Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
File: bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft (raw, json)
Hash identifier: iVoEXBJ/Yi6Md+bmNL+OUDgEe9XH4Ka+ds/GXuW8cv4=
Subject key identifier: 0A:74:A4:2A:A1:C0:59:4C:99:EB:6E:CD:70:6F:D4:F7:3F:4E:B5:C1
Authority key identifier: 6E:A3:B5:02:8C:E3:64:F5:10:2C:1A:EC:27:73:6B:7C:33:BC:04:93
Certificate issuer: /CN=6ea3b5028ce364f5102c1aec27736b7c33bc0493
Certificate serial: 0196BCDBFCBD8493352DEE3451CFF75F3DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
Manifest number: 140C
Signing time: Sun 11 May 2025 01:00:55 +0000
Manifest this update: Sun 11 May 2025 01:00:55 +0000
Manifest next update: Mon 12 May 2025 01:00:55 +0000
Files and hashes: 1: bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl (hash: Q9t8NkHDJ9hQovzEPRA9aPGGTip+BdH/jY3kycMXCSw=)
2: xIncpff8t5DuBdap78CZRmBq41M.roa (hash: iuGa85kLc6g4Qd8kr/ZV4w/v+4lb0FJF9McHzQYZMGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:fc:bd:84:93:35:2d:ee:34:51:cf:f7:5f:3d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ea3b5028ce364f5102c1aec27736b7c33bc0493
Validity
Not Before: May 11 01:00:55 2025 GMT
Not After : May 12 01:00:55 2025 GMT
Subject: CN=0a74a42aa1c0594c99eb6ecd706fd4f73f4eb5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a1:12:54:6d:67:96:a9:58:91:34:db:cd:a1:
d0:43:93:85:6c:c0:b2:e1:6d:06:52:3e:b7:45:58:
32:d7:d0:78:21:4e:74:09:d4:c2:56:ef:b7:6a:33:
f8:e0:96:53:1e:27:e6:22:98:ff:88:d9:c3:b9:57:
cc:e3:0e:db:3f:82:f4:2e:0d:b1:f9:eb:62:2b:9b:
c1:cf:c8:62:83:f8:87:e2:f7:c8:d6:85:46:cc:22:
00:19:5c:4b:fb:f5:09:0d:a0:cd:ce:e2:55:5b:77:
15:1a:a6:92:bd:20:8a:e8:3e:26:53:4a:b9:0d:e1:
bf:69:69:b1:45:c0:0b:90:8b:f5:82:fd:b4:4b:82:
dc:71:99:1e:f8:d4:64:91:6b:0d:36:b4:aa:c2:70:
62:13:54:28:99:05:94:f5:ab:0b:8b:90:1e:b1:ab:
82:54:f0:b4:91:6b:e2:e5:46:37:e3:86:85:1e:d5:
d0:4a:62:e4:4f:04:5e:35:cf:3e:16:9f:2b:0a:5d:
61:32:6d:18:da:0a:1a:b2:b0:50:f2:9c:03:55:ee:
28:d3:27:6f:07:5c:3d:f3:98:9f:6f:5f:fe:6b:02:
d8:fa:04:b3:fb:c5:2d:e9:68:5e:d0:19:d2:b6:7d:
4b:ce:43:4f:77:e6:0e:45:4c:8b:5d:98:d5:21:2d:
29:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:74:A4:2A:A1:C0:59:4C:99:EB:6E:CD:70:6F:D4:F7:3F:4E:B5:C1
X509v3 Authority Key Identifier:
keyid:6E:A3:B5:02:8C:E3:64:F5:10:2C:1A:EC:27:73:6B:7C:33:BC:04:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:8d:4e:c2:f8:54:02:37:01:d2:03:6e:aa:ab:2c:6c:7f:83:
a4:c8:6e:d1:0a:38:cf:63:e0:83:aa:34:b8:fc:4f:8d:33:87:
2c:73:c0:f3:d0:a4:ce:54:31:f9:ab:d9:1e:81:8e:cf:48:04:
36:ef:99:fa:e2:aa:db:2a:5a:9d:b9:db:02:0f:8c:c0:10:35:
e8:68:48:02:d5:76:c2:19:ba:b6:20:16:0a:30:97:14:66:d4:
92:87:7c:f5:69:18:d5:3f:69:3c:c5:7c:5f:7d:39:44:49:86:
e2:51:a5:fa:d8:da:5c:be:c9:97:58:19:af:59:d1:f5:eb:29:
26:94:85:d8:af:8b:60:19:55:07:0f:be:d2:56:54:94:42:ac:
16:d1:ab:36:03:a4:77:41:49:d2:db:37:a3:74:f8:97:06:ff:
0a:ed:60:10:17:66:fc:af:87:5f:23:c5:e9:a8:95:9a:a1:33:
b3:ce:ec:86:24:f4:6f:f3:91:44:a0:bb:dc:12:e8:9d:4c:bc:
a1:7b:b0:7d:44:30:6b:0f:9a:cd:f2:fc:f7:b9:5f:78:a4:7c:
e7:c0:e8:16:83:f3:ec:8c:b1:f1:aa:32:64:3b:af:de:c2:e5:
87:5b:5e:cd:ef:d7:7f:ab:97:2e:6c:ce:7e:88:1f:1f:54:05:
a1:bf:b6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:08:36 2025 by rpki-client