Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
File: BOUCQK9A6yrWD8MHisM_xTVdRBY.mft (raw, json)
Hash identifier: ypfn4KlTV7G8AUdeaQnrjvqPuOGB5I4KHR/EYgsqa4I=
Subject key identifier: 62:E5:F4:43:1B:81:0D:29:C5:25:45:B1:BB:1D:B0:73:9D:13:8E:91
Authority key identifier: 04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
Certificate issuer: /CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Certificate serial: 0198560EC889EF088AAB9F278610D2C9C173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
Manifest number: 160B
Signing time: Tue 29 Jul 2025 12:01:06 +0000
Manifest this update: Tue 29 Jul 2025 12:01:06 +0000
Manifest next update: Wed 30 Jul 2025 12:01:06 +0000
Files and hashes: 1: BOUCQK9A6yrWD8MHisM_xTVdRBY.crl (hash: gq6oHzLhjogEfy5E199Zji5+9l4cifulAqxhwZAtUNA=)
2: Ra939hYa4qHS53vnLZC8uQUEM-E.roa (hash: B/7jSSNr2C5FakUSARiA8ySImCt+J6e0YeVP0cyVsSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:0e:c8:89:ef:08:8a:ab:9f:27:86:10:d2:c9:c1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Validity
Not Before: Jul 29 12:01:06 2025 GMT
Not After : Jul 30 12:01:06 2025 GMT
Subject: CN=62e5f4431b810d29c52545b1bb1db0739d138e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:60:96:6a:5f:b5:ce:3e:c6:e1:6b:4c:e7:b8:
eb:38:30:15:aa:2b:79:4c:0b:2f:c6:bc:f5:6b:26:
24:82:cc:17:cb:10:ec:89:30:85:c4:58:8b:da:68:
44:3b:ff:f5:84:38:bc:63:db:5e:31:b2:d7:98:8a:
b5:23:95:63:d2:a5:9e:5f:75:74:af:22:c3:c9:c8:
1a:80:ac:37:8e:de:3b:ed:25:76:98:fe:11:d4:52:
2b:b2:53:56:1f:73:c7:60:74:83:0c:f8:b3:ee:a6:
74:95:c9:41:f4:41:90:97:f6:75:93:5b:3f:b3:ed:
44:6c:c5:a9:a3:cd:d9:73:ef:15:75:67:6e:8b:27:
25:7a:3b:bc:27:80:d0:35:45:32:6b:37:92:4e:d5:
3f:13:6e:ec:f0:e0:d2:35:68:7c:01:3b:00:97:c3:
71:fd:b5:99:18:6c:39:3d:58:18:1c:6a:c0:95:f1:
ac:d8:91:34:dc:af:cc:fd:31:b3:4f:3f:ad:77:0b:
cf:a6:85:74:65:38:f1:3c:fc:ce:79:9a:8a:c8:76:
09:18:53:f6:b0:5c:a6:e1:bd:84:ce:11:a6:c0:2a:
06:5b:ca:b7:ee:a9:bb:90:9f:c5:76:32:cf:06:2b:
3e:ef:a3:5a:f5:7e:9b:63:b6:3d:c3:4f:12:a8:2a:
4c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E5:F4:43:1B:81:0D:29:C5:25:45:B1:BB:1D:B0:73:9D:13:8E:91
X509v3 Authority Key Identifier:
keyid:04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:9d:29:cf:05:a7:ad:d0:43:17:af:1d:a6:0a:f7:0c:b5:c3:
76:05:f0:35:ae:37:02:ea:55:bd:15:11:b0:9a:9d:87:b9:44:
