Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.mft
File: bov4V64H8NXv1Xda1SnOTu2bfS8.mft (raw, json)
Hash identifier: 0BLDBKPSwdAsguna132C0HJO0aGrNj9nJkoR2Plq734=
Subject key identifier: 61:69:2E:39:28:B3:48:1B:0E:0B:29:92:DC:AA:94:8D:9B:2D:CB:75
Authority key identifier: 6E:8B:F8:57:AE:07:F0:D5:EF:D5:77:5A:D5:29:CE:4E:ED:9B:7D:2F
Certificate issuer: /CN=6e8bf857ae07f0d5efd5775ad529ce4eed9b7d2f
Certificate serial: 019922C35ECE8E6CEDE988D34A4C30511DB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bov4V64H8NXv1Xda1SnOTu2bfS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.mft
Manifest number: D4
Signing time: Sun 07 Sep 2025 06:00:52 +0000
Manifest this update: Sun 07 Sep 2025 06:00:52 +0000
Manifest next update: Mon 08 Sep 2025 06:00:52 +0000
Files and hashes: 1: bov4V64H8NXv1Xda1SnOTu2bfS8.crl (hash: EtGDPf/xmlDfzpXFMNYvUERUdkfCETFW3B/uLmC1Zv0=)
2: xg4TB9W34T_2H7A6G22FFhh44IA.roa (hash: clTVUz8w+JASk2G55oRaZ8c/R0rPlvX1Is7X2/fJkW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bov4V64H8NXv1Xda1SnOTu2bfS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:5e:ce:8e:6c:ed:e9:88:d3:4a:4c:30:51:1d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e8bf857ae07f0d5efd5775ad529ce4eed9b7d2f
Validity
Not Before: Sep 7 06:00:52 2025 GMT
Not After : Sep 8 06:00:52 2025 GMT
Subject: CN=61692e3928b3481b0e0b2992dcaa948d9b2dcb75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:34:d7:7c:d6:f4:6e:fc:07:99:a1:57:5d:45:
21:17:49:8b:4c:d5:7e:86:bb:94:ab:13:40:57:42:
5b:bc:9b:f3:df:bd:c1:9e:e5:96:3b:b6:e2:33:24:
c1:cc:93:6b:4e:e8:5c:04:be:27:23:76:15:15:77:
af:ed:bc:6c:35:7c:44:53:27:d4:dd:e5:7a:a6:b5:
fa:24:cf:9c:d2:c7:db:19:a2:3d:79:25:c2:24:17:
7c:f7:75:cb:77:5f:37:4f:31:a8:07:08:b8:49:e6:
4e:6f:0a:77:bd:36:ae:7c:5f:23:7f:cf:17:c9:2f:
3c:f0:35:08:dd:64:56:ad:ac:75:4b:d3:d4:b9:f6:
d8:d0:4c:71:5f:e0:68:4b:3b:d3:13:64:fd:d3:70:
46:95:92:87:5c:e0:8b:ba:74:23:bf:10:04:f1:5f:
95:3b:99:18:f4:c0:13:62:22:ec:f4:f5:a5:d9:e3:
e2:d4:27:ad:80:24:da:bf:7d:76:c0:80:5c:8e:77:
22:de:f3:0d:b3:14:e3:42:8c:b3:b7:9e:3d:b2:e7:
4c:7d:96:f3:81:3f:43:e0:65:9c:18:5a:40:9d:c0:
17:10:0e:53:d4:dd:ef:1b:f8:3d:0e:e4:3b:7d:19:
b9:6c:11:68:d7:e2:f0:a8:ad:db:5c:c3:ca:8c:d2:
b3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:69:2E:39:28:B3:48:1B:0E:0B:29:92:DC:AA:94:8D:9B:2D:CB:75
X509v3 Authority Key Identifier:
keyid:6E:8B:F8:57:AE:07:F0:D5:EF:D5:77:5A:D5:29:CE:4E:ED:9B:7D:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bov4V64H8NXv1Xda1SnOTu2bfS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:3b:55:06:0d:ff:96:ea:ce:02:92:c0:3c:7a:3a:6e:ca:0b:
89:1c:cf:de:38:46:e1:37:97:3e:bb:95:71:f7:45:0c:5c:35:
f7:f5:23:ca:5d:62:aa:dd:b3:45:49:63:57:72:d1:14:33:7b:
e0:c0:1c:3c:b0:3c:1e:80:9f:00:4c:82:dd:95:c8:a3:6e:45:
cd:e8:f6:b7:f2:90:12:26:9f:b3:14:84:33:12:45:9a:2e:81:
d9:10:91:0d:6f:5f:06:cd:f3:5d:df:78:e4:9b:c5:74:a1:32:
34:47:85:ff:3d:97:df:29:a6:06:80:c4:4f:c1:34:8a:4b:ee:
36:c1:f6:52:c3:f2:d8:fe:50:6b:fa:3b:8a:77:17:65:ab:9a:
d4:86:95:f5:52:68:f8:36:19:2a:25:22:34:5b:b6:b7:c7:73:
c8:5c:e9:e5:1f:23:c3:ac:21:00:36:56:35:13:6e:20:a0:21:
1d:1a:1e:63:3f:69:12:7e:21:76:e6:88:8b:4d:bc:9b:b6:b9:
3b:c9:17:c5:38:26:d8:52:29:13:bb:35:a6:d3:da:3c:58:45:
5b:bf:81:8b:8b:b5:75:5c:12:49:ed:67:ab:64:e7:cd:34:f8:
ad:b3:f2:07:27:84:5a:9f:07:26:c1:22:e4:38:42:c4:9f:a0:
b4:a1:a8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:21 2025 by rpki-client