Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.mft
File: bov4V64H8NXv1Xda1SnOTu2bfS8.mft (raw, json)
Hash identifier: H/ngetG3mYs7ej0saa+0VyJUJXrp7HObyxVjShqfXQE=
Subject key identifier: 1B:E5:9B:63:88:6C:82:1B:3F:4D:F1:95:AA:34:3F:5E:B9:A0:C0:00
Authority key identifier: 6E:8B:F8:57:AE:07:F0:D5:EF:D5:77:5A:D5:29:CE:4E:ED:9B:7D:2F
Certificate issuer: /CN=6e8bf857ae07f0d5efd5775ad529ce4eed9b7d2f
Certificate serial: 019827B50BC7A6054F12574D7C1FE2DEBF51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bov4V64H8NXv1Xda1SnOTu2bfS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.mft
Manifest number: 52
Signing time: Sun 20 Jul 2025 12:00:33 +0000
Manifest this update: Sun 20 Jul 2025 12:00:33 +0000
Manifest next update: Mon 21 Jul 2025 12:00:33 +0000
Files and hashes: 1: bov4V64H8NXv1Xda1SnOTu2bfS8.crl (hash: +zjJWq720dZs8HchgFZVqBN91WDsQP4Ew9+Hn2ynFJ8=)
2: xg4TB9W34T_2H7A6G22FFhh44IA.roa (hash: clTVUz8w+JASk2G55oRaZ8c/R0rPlvX1Is7X2/fJkW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bov4V64H8NXv1Xda1SnOTu2bfS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:b5:0b:c7:a6:05:4f:12:57:4d:7c:1f:e2:de:bf:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e8bf857ae07f0d5efd5775ad529ce4eed9b7d2f
Validity
Not Before: Jul 20 12:00:33 2025 GMT
Not After : Jul 21 12:00:33 2025 GMT
Subject: CN=1be59b63886c821b3f4df195aa343f5eb9a0c000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f2:8e:a2:ca:40:38:f9:6e:5e:9e:14:f8:b4:
95:8a:c1:0f:cd:38:ad:d6:eb:3b:95:85:01:53:c7:
95:4a:47:fc:fa:4b:81:1a:4b:a8:da:12:1e:45:be:
4b:e1:4f:b3:b8:eb:88:9a:c6:1a:17:4b:45:11:26:
0b:2e:03:ee:f2:10:56:7f:0b:fc:e0:72:62:26:62:
ed:00:44:a3:9a:44:2c:c4:be:b7:a2:d0:79:7d:bd:
71:cd:d0:19:d0:09:09:b2:fe:75:56:e3:de:21:1f:
d2:ea:56:f8:e9:ec:6e:f1:d7:50:a2:a7:64:51:ef:
d4:88:65:db:78:bb:12:55:80:2c:d7:92:88:ea:5b:
d8:95:5b:3e:2f:7a:1b:7a:0f:f5:cb:10:14:e7:16:
4d:f6:3e:19:ca:3d:f6:5f:c5:26:bd:6d:4e:1d:aa:
9c:67:16:4c:b3:fd:67:1c:93:e1:8a:2a:18:ce:97:
80:e3:90:84:e7:98:50:df:e1:c5:93:f2:a8:02:4d:
b6:83:af:46:e1:73:b3:53:42:bb:1a:9b:11:89:8d:
56:e9:44:b5:c8:f8:0d:6a:76:1a:cb:81:ed:4b:e6:
28:b2:50:6e:80:c9:38:4e:97:eb:cf:e5:95:20:cf:
cd:18:96:d6:c9:cd:e5:b7:6d:d3:89:e6:f8:53:97:
d1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E5:9B:63:88:6C:82:1B:3F:4D:F1:95:AA:34:3F:5E:B9:A0:C0:00
X509v3 Authority Key Identifier:
keyid:6E:8B:F8:57:AE:07:F0:D5:EF:D5:77:5A:D5:29:CE:4E:ED:9B:7D:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bov4V64H8NXv1Xda1SnOTu2bfS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ee:07:1c:a3:ed:73:e0:67:d7:ed:f6:70:ca:29:f9:f9:a4:
c8:16:4e:69:f4:86:e3:21:af:27:99:3a:2e:76:b2:0c:d6:34:
f5:a4:eb:a4:23:a7:56:5d:2d:47:f9:07:78:ed:b1:bd:14:36:
22:ad:91:7f:4e:b9:1c:20:de:be:f7:b1:4e:e3:17:66:6e:66:
52:11:ac:19:f3:9d:13:f9:aa:dc:36:88:17:80:e2:21:0a:9f:
b4:df:dd:d6:d4:7d:3e:a4:73:1c:29:de:ab:9f:a3:1d:71:fd:
0a:96:f9:35:6e:88:ca:61:f7:22:ce:91:f8:ab:e2:b5:a4:75:
34:59:97:d0:1c:ad:e1:bd:31:16:f2:09:e5:b1:eb:c3:3b:65:
5d:8b:12:f9:82:6d:57:02:ee:40:ef:99:e2:d1:71:11:11:b7:
80:76:dd:cf:55:a6:37:e6:48:10:36:9c:69:5a:16:94:53:47:
5f:7a:ce:29:7e:ec:24:79:c3:0a:de:42:5c:4b:2e:3b:e7:f4:
37:ea:4b:a0:92:c1:1d:19:9c:02:27:b6:8d:f1:4c:89:fa:63:
52:8c:09:7f:bf:80:c5:95:1e:2a:02:a8:27:24:2a:f9:f2:90:
84:07:a7:b8:cc:4e:20:db:a7:25:31:ca:42:00:4e:f4:ab:74:
67:e1:ce:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:22:25 2025 by rpki-client