AE:BC:33:20:A3
X509v3 Authority Key Identifier:
keyid:6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:6e:5f:74:5f:22:87:26:67:43:6c:18:c9:56:90:30:4c:2d:
21:31:39:62:88:ad:6d:c4:48:f7:f1:10:0b:cb:b9:c6:3a:b1:
6f:85:f0:8b:52:31:0f:0d:74:7c:9f:8c:04:a5:bc:cd:0f:26:
0f:f7:19:4a:2e:1a:89:c7:19:f2:85:a3:5f:71:d9:23:63:7e:
a5:6b:1b:58:84:ae:3b:72:75:9a:3e:2b:26:48:a3:8e:ca:9f:
10:58:2d:f2:18:a0:4a:cf:0e:87:1c:39:1b:46:5e:68:7a:88:
3e:3d:99:1c:a4:3a:de:a6:39:18:c3:f9:9c:d4:60:53:88:f3:
ea:5e:eb:7c:8c:78:e8:0f:7f:43:5a:23:71:cc:8d:7c:04:ec:
54:04:ac:65:21:36:97:b7:3a:b7:c2:89:96:6e:a0:c8:99:40:
55:82:59:f4:56:fd:00:51:f7:b8:ab:46:02:66:28:6c:e5:0b:
4f:d6:94:17:5c:b0:d6:9e:01:c4:9f:04:51:c3:af:b7:98:4c:
b9:ce:66:7b:a1:ed:42:b2:a6:25:6e:a6:35:fb:39:28:f2:43:
30:ef:7d:c5:63:02:21:e2:10:9d:42:e3:c3:e0:14:54:24:a7:
17:7f:c1:75:54:3d:49:2c:c8:41:f4:e8:9e:62:75:42:10:62:
d0:ac:e4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:40:32 2025 by rpki-client