Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
File: bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft (raw, json)
Hash identifier: zz+5Pa9CL0WiWacSV8jGS7HasQw8Af3WPJsmUiYxkW0=
Subject key identifier: F9:1C:24:EE:2E:59:03:F1:DA:AF:DA:0E:9A:BF:F4:A5:01:EC:F5:F8
Authority key identifier: 6E:A3:B5:02:8C:E3:64:F5:10:2C:1A:EC:27:73:6B:7C:33:BC:04:93
Certificate issuer: /CN=6ea3b5028ce364f5102c1aec27736b7c33bc0493
Certificate serial: 0197B7EA339A4BE675BF09BAA249F4604727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
Manifest number: 148E
Signing time: Sat 28 Jun 2025 19:01:08 +0000
Manifest this update: Sat 28 Jun 2025 19:01:08 +0000
Manifest next update: Sun 29 Jun 2025 19:01:08 +0000
Files and hashes: 1: bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl (hash: DRnkii1xkqhYDDPSB8rZRUvqzHnWk4NO6XtF6Eys4sg=)
2: xIncpff8t5DuBdap78CZRmBq41M.roa (hash: iuGa85kLc6g4Qd8kr/ZV4w/v+4lb0FJF9McHzQYZMGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:33:9a:4b:e6:75:bf:09:ba:a2:49:f4:60:47:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ea3b5028ce364f5102c1aec27736b7c33bc0493
Validity
Not Before: Jun 28 19:01:08 2025 GMT
Not After : Jun 29 19:01:08 2025 GMT
Subject: CN=f91c24ee2e5903f1daafda0e9abff4a501ecf5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ff:b9:0e:9b:8f:a6:7d:67:a7:30:9e:37:19:
1f:8d:e4:99:55:c0:46:13:d4:bb:80:07:fb:58:a6:
5e:b1:0d:21:83:b2:a3:f0:4c:a5:a2:9b:e1:f1:eb:
7d:f4:6b:a1:2f:f0:04:52:d2:e8:7b:52:76:f8:a6:
e7:4e:27:95:8a:5f:d5:7d:a0:54:cf:59:c7:88:d4:
3e:1d:bc:41:96:da:04:bc:b1:09:6a:92:6c:b0:16:
6e:dd:d4:6f:1f:34:ef:2e:3a:4c:91:cd:73:f3:39:
0b:5d:0b:13:76:c1:d6:9c:42:be:3c:86:38:30:8f:
66:85:43:e9:fe:aa:1e:7a:6a:3f:eb:a7:ab:86:98:
a8:cf:d9:2a:d6:c0:2f:b5:b6:5e:1e:39:2e:72:fa:
91:74:05:ff:e8:02:44:b4:bb:36:d5:63:5f:17:e4:
07:ae:02:3a:00:5d:b1:f5:05:f4:bc:f7:43:11:48:
e2:88:7e:ef:32:a2:d3:e8:a3:9c:8b:6d:84:b3:87:
90:7c:12:37:b3:c6:67:28:bf:8b:88:d7:fb:28:ec:
0c:fd:3c:8f:e1:bc:c9:0d:71:63:16:05:7a:8d:12:
08:be:10:3f:b0:94:95:28:4c:1a:2b:aa:ac:4d:fd:
b4:50:98:91:45:2a:52:5e:16:5e:2a:94:33:6a:0b:
83:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1C:24:EE:2E:59:03:F1:DA:AF:DA:0E:9A:BF:F4:A5:01:EC:F5:F8
X509v3 Authority Key Identifier:
keyid:6E:A3:B5:02:8C:E3:64:F5:10:2C:1A:EC:27:73:6B:7C:33:BC:04:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:0d:16:2c:4c:c0:b3:d6:14:bd:f0:b7:6c:4b:a7:95:40:ea:
5b:6b:f8:dd:2f:98:0f:dd:2f:f1:af:61:a4:a9:91:f7:94:29:
85:d7:b6:8d:ba:2e:a6:b5:d5:7b:7b:65:40:92:08:5d:1d:cf:
dc:d6:65:32:70:1d:e7:84:5e:e5:d7:b6:d1:af:5c:09:69:9b:
b0:e6:45:5c:1e:dd:7b:a1:4a:3a:f6:6e:2a:58:5e:58:29:08:
08:af:94:18:92:7d:8d:cb:94:46:86:ab:7e:d2:72:91:47:72:
44:b7:29:b5:ff:7d:a2:d1:7c:f8:68:c4:5a:33:1b:c5:d1:fe:
df:b8:ac:eb:36:3e:0e:65:69:b1:3a:64:13:a8:58:45:91:8c:
10:d4:72:34:c0:ca:0b:3f:6e:81:17:24:f6:bd:94:0f:db:e4:
2f:3b:8f:8f:31:f5:31:e7:59:1d:9d:fd:9e:75:81:d9:f6:81:
28:3b:73:b6:4d:30:cb:6a:74:b0:cf:65:dc:a4:b2:7e:5d:a2:
9b:9a:8f:69:e9:30:52:b3:58:d0:45:0d:35:1a:25:04:ac:a3:
a9:c3:1c:1c:d8:d1:4d:d4:40:83:a8:3f:4d:94:44:d4:fe:35:
fd:6f:dc:fa:3e:37:67:9e:47:d9:37:ad:7e:4b:2f:17:68:08:
c7:96:56:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:14:52 2025 by rpki-client