Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
File: BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft (raw, json)
Hash identifier: i5uE1kUQy3i2shRis9d9GcQinpVtG4BXmaZL70E6iS0=
Subject key identifier: 59:DF:8A:22:FB:A8:81:C5:D2:D4:E1:BC:DE:BD:1C:D2:76:92:0A:44
Authority key identifier: 04:EE:E3:F0:9A:BE:B6:A4:34:E9:90:5C:BC:0B:00:00:44:E7:9D:E7
Certificate issuer: /CN=04eee3f09abeb6a434e9905cbc0b000044e79de7
Certificate serial: 0197B6A089F874A37DE3ABA62BD21E40F59C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 13:01:03 +0000
Manifest this update: Sat 28 Jun 2025 13:01:03 +0000
Manifest next update: Sun 29 Jun 2025 13:01:03 +0000
Files and hashes: 1: BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl (hash: AY9AU6yBIkxqQ9LyhsdiVyuU8Qw1G7CtvjX3pvZEHUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:89:f8:74:a3:7d:e3:ab:a6:2b:d2:1e:40:f5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04eee3f09abeb6a434e9905cbc0b000044e79de7
Validity
Not Before: Jun 28 13:01:03 2025 GMT
Not After : Jun 29 13:01:03 2025 GMT
Subject: CN=59df8a22fba881c5d2d4e1bcdebd1cd276920a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2e:89:5f:23:d4:26:91:7f:29:b8:55:0f:28:
16:0c:dc:dc:38:da:85:95:6f:46:85:7f:86:6d:ec:
0b:9c:3d:e7:71:32:2b:cf:e6:8a:9a:47:ff:e8:53:
06:87:b8:b4:9d:35:7c:90:d0:61:43:07:76:a8:95:
6f:7b:9e:7b:18:d5:94:85:9e:f2:1f:b9:a2:8f:1d:
eb:92:4a:36:98:2f:f5:c7:1e:57:77:4c:19:fa:25:
6b:da:67:72:57:cf:24:e9:5f:36:b1:06:9a:88:4a:
1e:de:7d:b3:1c:b2:d3:5a:15:11:c0:01:20:cd:6b:
19:5b:11:bb:79:48:82:a7:f2:91:bf:2a:d3:db:f6:
3a:2a:73:ff:9f:20:52:7d:c4:04:d1:3e:32:c1:61:
55:76:36:81:d6:ff:d6:68:7e:d9:24:5c:51:f8:67:
4e:08:b4:64:03:a7:6e:b7:84:a3:67:53:29:dc:c3:
ea:9d:21:e2:ef:90:51:e1:94:24:db:30:44:62:45:
fc:65:6d:a5:88:61:2e:5c:ee:69:54:50:4b:32:3c:
cb:df:9a:f6:13:a3:4e:8e:e0:44:1d:88:69:f1:4c:
36:89:84:cb:2a:ba:dd:ba:85:fd:49:f8:46:9e:30:
87:1c:c8:2d:9b:ba:fe:0a:df:58:00:e3:0a:12:0a:
4c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DF:8A:22:FB:A8:81:C5:D2:D4:E1:BC:DE:BD:1C:D2:76:92:0A:44
X509v3 Authority Key Identifier:
keyid:04:EE:E3:F0:9A:BE:B6:A4:34:E9:90:5C:BC:0B:00:00:44:E7:9D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:e5:ad:42:7f:40:e4:ea:8b:80:d1:b3:a6:2e:04:c2:8c:96:
09:89:e9:53:64:4e:46:34:4c:5c:77:35:4b:30:3d:59:66:3e:
85:c4:fb:55:57:1f:97:0f:2e:91:c0:fe:87:ae:7d:96:8b:e2:
d7:23:07:b8:c0:ea:7d:4f:7d:79:29:89:43:65:36:b9:f8:9b:
83:9d:80:d8:fb:d9:17:1b:df:a2:73:f9:b9:0f:13:68:0b:ea:
13:f6:86:61:0e:96:da:73:f9:89:d3:cd:aa:b6:33:d3:f6:ab:
84:54:ac:1f:e3:56:63:b6:17:73:3f:ee:7a:1b:a1:5e:93:36:
33:f5:96:aa:ef:16:d4:f6:3e:ab:3d:7c:de:fa:e1:23:5e:5a:
ac:26:d7:88:18:a7:37:0d:c9:4b:eb:1e:12:72:21:03:06:4b:
b6:bc:cd:bf:de:38:57:5f:0e:c1:89:f5:c4:da:84:9f:53:2a:
78:91:05:6d:ac:2e:d4:95:60:be:68:4c:23:78:c7:5d:bf:4b:
3f:58:f9:90:ea:59:53:16:25:3e:32:a7:9c:34:57:61:35:d6:
33:c3:ea:8d:d8:4e:6a:87:ba:37:21:1a:8d:bb:69:13:0e:dc:
cd:7e:d3:86:69:b2:0b:05:26:2f:f6:d7:14:10:ed:de:98:f4:
0e:b8:60:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:02:22 2025 by rpki-client