
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
File: BOIiiGeO__Ff6nne8kxgZ84kqic.mft (raw, json)
Hash identifier: d7h7l5GSVDDIDCdY07Jk8rfbojhBJj3Y8UPWxCFqCQ8=
Subject key identifier: 53:EA:83:58:13:51:15:E2:52:FC:6B:71:FC:C5:98:AE:DC:4A:33:A4
Authority key identifier: 04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27
Certificate issuer: /CN=04e22288678efff15fea79def24c6067ce24aa27
Certificate serial: 019921B102B90C8F6DA26D353001626113F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
Manifest number: 166D
Signing time: Sun 07 Sep 2025 01:01:12 +0000
Manifest this update: Sun 07 Sep 2025 01:01:12 +0000
Manifest next update: Mon 08 Sep 2025 01:01:12 +0000
Files and hashes: 1: BOIiiGeO__Ff6nne8kxgZ84kqic.crl (hash: AMECnsdzhd6FTrsYtGZfRRC1EspmwN0dJiad6V1p+8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:02:b9:0c:8f:6d:a2:6d:35:30:01:62:61:13:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e22288678efff15fea79def24c6067ce24aa27
Validity
Not Before: Sep 7 01:01:12 2025 GMT
Not After : Sep 8 01:01:12 2025 GMT
Subject: CN=53ea8358135115e252fc6b71fcc598aedc4a33a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0b:e8:3c:2c:1a:41:8c:c2:70:5f:1e:6e:c6:
5a:59:2a:c7:be:6b:81:b2:1f:63:2a:5c:cd:92:47:
3f:68:ce:6f:33:d8:d5:9d:aa:46:8a:5e:98:52:ec:
90:06:03:72:e8:23:17:52:7b:8e:1b:04:aa:92:1c:
2e:ed:56:e5:7c:f1:ea:2f:be:d6:85:7a:50:f2:f0:
43:ea:94:9c:8c:8d:db:48:67:58:fd:6a:ab:c0:be:
f1:0c:f2:11:29:3a:ae:51:34:8b:d6:9a:2b:ec:8a:
1b:c2:41:82:aa:33:47:ad:01:8e:5d:29:93:6e:55:
ed:b7:e3:f8:d5:b4:3e:a3:2d:a5:2b:ae:1c:bd:12:
2c:0c:a1:ee:61:f6:5f:64:17:2b:01:bc:fb:b6:02:
1e:ba:ed:4b:50:f2:79:e7:cf:29:89:b4:af:47:e9:
f1:05:7a:ee:27:3f:48:c3:36:67:e0:46:0d:d9:58:
86:77:6a:bf:8a:5d:8b:ab:79:84:67:69:1c:a8:65:
f7:84:e7:2d:0f:a8:02:01:79:fd:3a:53:05:62:5f:
19:b5:e1:b6:c2:ae:41:88:b4:86:d7:d3:2c:bc:cd:
65:3e:ef:6b:56:cd:f5:57:dc:8f:9b:0b:7d:6a:a8:
57:19:40:55:59:c9:f6:ef:fa:e7:12:c0:09:c2:dd:
1c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EA:83:58:13:51:15:E2:52:FC:6B:71:FC:C5:98:AE:DC:4A:33:A4
X509v3 Authority Key Identifier:
keyid:04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:26:f8:99:d6:d9:06:2f:8d:ec:2c:2e:9d:f6:b8:fd:1c:dd:
e9:80:1e:13:68:2f:97:e5:d6:8e:2c:43:9b:bd:51:18:71:bc:
98:b7:ce:7c:6b:62:de:dd:76:23:20:58:22:5b:14:2c:c5:09:
fa:57:ca:2c:b3:8d:a9:93:9b:94:27:9c:3b:b9:d0:48:1a:3c:
04:58:39:4b:17:e9:5d:89:08:ae:e3:40:6b:9b:ad:12:ca:e5:
17:1c:9c:3d:e6:75:74:a5:b4:ce:3c:c6:f8:6c:8f:a1:08:a0:
08:76:e1:03:ba:86:de:bd:cd:d9:e5:20:95:fd:be:3e:2e:d2:
c3:a4:e5:7c:93:65:b0:85:d7:8e:24:3d:e7:d4:22:20:4f:7a:
f3:ae:d3:43:f4:18:94:68:2f:67:01:11:69:f4:51:97:69:8c:
47:45:6a:9a:ad:88:10:96:7a:e7:d5:95:5b:fc:f7:8e:f1:42:
17:b3:b6:7a:fd:8c:39:83:37:96:3c:d0:c9:f1:10:71:10:c5:
3d:eb:43:c3:2b:68:40:82:92:e4:c7:ac:72:4c:1c:ab:f9:db:
59:34:04:34:5b:34:ba:a4:81:d3:10:1b:3c:83:5f:2a:7d:a5:
6d:26:3c:3f:07:21:1e:9c:01:3b:76:7b:a1:1a:7f:70:2e:29:
e0:b8:3a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:00:36 2025 by rpki-client