Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft
File: bosCjRgnTSGnMWrqPMzpFYtU9IE.mft (raw, json)
Hash identifier: FsquczFDiSgpiVc2k/uEXklLxq22uENaQVluhovgigI=
Subject key identifier: 65:1C:22:6D:75:72:13:FF:61:D0:3E:DC:F1:CA:90:AB:B5:03:7F:44
Authority key identifier: 6E:8B:02:8D:18:27:4D:21:A7:31:6A:EA:3C:CC:E9:15:8B:54:F4:81
Certificate issuer: /CN=6e8b028d18274d21a7316aea3ccce9158b54f481
Certificate serial: 01965A271A00831BD67C9B94649CBF0F98AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bosCjRgnTSGnMWrqPMzpFYtU9IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 21:00:34 +0000
Manifest this update: Mon 21 Apr 2025 21:00:34 +0000
Manifest next update: Tue 22 Apr 2025 21:00:34 +0000
Files and hashes: 1: WmIdnk_9nH4b99INea_I2KNfOsk.roa (hash: M5AL1LDO4kJuImuQDNFPsC6NQYMR6AeQGyLWZ0QYZSI=)
2: bosCjRgnTSGnMWrqPMzpFYtU9IE.crl (hash: lJ8Wo/51ZDoAlrUqo/3d/MYfdm4tvHhOnVw8uQJjPTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bosCjRgnTSGnMWrqPMzpFYtU9IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:27:1a:00:83:1b:d6:7c:9b:94:64:9c:bf:0f:98:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e8b028d18274d21a7316aea3ccce9158b54f481
Validity
Not Before: Apr 21 21:00:34 2025 GMT
Not After : Apr 22 21:00:34 2025 GMT
Subject: CN=651c226d757213ff61d03edcf1ca90abb5037f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f4:79:05:89:b9:5d:03:73:d0:48:65:ed:1c:
a9:5f:1f:70:66:cb:5e:d4:29:e3:37:8b:95:09:89:
93:06:0d:0b:5c:3c:88:60:23:85:f0:e4:d6:b9:08:
b5:de:12:4c:7e:fe:74:27:94:6f:5f:9e:13:4b:a5:
61:13:44:16:91:c0:b0:dc:0c:25:88:63:93:d5:70:
e3:97:d8:de:39:73:1d:ad:de:ea:63:3d:ac:d5:0d:
c7:96:09:69:cc:08:af:c7:63:de:b2:bc:14:57:5a:
59:cb:9f:70:55:f9:23:88:95:65:ec:7c:81:c1:ae:
41:7d:54:d7:04:50:b1:ef:00:ac:80:b3:48:99:31:
58:3c:7d:0b:62:19:8d:b9:80:6c:06:ca:f4:99:a2:
1d:2a:4a:85:b0:3f:01:1c:ce:ac:0e:6e:4c:47:53:
79:58:92:85:37:25:8b:f3:7b:6a:64:63:a6:d8:64:
06:56:3b:51:98:96:a3:32:78:fd:10:f0:eb:f4:e6:
b0:b5:65:2b:69:c1:47:5b:89:23:8f:32:e6:f9:8a:
3d:c0:74:63:ce:c4:1f:2f:da:c4:92:a9:e3:08:bf:
48:29:68:b5:fd:79:a5:ab:4c:b0:51:94:0f:09:35:
a5:4f:fe:53:d7:41:e6:5f:50:50:c5:95:fd:e6:59:
89:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1C:22:6D:75:72:13:FF:61:D0:3E:DC:F1:CA:90:AB:B5:03:7F:44
X509v3 Authority Key Identifier:
keyid:6E:8B:02:8D:18:27:4D:21:A7:31:6A:EA:3C:CC:E9:15:8B:54:F4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bosCjRgnTSGnMWrqPMzpFYtU9IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:82:0f:05:63:6b:c4:67:b4:da:68:95:1c:f9:7a:fc:16:41:
34:25:e1:64:b5:78:ac:12:c1:40:c7:93:d9:95:e9:e9:2e:80:
74:66:6d:3d:b6:89:af:6b:a1:0f:d2:5c:de:c8:0b:a0:26:2e:
54:a3:ff:bb:b4:74:cd:49:30:e9:a7:0e:44:f4:b5:1f:69:84:
67:d8:cc:50:c5:3a:81:55:4b:7e:c5:7a:3f:9d:82:1f:61:ac:
a7:f3:d4:46:8e:8b:0c:d5:95:f0:7d:91:b0:db:12:6e:6d:b7:
30:f0:65:c3:40:d3:9a:d1:51:a6:9a:88:91:79:fa:65:f2:b9:
41:6e:62:67:c6:0f:ef:98:99:95:d2:8e:2c:40:b8:7c:18:ea:
2b:cb:83:b3:3c:c7:48:ea:92:90:6a:dd:69:93:bd:30:9d:1e:
66:5d:b8:d5:36:fc:9b:b5:6b:b2:5c:1f:66:d6:04:01:20:91:
83:1d:5c:0e:05:29:c3:c8:7b:b5:00:35:ac:0a:a0:f7:34:7d:
d5:1c:00:2c:be:46:39:db:79:40:e4:81:29:22:36:a8:7b:6a:
af:37:23:72:e8:a9:28:dd:a0:46:3e:03:2b:85:19:30:6e:0b:
da:15:1c:69:8d:f7:eb:e3:c2:00:8a:09:6e:4a:3f:29:e3:a3:
c5:a0:56:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:42:29 2025 by rpki-client