Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
File: boP2het7ai-EZLmXEpM41j9-7Wo.mft (raw, json)
Hash identifier: ONYuHuNay9pkw1dvrhBCu0YjfeXhAUkQ9Cqb+rL/CF8=
Subject key identifier: 7B:C0:01:78:21:01:FD:AF:7E:F2:AC:43:3B:49:64:AE:DF:79:76:6A
Authority key identifier: 6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A
Certificate issuer: /CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a
Certificate serial: 01969E630A9686931FF68C2707734E6CC944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
Manifest number: 1522
Signing time: Mon 05 May 2025 03:00:12 +0000
Manifest this update: Mon 05 May 2025 03:00:12 +0000
Manifest next update: Tue 06 May 2025 03:00:12 +0000
Files and hashes: 1: boP2het7ai-EZLmXEpM41j9-7Wo.crl (hash: kc+kvQFe9HjLXlHPE54FTB05/tH7ZU3cBBqNxkex8Kk=)
2: xL1waNLH89tu16gqR_InkZtP0MM.roa (hash: UbiBAyPW5WcKpHG6QUDn1a6TZhLyyQKfdK3u0M9NdEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:0a:96:86:93:1f:f6:8c:27:07:73:4e:6c:c9:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a
Validity
Not Before: May 5 03:00:12 2025 GMT
Not After : May 6 03:00:12 2025 GMT
Subject: CN=7bc001782101fdaf7ef2ac433b4964aedf79766a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a6:79:eb:cb:c4:e3:3f:51:af:62:25:fa:05:
9f:e5:15:34:22:aa:79:8b:cc:11:18:86:87:1e:5b:
a7:64:aa:0e:0c:95:4a:b4:ba:bb:01:cd:e6:1c:11:
d4:6e:b5:55:26:3a:67:a9:06:e7:6c:d7:2e:9b:0f:
fa:93:20:4c:b2:18:57:9c:8e:9a:9d:50:59:1f:d9:
66:4e:0f:18:fa:cd:43:bd:50:b6:bd:af:e0:7b:34:
5b:7e:1d:ca:39:11:8d:e6:81:39:23:f2:f3:0f:28:
e7:86:74:ad:9c:23:97:fe:2d:c7:63:58:b1:27:93:
15:e9:69:87:d5:15:ba:b3:e3:51:2b:66:b8:dc:a3:
49:50:5f:d3:01:96:d7:7c:c6:31:4c:0e:d8:c7:49:
d7:38:22:8f:25:65:bd:40:65:ac:7b:12:14:8a:c3:
2b:37:15:1e:9e:71:9e:4a:b5:fb:8f:3a:11:06:ad:
c1:bc:cf:94:15:fb:0a:57:4e:03:14:9e:94:cd:f7:
72:a4:b6:d1:80:84:74:d0:4e:ed:9f:de:e7:a6:8a:
97:cc:51:97:4e:c5:9c:27:77:e2:c1:c2:9a:ec:10:
44:9a:a6:ac:df:9c:80:f2:1b:39:7b:1a:ed:6c:03:
65:3e:c0:b1:4c:ea:3e:5b:0d:e0:28:ca:05:5f:3a:
9f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C0:01:78:21:01:FD:AF:7E:F2:AC:43:3B:49:64:AE:DF:79:76:6A
X509v3 Authority Key Identifier:
keyid:6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:96:ba:12:66:ab:e7:d0:e7:b2:2e:1b:10:ba:99:ba:68:fd:
ab:d3:d2:8e:77:39:8d:f3:b3:b2:6a:7f:52:c9:a2:09:61:a2:
