Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
File: boMQZuqP4gsGehNgBrevkGYzhDs.mft (raw, json)
Hash identifier: ogiQqSoKkLybMY83MSNqMO9FRjtJZZnTd7ES9Y0zLxk=
Subject key identifier: 15:AE:FF:EA:BB:13:8C:2B:7B:6F:A1:11:C8:2E:CC:41:3A:F4:92:EE
Authority key identifier: 6E:83:10:66:EA:8F:E2:0B:06:7A:13:60:06:B7:AF:90:66:33:84:3B
Certificate issuer: /CN=6e831066ea8fe20b067a136006b7af906633843b
Certificate serial: 019A725C77462B577B0954FB5878C2AC25AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 10:00:53 +0000
Manifest this update: Tue 11 Nov 2025 10:00:53 +0000
Manifest next update: Wed 12 Nov 2025 10:00:53 +0000
Files and hashes: 1: K0elnSjthwyDpqUrzqz0WWkS5i4.roa (hash: gy/lZpvudI4NuVtj5Cr7txBBixWEIa8xyvy8FV7O+jc=)
2: boMQZuqP4gsGehNgBrevkGYzhDs.crl (hash: laaV18g9Wm+0ghdGU2GZ84/HPmKYUlYwGO1esKC27Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:77:46:2b:57:7b:09:54:fb:58:78:c2:ac:25:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e831066ea8fe20b067a136006b7af906633843b
Validity
Not Before: Nov 11 10:00:53 2025 GMT
Not After : Nov 12 10:00:53 2025 GMT
Subject: CN=15aeffeabb138c2b7b6fa111c82ecc413af492ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:78:25:e7:73:69:e6:7f:c5:09:9b:a9:05:0c:
0c:0e:3e:4d:90:16:48:87:b5:cc:d8:a8:76:8d:32:
9b:4f:81:14:f2:5b:5a:01:f4:37:c5:6c:ea:25:91:
eb:2e:8c:b7:fa:11:d5:03:88:65:03:a4:73:d0:6b:
3b:a0:f3:7f:0e:68:21:54:a0:b0:b4:d6:88:88:fb:
ae:63:d8:dd:58:4a:e8:bd:56:2f:d5:cf:1e:6f:8e:
f1:75:1e:7a:a7:6a:15:b4:30:cd:c8:ed:8c:3c:bb:
16:a9:1a:c2:9f:26:b4:23:56:47:b6:56:1f:c3:8a:
ac:3e:8d:96:58:07:f0:52:5f:bc:3f:2f:9e:66:ea:
c8:1a:05:fa:ce:24:ca:2c:9a:92:fc:bc:20:22:73:
d1:bf:b3:ea:6c:62:f1:50:dc:f9:6d:22:52:56:71:
e2:68:0a:a2:76:7b:d5:0b:7c:6f:65:59:8b:12:0e:
c4:c0:a8:73:5c:90:aa:12:f2:66:71:eb:58:93:b3:
09:43:4c:d7:d5:b4:31:f6:ee:a9:d6:76:91:5f:94:
fa:f7:ac:4d:d7:4c:0f:1f:a8:70:4e:2c:f9:29:e4:
15:6d:fb:1d:99:ea:84:d1:a9:06:ce:7e:5d:6d:e3:
65:97:1b:82:38:83:fe:1a:49:d7:b3:0f:8f:8c:92:
6a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AE:FF:EA:BB:13:8C:2B:7B:6F:A1:11:C8:2E:CC:41:3A:F4:92:EE
X509v3 Authority Key Identifier:
keyid:6E:83:10:66:EA:8F:E2:0B:06:7A:13:60:06:B7:AF:90:66:33:84:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f0:70:b6:7d:5a:b7:dc:ea:8d:77:29:f3:23:7c:ff:0b:57:
47:23:f6:5d:f4:8a:bf:56:1d:72:ce:e4:c2:aa:00:81:c4:34:
9b:b2:17:64:23:8c:ab:da:56:24:9c:36:01:c4:83:5d:81:9d:
89:32:09:72:e7:74:7f:28:07:98:1e:38:4c:48:f6:e2:43:f6:
5a:23:fa:84:78:d5:fd:f0:f1:a5:c7:f7:27:e0:72:d5:7f:69:
1f:c8:67:c3:26:ad:cc:9a:c4:0c:04:9c:eb:15:d6:7b:5c:ae:
e2:9a:f6:88:fe:91:51:2c:c8:20:df:28:f7:7d:10:22:34:74:
9c:22:8a:a4:16:fd:bb:c4:32:31:88:50:79:85:03:62:10:75:
74:d3:5e:1e:f2:d6:9b:b8:60:61:cb:19:f5:29:c9:54:2d:3c:
f7:97:7b:14:03:5d:d6:ff:af:64:f8:35:1b:04:4f:93:03:cd:
36:bd:9f:9e:0b:ba:7b:45:50:10:79:dd:ad:b3:9e:b0:a2:2e:
6f:0a:9b:90:57:f6:ba:83:19:ea:3d:e4:5b:57:28:8c:59:44:
73:d5:fc:8f:48:64:a3:09:3e:d3:69:a9:93:69:d8:ac:4c:23:
34:9d:2e:8d:0e:bd:d5:3b:05:08:ae:83:fa:dd:e8:3a:ce:a7:
9c:1e:98:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:41:11 2025 by rpki-client