Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
File: boMQZuqP4gsGehNgBrevkGYzhDs.mft (raw, json)
Hash identifier: 813I+tpTnV4CZHV1JSJL3zzzTmcim0ZhMvaQUjQ4t1I=
Subject key identifier: 63:D6:4F:0F:CD:E5:A9:71:53:97:A1:CC:F6:72:30:22:B9:F6:08:B9
Authority key identifier: 6E:83:10:66:EA:8F:E2:0B:06:7A:13:60:06:B7:AF:90:66:33:84:3B
Certificate issuer: /CN=6e831066ea8fe20b067a136006b7af906633843b
Certificate serial: 0199225563CF98ADFB1CDF4ED07401F33321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 04:00:45 +0000
Manifest this update: Sun 07 Sep 2025 04:00:45 +0000
Manifest next update: Mon 08 Sep 2025 04:00:45 +0000
Files and hashes: 1: K0elnSjthwyDpqUrzqz0WWkS5i4.roa (hash: gy/lZpvudI4NuVtj5Cr7txBBixWEIa8xyvy8FV7O+jc=)
2: boMQZuqP4gsGehNgBrevkGYzhDs.crl (hash: LWktRd9+6KJ8MXvkfHbHpH8D3DlTJWPo5f5n0/6y+9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:63:cf:98:ad:fb:1c:df:4e:d0:74:01:f3:33:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e831066ea8fe20b067a136006b7af906633843b
Validity
Not Before: Sep 7 04:00:45 2025 GMT
Not After : Sep 8 04:00:45 2025 GMT
Subject: CN=63d64f0fcde5a9715397a1ccf6723022b9f608b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ad:17:f2:56:02:f6:94:3d:b8:e8:ba:82:cc:
e7:c1:dd:93:7c:c1:c3:63:d4:8d:43:39:64:b8:45:
5d:4a:b9:5c:61:8c:fd:7c:46:8b:db:ac:64:57:fc:
65:a0:3d:03:65:2e:d6:a3:5f:51:ba:c7:43:da:dd:
36:a1:5a:18:43:57:ab:1f:97:78:d0:bd:a0:97:52:
88:fa:a9:da:3b:5f:07:64:e5:a7:ee:81:99:16:69:
17:cf:4b:b9:49:70:05:ee:a2:7c:5c:dc:dc:03:9f:
00:fc:fc:3e:06:c5:cd:68:81:1b:c5:e4:99:d7:fe:
43:ca:10:84:d0:16:8f:c8:30:00:e7:c9:65:4c:8b:
0d:43:12:d3:bf:3c:e6:41:73:66:c1:f2:0d:5c:45:
56:77:5a:4b:f1:29:c6:fb:4d:44:4e:e9:a6:a7:ad:
cb:37:65:d9:ad:c4:1c:ec:f8:e8:16:09:71:6f:95:
d6:7a:29:de:9a:05:66:bf:6d:2d:d5:ad:4d:3c:0f:
d9:73:09:7d:d4:66:6e:3e:1f:c1:6b:a5:09:d4:51:
4c:4e:c1:80:5c:d0:dc:3c:cc:80:5c:d2:5d:d9:c1:
1f:23:b7:bb:33:26:82:d6:c2:8c:74:38:1d:ec:5b:
62:5a:bc:c9:57:ee:df:34:ce:17:d2:64:e9:1d:a8:
0c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D6:4F:0F:CD:E5:A9:71:53:97:A1:CC:F6:72:30:22:B9:F6:08:B9
X509v3 Authority Key Identifier:
keyid:6E:83:10:66:EA:8F:E2:0B:06:7A:13:60:06:B7:AF:90:66:33:84:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b7:8c:6c:a6:02:26:1e:05:4b:a1:76:d1:07:4b:44:82:ec:
2f:6b:a6:c3:98:c4:ae:88:9b:4e:58:82:a2:25:2d:13:a7:b7:
46:a5:eb:df:52:1b:4e:3b:a9:f1:fd:f1:22:e9:64:02:6c:ae:
86:a0:f9:7d:87:f8:92:7d:95:20:6f:4f:58:0d:a0:2e:22:db:
23:d5:90:03:cf:16:a5:e8:1c:ee:6f:c2:b7:89:08:fe:5c:d6:
28:b7:b1:1b:2a:80:dc:f7:ba:aa:8a:71:72:19:66:f9:f7:51:
6f:0a:da:c3:21:dd:6b:1b:17:5a:d3:e3:e4:7e:f8:b0:b0:31:
6a:30:68:9d:79:15:25:44:06:99:c2:79:4c:11:42:82:f8:8e:
f8:a1:bc:f4:64:f9:32:29:22:10:fe:99:85:61:a7:f2:19:e6:
10:7f:a0:6e:64:33:04:7b:00:08:12:30:76:38:e2:d3:0d:b8:
8d:37:61:df:61:45:72:44:79:26:83:46:06:83:18:bb:f4:ca:
4c:cc:cf:50:65:5b:1d:90:6e:94:95:71:58:88:50:87:68:52:
de:2c:21:d8:3d:cc:17:be:da:04:48:f2:a2:f3:e7:a8:9a:0a:
fd:47:54:81:52:fc:74:96:76:87:16:b1:88:3e:46:91:71:bc:
23:26:a8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:35:54 2025 by rpki-client