89:20:e5:c3:64:70:e7:56:dc:4a:dc:cc:93:91:34:57:7f:c2:
0a:8c:11:1d:32:f5:69:7b:7d:f4:08:5e:2b:af:ca:ac:83:b1:
52:ab:ab:b0:2c:12:7a:b6:80:b7:ce:88:44:96:2b:7f:cb:8e:
82:1c:44:cb:31:07:12:08:64:94:6a:f2:0d:bc:62:82:fc:fb:
f9:2e:1e:33:32:46:78:91:e5:fc:52:b8:f0:e7:cd:cb:80:78:
28:b4:74:5a:6e:34:7d:ab:65:06:5a:b7:20:c2:a3:72:64:c2:
87:51:b0:d2:94:87:55:f7:3a:2c:7e:2a:08:f4:8d:7a:f3:57:
31:23:89:1c:e8:2d:0d:f9:3f:f3:ef:c7:84:de:9b:26:32:5d:
f2:77:a4:16:b5:b3:6b:33:73:da:58:d5:09:a2:49:f8:13:99:
73:da:fc:d5:e9:60:e4:a0:a1:42:b7:50:f6:6b:9d:87:15:1b:
05:9a:e5:98:d4:f0:56:dd:a8:07:86:35:2a:e4:00:41:13:e0:
fa:62:89:9b:34:7d:fb:c2:ec:a8:df:75:94:74:c7:8b:1f:c6:
60:28:34:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaeYwqWhpMf9ownB3NObMlEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODNmNjg1ZWI3YjZhMmY4NDY0Yjk5NzEyOTMzOGQ2M2Y3
ZWVkNmEwHhcNMjUwNTA1MDMwMDEyWhcNMjUwNTA2MDMwMDEyWjAzMTEwLwYDVQQD
Eyg3YmMwMDE3ODIxMDFmZGFmN2VmMmFjNDMzYjQ5NjRhZWRmNzk3NjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqZ568vE4z9Rr2Il+gWf5RU0Iqp5
i8wRGIaHHlunZKoODJVKtLq7Ac3mHBHUbrVVJjpnqQbnbNcumw/6kyBMshhXnI6a
nVBZH9lmTg8Y+s1DvVC2va/gezRbfh3KORGN5oE5I/LzDyjnhnStnCOX/i3HY1ix
J5MV6WmH1RW6s+NRK2a43KNJUF/TAZbXfMYxTA7Yx0nXOCKPJWW9QGWsexIUisMr
NxUennGeSrX7jzoRBq3BvM+UFfsKV04DFJ6UzfdypLbRgIR00E7tn97npoqXzFGX
TsWcJ3fiwcKa7BBEmqas35yA8hs5exrtbANlPsCxTOo+Ww3gKMoFXzqfSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvAAXghAf2vfvKsQztJZK7feXZqMB8GA1UdIwQY
MBaAFG6D9oXre2ovhGS5lxKTONY/fu1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9QMmhldDdhaS1FWkxtWEVwTTQxajktN1dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy80YWViOGEtYjk2Zi00ZWM0LThkOGUt
ZWFiZTM0ZTgwMmI0LzEvYm9QMmhldDdhaS1FWkxtWEVwTTQxajktN1dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy80YWViOGEtYjk2Zi00ZWM0LThkOGUtZWFiZTM0ZTgwMmI0
LzEvYm9QMmhldDdhaS1FWkxtWEVwTTQxajktN1dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA15a6Emar
59Dnsi4bELqZumj9q9PSjnc5jfOzsmp/UsmiCWGiiSDlw2Rw51bcStzMk5E0V3/C
CowRHTL1aXt99AheK6/KrIOxUqursCwSeraAt86IRJYrf8uOghxEyzEHEghklGry
Dbxigvz7+S4eMzJGeJHl/FK48OfNy4B4KLR0Wm40fatlBlq3IMKjcmTCh1Gw0pSH
Vfc6LH4qCPSNevNXMSOJHOgtDfk/8+/HhN6bJjJd8nekFrWzazNz2ljVCaJJ+BOZ
c9r81elg5KChQrdQ9mudhxUbBZrlmNTwVt2oB4Y1KuQAQRPg+mKJmzR9+8LsqN91
lHTHix/GYCg0qA==
-----END CERTIFICATE-----
Generated at Mon May 5 11:17:41 2025 by rpki-client