Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
File: BOIiiGeO__Ff6nne8kxgZ84kqic.mft (raw, json)
Hash identifier: Ix4EyvDmFWvYNzDIwjD14dHB4NlrT3EK3IjWfj2G7Pw=
Subject key identifier: 66:1A:3F:A5:7B:0F:0B:E2:F5:64:D4:82:5A:27:24:F3:C9:81:A7:D0
Authority key identifier: 04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27
Certificate issuer: /CN=04e22288678efff15fea79def24c6067ce24aa27
Certificate serial: 019A71B811E37D25B48510773ADB19A2F86F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:01:19 +0000
Manifest this update: Tue 11 Nov 2025 07:01:19 +0000
Manifest next update: Wed 12 Nov 2025 07:01:19 +0000
Files and hashes: 1: BOIiiGeO__Ff6nne8kxgZ84kqic.crl (hash: C/SyVc3/6S1RRHf3L6upkgufO84Kdi3GEjFW4mhcV/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:11:e3:7d:25:b4:85:10:77:3a:db:19:a2:f8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e22288678efff15fea79def24c6067ce24aa27
Validity
Not Before: Nov 11 07:01:19 2025 GMT
Not After : Nov 12 07:01:19 2025 GMT
Subject: CN=661a3fa57b0f0be2f564d4825a2724f3c981a7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:af:c6:a8:3a:7d:1e:e5:46:20:96:b0:9a:63:
a1:7e:77:d2:3d:65:0e:3a:b4:c5:bc:9e:73:cb:cf:
c2:a7:93:ce:67:11:7f:d3:02:a5:b4:4a:a2:af:a4:
a8:ca:cb:8f:2d:60:ee:a3:b8:1e:bb:5b:ce:c9:6a:
0a:46:a4:5c:61:d8:58:85:6e:9c:e4:1c:2c:06:f9:
9e:17:9c:88:dd:61:57:43:d4:93:64:c4:60:06:d2:
3c:a1:99:e7:be:0b:78:09:09:cd:71:7c:22:05:82:
d2:77:cc:9a:dd:a9:7e:79:9a:01:33:22:e4:c1:a9:
00:24:5c:8d:d7:4c:5c:28:53:ce:77:cf:04:c3:8c:
e6:ac:dd:79:67:ac:b5:17:1f:37:e2:19:09:61:85:
c9:cd:cb:1f:a1:6a:c4:d6:fd:12:50:64:2e:d7:93:
45:b6:87:47:d3:9d:13:30:63:0d:ef:6d:33:86:6c:
1e:4e:c4:df:31:2d:64:df:8d:1b:b1:4e:d7:bc:5d:
c5:62:82:cf:43:4f:68:6b:ab:ba:8f:c1:cf:eb:00:
2e:44:ba:04:7e:d5:db:18:bc:50:42:54:ec:0d:9b:
cb:8b:64:7c:04:36:73:f2:30:56:ce:06:41:80:09:
17:bf:b9:f7:87:90:23:a9:f3:c5:56:95:35:75:e9:
bc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1A:3F:A5:7B:0F:0B:E2:F5:64:D4:82:5A:27:24:F3:C9:81:A7:D0
X509v3 Authority Key Identifier:
keyid:04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:53:0b:7b:47:fb:c5:13:50:26:67:58:0a:ef:4b:9e:db:0b:
9f:9d:61:44:f8:cf:30:4b:6d:f0:b7:37:67:bb:45:0a:a9:c5:
ba:d9:8e:5a:3c:d4:77:65:e5:cd:89:28:dc:45:d3:33:a4:4f:
9e:a9:69:7b:60:f4:2a:36:6e:a0:0f:3f:15:37:e3:cb:dd:7b:
b7:28:8f:e5:26:7c:e0:d7:9d:99:cc:62:41:13:7c:ff:f9:8a:
c6:40:51:d1:02:6b:ef:a9:a5:61:3a:46:1d:49:a0:3b:7c:bf:
a0:60:68:83:aa:05:96:84:79:aa:ff:72:6e:39:9a:f5:71:bd:
48:3d:ce:6b:05:e7:2f:c9:13:a0:8c:44:4c:23:cc:18:4e:80:
fe:a2:34:5b:f7:92:ff:c1:3e:75:25:20:97:b6:f1:77:dc:66:
60:bb:0a:00:39:a8:c9:16:1d:4d:e5:63:ff:3f:06:1c:9b:63:
3f:c4:97:a1:5a:b3:c4:f9:d5:6e:84:4f:94:63:65:24:47:2a:
e8:89:93:37:6a:fd:71:a1:a8:db:51:7c:1d:09:2f:2e:a2:3d:
bd:00:04:91:d7:83:af:6b:b4:3e:5d:b5:1b:55:1c:4d:1e:33:
44:03:1b:b7:da:ef:64:ba:4e:bc:19:30:fd:e9:67:e5:8c:ab:
2e:97:c0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:41 2025 by rpki-client