Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
File: BOUCQK9A6yrWD8MHisM_xTVdRBY.mft (raw, json)
Hash identifier: +rW5T6qt6R1pS7Tnfg2K5CvoveFU1JeRtxOls5GiEuE=
Subject key identifier: 8D:8B:A7:78:1F:88:42:6A:DF:D8:70:63:B0:84:8B:4B:57:EB:98:10
Authority key identifier: 04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
Certificate issuer: /CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Certificate serial: 0197B5C4989AF5203B94D7E04FC779EB6498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 09:00:49 +0000
Manifest this update: Sat 28 Jun 2025 09:00:49 +0000
Manifest next update: Sun 29 Jun 2025 09:00:49 +0000
Files and hashes: 1: BOUCQK9A6yrWD8MHisM_xTVdRBY.crl (hash: UeF5xM0GsJ1K+FEakQFxZ27mKCFe9P0r5P2MbdpEFA8=)
2: Ra939hYa4qHS53vnLZC8uQUEM-E.roa (hash: B/7jSSNr2C5FakUSARiA8ySImCt+J6e0YeVP0cyVsSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:98:9a:f5:20:3b:94:d7:e0:4f:c7:79:eb:64:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Validity
Not Before: Jun 28 09:00:49 2025 GMT
Not After : Jun 29 09:00:49 2025 GMT
Subject: CN=8d8ba7781f88426adfd87063b0848b4b57eb9810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a5:99:ac:f3:f8:1b:28:9e:51:26:6f:fa:50:
b5:7e:0e:ce:33:07:18:06:19:46:4d:a3:bf:5d:29:
47:7e:66:c9:03:da:c6:33:91:48:0b:81:85:00:bb:
71:50:f3:6f:1e:36:58:e8:b8:31:1b:20:0f:c2:07:
f9:d4:67:e6:c5:6a:c2:af:57:67:30:e1:62:b5:b0:
44:4b:08:8d:25:29:e5:b3:2e:96:cd:9b:23:e0:9a:
55:2d:ab:17:b6:ba:0a:64:fa:8e:ef:6c:b3:91:a2:
41:1e:db:bc:8d:bc:1a:be:87:9d:fc:fd:99:d2:67:
52:ce:30:d3:ad:63:14:fe:6a:58:bd:b3:21:84:db:
06:27:3b:70:c0:28:b5:b5:92:ef:f4:29:b8:b6:59:
09:35:85:18:8f:0e:83:5c:57:a4:ff:4b:3d:73:bf:
48:62:bc:61:21:dd:cc:a9:ec:b4:11:f8:19:f0:7f:
87:7d:b2:0f:08:36:66:94:8a:78:61:44:66:30:89:
aa:af:51:97:35:34:6e:09:00:c5:4e:e5:51:45:0d:
e2:70:d4:a2:55:e2:34:69:f2:6e:4f:88:dc:5f:3c:
1a:31:4a:ac:b8:07:77:ed:80:7b:22:9d:bf:8e:3a:
37:ec:98:ef:c6:ed:84:43:0a:16:7e:02:06:c5:d7:
ac:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8B:A7:78:1F:88:42:6A:DF:D8:70:63:B0:84:8B:4B:57:EB:98:10
X509v3 Authority Key Identifier:
keyid:04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:09:ae:ee:3f:26:ec:96:80:08:a8:74:72:b6:7a:8b:2c:47:
b0:f8:05:a5:25:08:cb:50:1a:13:0f:dc:31:7c:bb:71:fb:0d:
42:f0:b7:35:6b:d3:a0:98:aa:82:05:ce:82:34:56:b4:69:04:
be:7b:3a:75:a9:38:5b:c2:89:18:44:df:7e:87:50:bc:e8:f5:
d4:cf:e7:78:8c:6e:5c:03:2b:b8:95:53:aa:2d:d9:3e:c3:22:
8b:da:44:4d:c9:00:51:f2:01:d7:f5:b4:5d:49:e6:62:95:34:
a5:cf:ce:82:d6:cd:8d:5b:d2:c2:f0:87:8f:61:1a:d8:e0:56:
8f:b9:c7:35:a3:72:62:aa:03:00:e4:36:2c:1b:48:f7:b7:9e:
aa:3e:f3:10:07:9f:52:10:70:52:39:14:fe:4b:0f:ad:9c:4f:
7e:a3:64:9f:07:8f:0d:b9:25:af:4f:f4:46:8e:4c:e6:29:cb:
52:a9:ec:15:6a:69:84:ef:96:18:96:eb:3e:51:92:75:8f:0e:
88:04:4e:ac:82:89:78:43:bd:56:f5:6b:86:c4:3d:06:76:c0:
f9:c5:90:8b:6d:ab:5f:b6:f2:97:90:98:36:b8:b3:6b:ac:4f:
2d:b9:75:af:3d:ad:b2:bf:d6:6e:76:41:98:51:60:17:06:6f:
c0:01:aa:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:23:21 2025 by rpki-client