Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
File: boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft (raw, json)
Hash identifier: B2NsAo5+98tAS+hGehyzyUPLz4dG5Jtq0y36+nhyMdc=
Subject key identifier: 65:8F:6A:F7:C2:D8:36:2D:2D:0C:A7:30:0D:90:B8:C7:32:C9:19:55
Authority key identifier: 6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E
Certificate issuer: /CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
Certificate serial: 0197C3B7A05485CB3B7A6D1177FA6A977238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
Manifest number: 1515
Signing time: Tue 01 Jul 2025 02:01:20 +0000
Manifest this update: Tue 01 Jul 2025 02:01:20 +0000
Manifest next update: Wed 02 Jul 2025 02:01:20 +0000
Files and hashes: 1: 1taXUDcoKkrQ-dr580_7U9lAPFs.roa (hash: v10BOdn0ARMHeuLgu+DFFhQlFSBEpSVcbwEGZOdb93k=)
2: Q5r7HzOrwEP1GGFCPc7woWNwbtw.roa (hash: U5JbPSv/06NMHfKHAXVH+Wi4JladerrLqdwWPT8pKOs=)
3: boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl (hash: KiuzzrTBrm58gzdzLof41INKwER1e2dAFrT7rTEW6sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:b7:a0:54:85:cb:3b:7a:6d:11:77:fa:6a:97:72:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
Validity
Not Before: Jul 1 02:01:20 2025 GMT
Not After : Jul 2 02:01:20 2025 GMT
Subject: CN=658f6af7c2d8362d2d0ca7300d90b8c732c91955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2f:3f:85:b0:4e:ad:63:08:c3:86:ff:de:f8:
27:c0:ed:bd:0f:97:48:4f:0d:3c:97:54:36:cd:10:
12:4b:e3:bc:f4:dc:82:da:7f:6b:9e:5d:27:e8:a0:
a2:39:a7:66:f1:c4:b9:d8:d3:36:b2:22:f9:52:85:
84:73:8b:d9:be:b1:7b:8d:1a:06:94:5b:7d:96:04:
0b:28:a4:fa:44:67:a4:cb:a8:0c:88:cf:61:a1:a7:
d4:28:74:2c:d2:52:2c:a2:4f:7e:28:91:ae:d8:7f:
74:7e:94:9a:37:96:0e:63:21:b4:cc:ec:65:40:83:
b1:34:8a:5c:b7:ee:91:0a:88:c9:ae:6d:9e:b7:21:
88:4b:01:6e:0c:5f:9f:e7:5d:dc:e1:75:0f:67:9e:
a7:2e:86:00:1e:29:b5:2a:83:72:e6:bc:21:97:a0:
45:64:28:11:8e:79:f9:fb:cf:36:18:30:ee:45:33:
5b:98:3f:1d:81:c9:9e:7d:5d:93:84:2b:d7:30:56:
b2:aa:4f:88:a5:d4:da:fc:46:6c:69:9f:15:9f:2b:
9f:f1:86:9c:7d:30:2c:d0:7b:5c:6a:ea:30:f1:85:
7c:49:30:cb:e2:27:1f:f0:71:ed:35:8d:55:a2:a3:
eb:c3:11:2c:c1:c0:4f:fc:99:74:df:08:01:da:5d:
33:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8F:6A:F7:C2:D8:36:2D:2D:0C:A7:30:0D:90:B8:C7:32:C9:19:55
X509v3 Authority Key Identifier:
keyid:6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:87:7a:76:00:66:ec:99:d8:7f:e5:ac:44:1c:b1:43:c3:a2:
75:6e:d0:7a:aa:de:d1:68:e3:fc:8d:52:ad:39:d7:aa:f4:29:
95:da:c6:01:b6:c0:1b:35:68:4b:55:56:e4:5c:d2:f3:d2:0d:
1b:50:06:75:e2:74:ee:2e:f8:60:48:06:db:bb:32:7f:38:34:
32:7a:8d:ed:47:41:8e:9c:69:81:7b:01:38:7f:5a:9a:df:4b:
79:25:2d:b8:d4:43:26:3b:18:df:af:fd:3c:7c:13:ee:ca:0c:
58:be:6c:6d:05:17:b3:b1:0e:16:6e:21:8c:c9:4c:27:f1:80:
ba:7c:65:2c:de:53:07:6f:07:7c:3a:1e:db:e1:63:d4:87:05:
15:27:d8:ed:17:97:de:3b:7f:b6:d2:d9:8b:d3:fa:f9:33:64:
46:6b:1b:6c:2d:b5:a3:01:ac:89:9f:a0:f5:0f:ae:2e:b7:bf:
46:94:9e:a6:44:7d:b1:77:c6:fb:8a:b6:d9:5b:3c:18:2d:98:
2e:b3:68:48:51:04:b3:8f:9d:26:30:4e:e8:33:86:d1:b4:3c:
fe:b5:1d:d1:c6:b4:2b:af:7a:f5:41:60:3f:a1:a0:e9:88:bb:
81:2f:12:22:3e:f1:ef:2c:7d:c9:aa:33:b4:a0:c3:b1:1b:32:
0b:4b:03:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 08:49:02 2025 by rpki-client