06:66:6c:7f:95:da:2d:f6:5b:46:8a:80:c7:56:11:37:e1:fa:
ef:24:92:77:7a:6f:56:9e:b3:29:ff:53:f7:90:3c:03:f2:77:
7e:a5:8f:27:b1:73:d8:c3:73:03:ef:5c:5a:66:70:4a:f7:d9:
01:3f:d7:ca:84:d8:e0:de:90:cf:40:0c:42:56:55:5c:59:f4:
45:4a:2a:10:91:ad:32:a0:ef:45:4d:0a:15:4c:c6:3b:33:3d:
f3:56:c9:b8:1f:69:87:c0:46:db:9c:87:6e:0d:a8:e5:5d:d5:
57:5c:31:e1:ce:56:36:fd:bd:06:cb:0d:8f:7e:77:5c:2f:f6:
5a:c8:15:3a:90:e7:56:72:67:64:e8:fb:23:f9:f1:c1:d5:c1:
37:69:e7:03:0b:45:c2:df:83:d5:84:f4:41:55:55:b8:7c:b0:
94:e9:40:e1:7b:4e:7d:4b:55:fa:f6:b0:e7:27:54:c1:a3:cd:
35:75:19:38:eb:9c:ec:0a:0d:10:c5:5a:89:2a:c0:71:13:9d:
66:c6:5f:e3:e7:94:f2:13:ff:f5:8a:3d:9b:3d:2d:5e:6a:1a:
f9:1a:df:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhWDsiJ7wiKq58nhhDSycFzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0ZTUwMjQwYWY0MGViMmFkNjBmYzMwNzhhYzMzZmM1MzU1
ZDQ0MTYwHhcNMjUwNzI5MTIwMTA2WhcNMjUwNzMwMTIwMTA2WjAzMTEwLwYDVQQD
Eyg2MmU1ZjQ0MzFiODEwZDI5YzUyNTQ1YjFiYjFkYjA3MzlkMTM4ZTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWCWal+1zj7G4WtM57jrODAVqit5
TAsvxrz1ayYkgswXyxDsiTCFxFiL2mhEO//1hDi8Y9teMbLXmIq1I5Vj0qWeX3V0
ryLDycgagKw3jt477SV2mP4R1FIrslNWH3PHYHSDDPiz7qZ0lclB9EGQl/Z1k1s/
s+1EbMWpo83Zc+8VdWduiycleju8J4DQNUUyazeSTtU/E27s8ODSNWh8ATsAl8Nx
/bWZGGw5PVgYHGrAlfGs2JE03K/M/TGzTz+tdwvPpoV0ZTjxPPzOeZqKyHYJGFP2
sFym4b2EzhGmwCoGW8q37qm7kJ/FdjLPBis+76Na9X6bY7Y9w08SqCpMnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLl9EMbgQ0pxSVFsbsdsHOdE46RMB8GA1UdIwQY
MBaAFATlAkCvQOsq1g/DB4rDP8U1XUQWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk9VQ1FLOUE2eXJXRDhNSGlzTV94VFZkUkJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lZDIwZTYtNGY1Ni00NTk5LTgyYzAt
MzNhOWE2ZjQyZjBjLzEvQk9VQ1FLOUE2eXJXRDhNSGlzTV94VFZkUkJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9lZDIwZTYtNGY1Ni00NTk5LTgyYzAtMzNhOWE2ZjQyZjBj
LzEvQk9VQ1FLOUE2eXJXRDhNSGlzTV94VFZkUkJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ50pzwWn
rdBDF68dpgr3DLXDdgXwNa43AupVvRURsJqdh7lEBmZsf5XaLfZbRoqAx1YRN+H6
7ySSd3pvVp6zKf9T95A8A/J3fqWPJ7Fz2MNzA+9cWmZwSvfZAT/XyoTY4N6Qz0AM
QlZVXFn0RUoqEJGtMqDvRU0KFUzGOzM981bJuB9ph8BG25yHbg2o5V3VV1wx4c5W
Nv29BssNj353XC/2WsgVOpDnVnJnZOj7I/nxwdXBN2nnAwtFwt+D1YT0QVVVuHyw
lOlA4XtOfUtV+vaw5ydUwaPNNXUZOOuc7AoNEMVaiSrAcROdZsZf4+eU8hP/9Yo9
mz0tXmoa+RrfGg==
-----END CERTIFICATE-----
Generated at Tue Jul 29 21:30:10 2025 by rpki-client