Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
File: 14BeHP_BOS59F2j48FVKHH9jRK0.mft (raw, json)
Hash identifier: mox8iN/HTmT2BE/tWDLCUpuPfgGXCACXkcGrAP1Abp0=
Subject key identifier: F5:6D:F2:A2:F8:9D:85:4F:66:84:BD:11:CF:14:33:1B:BE:01:09:B1
Authority key identifier: D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD
Certificate issuer: /CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad
Certificate serial: 0196A2E4B0244E48CECD13EF5212B9847B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
Manifest number: 125E
Signing time: Tue 06 May 2025 00:00:18 +0000
Manifest this update: Tue 06 May 2025 00:00:18 +0000
Manifest next update: Wed 07 May 2025 00:00:18 +0000
Files and hashes: 1: 14BeHP_BOS59F2j48FVKHH9jRK0.crl (hash: ZZ1zECEoxXCoV4FTgBdtj0SliGhk1BqqIyURxARBwUA=)
2: xcIstN59HOzGE1G9ty62N5JYD0o.roa (hash: BZxFBF1fX1zEMIn2hYmGhW7/ZSCk8wjGWMR8N700UvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e4:b0:24:4e:48:ce:cd:13:ef:52:12:b9:84:7b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad
Validity
Not Before: May 6 00:00:18 2025 GMT
Not After : May 7 00:00:18 2025 GMT
Subject: CN=f56df2a2f89d854f6684bd11cf14331bbe0109b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:51:e1:20:ac:37:5f:08:a2:d1:d0:2b:22:d0:
1b:9a:08:2f:c5:a6:16:f4:69:56:e3:d2:39:45:ea:
e4:80:0e:6d:cb:88:7f:9e:01:b8:29:66:6f:51:a5:
e2:bf:03:c8:59:d8:1c:7b:74:60:7a:3e:2e:23:f0:
51:e5:be:b2:fa:94:21:90:46:f8:f2:69:89:21:05:
9d:63:5d:4a:ac:3c:2d:32:fe:a4:81:d7:21:b4:6b:
26:dd:36:e8:30:90:26:8c:6d:cf:bd:73:2d:0a:ba:
c9:62:a6:02:a0:f3:34:1b:39:82:98:c7:6f:09:c4:
a9:9a:e6:d3:f7:64:70:1a:25:1b:c7:13:06:0d:33:
4f:e1:16:ac:41:6b:27:5c:0a:c2:c7:46:4e:21:bc:
ef:89:ff:d6:52:bc:f9:fb:fb:21:8d:21:02:98:26:
b4:4c:c4:1e:ce:cf:d3:ea:7d:e5:59:a4:0d:0e:5c:
c1:f5:01:b7:7e:0f:a8:bb:9b:de:f0:43:50:5f:f2:
35:f3:13:05:2c:a8:5a:46:95:38:e2:b4:27:51:c0:
88:e5:d8:98:4a:b4:c0:f9:55:c4:e8:ab:6c:c7:c5:
db:49:19:1c:1f:d4:35:8f:87:ef:a7:b6:fc:9a:43:
c3:34:a6:b4:06:1b:36:bc:d3:3f:9a:b9:a3:3d:2e:
6d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6D:F2:A2:F8:9D:85:4F:66:84:BD:11:CF:14:33:1B:BE:01:09:B1
X509v3 Authority Key Identifier:
keyid:D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:20:fc:cd:53:71:01:ef:15:aa:27:e3:cd:ee:fd:88:f8:0a:
53:76:58:f1:25:c4:3d:cd:65:96:80:d3:00:72:e9:d2:d3:12:
e8:0b:ad:a0:3f:27:9b:33:6f:3c:43:12:22:ad:c1:cb:cc:07:
09:d3:39:9a:9c:bb:c5:f7:b0:f8:46:c9:9a:6f:8a:55:d9:a3:
9b:32:83:73:76:05:c8:bf:e2:e7:77:54:01:1c:bf:0b:11:fd:
93:c3:00:c8:6e:da:57:9e:1a:0e:d7:c0:77:85:0d:c3:a8:6e:
fd:01:bb:5e:a7:be:fa:05:2c:69:b1:51:35:7a:12:0c:f6:65:
c8:d8:e3:b2:4c:3b:e7:e2:27:89:66:a3:75:2e:a7:a6:ba:f3:
d3:24:6d:4c:6f:f2:42:d3:34:c0:26:f1:13:ef:a7:28:a2:68:
46:a5:94:98:4a:a2:54:3e:3f:84:d5:94:74:42:7c:c8:2f:67:
e7:57:6c:5e:03:fc:12:f8:27:08:51:bc:49:4c:1c:01:f8:87:
7e:7a:b3:30:b8:3d:4d:34:5f:eb:fa:be:e3:d5:3e:3f:cc:38:
e7:ca:2f:49:0e:de:7a:3c:1e:f8:78:fc:f7:53:e4:56:80:cf:
d4:4b:5f:be:03:17:58:5d:0a:25:cc:c9:90:3e:40:0c:07:96:
0e:b6:64:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:39:28 2025 by rpki-client