Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
File: boMQZuqP4gsGehNgBrevkGYzhDs.mft (raw, json)
Hash identifier: GrnFdrdtguDdEmBXhEjC6N9GqoYH7nJId8Rp67fyOUI=
Subject key identifier: 50:A8:1E:A9:D3:E9:D6:F4:99:5D:B2:0C:69:53:D0:8E:D8:4D:6F:1E
Authority key identifier: 6E:83:10:66:EA:8F:E2:0B:06:7A:13:60:06:B7:AF:90:66:33:84:3B
Certificate issuer: /CN=6e831066ea8fe20b067a136006b7af906633843b
Certificate serial: 019750EAA1B1A5B00DFBE165AFF574BAC7FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
Manifest number: 1583
Signing time: Sun 08 Jun 2025 19:00:43 +0000
Manifest this update: Sun 08 Jun 2025 19:00:43 +0000
Manifest next update: Mon 09 Jun 2025 19:00:43 +0000
Files and hashes: 1: K0elnSjthwyDpqUrzqz0WWkS5i4.roa (hash: gy/lZpvudI4NuVtj5Cr7txBBixWEIa8xyvy8FV7O+jc=)
2: boMQZuqP4gsGehNgBrevkGYzhDs.crl (hash: 4aqfg+d4CQmg2GCq4QjppUB4CHIkvDcbGvCQJHuPcJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:ea:a1:b1:a5:b0:0d:fb:e1:65:af:f5:74:ba:c7:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e831066ea8fe20b067a136006b7af906633843b
Validity
Not Before: Jun 8 19:00:43 2025 GMT
Not After : Jun 9 19:00:43 2025 GMT
Subject: CN=50a81ea9d3e9d6f4995db20c6953d08ed84d6f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2c:82:fe:20:45:f3:a8:ab:53:a9:e4:60:29:
d8:64:23:16:21:40:6e:db:4b:e0:00:38:1b:50:7d:
44:96:45:f5:54:f4:05:66:93:09:54:cd:be:8d:a7:
46:f8:e9:eb:76:82:5b:d3:c2:cc:e7:01:72:20:4f:
79:7b:3d:14:ea:34:da:dc:03:a5:dc:1a:9e:65:19:
b5:fc:44:a9:a6:fb:e7:d3:d4:80:bf:53:76:b4:f9:
44:ab:6e:97:56:10:86:31:26:ba:c8:e6:9b:2e:a0:
98:ff:dc:35:b7:67:7a:f2:ed:0d:d9:43:d2:b8:06:
a0:4a:12:63:e6:1f:1f:7c:fc:23:7b:cd:15:61:cc:
25:d1:3c:7a:d6:b2:ef:e8:b1:4f:77:3b:51:23:ac:
3e:4c:c1:ae:a1:85:fb:81:eb:4c:40:da:45:e4:76:
f5:9b:bb:1b:04:96:9d:f6:dd:ff:7c:99:d9:65:e9:
11:9b:ae:5e:d8:59:f2:63:85:a1:5d:5d:f3:e8:1e:
37:63:b3:6c:44:6f:ab:08:84:ae:92:63:1b:ce:29:
46:ce:cb:98:ed:70:06:6d:01:80:31:bf:29:08:d4:
84:5b:a9:a5:41:31:e7:f7:86:73:96:ec:52:ed:f0:
33:5e:95:8b:67:1c:99:c0:3d:24:32:a0:b6:13:1b:
c8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A8:1E:A9:D3:E9:D6:F4:99:5D:B2:0C:69:53:D0:8E:D8:4D:6F:1E
X509v3 Authority Key Identifier:
keyid:6E:83:10:66:EA:8F:E2:0B:06:7A:13:60:06:B7:AF:90:66:33:84:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:4a:a9:11:88:86:4b:bf:72:5c:20:13:51:53:bb:ff:ac:ae:
e2:8c:2e:4e:77:03:65:9e:9c:eb:41:c8:96:a5:26:17:51:0b:
b4:f5:4d:71:0b:6d:49:f3:85:1e:40:ce:1d:db:0c:11:28:55:
89:fc:1d:ff:ef:4d:2f:d6:fc:8b:a3:c5:c7:5d:49:74:34:8b:
fb:a3:60:73:20:57:4d:39:eb:6c:cc:d8:4c:a1:d0:af:58:fc:
1a:85:a2:59:0d:5b:35:bd:a8:dc:38:ea:88:b4:dc:cf:ad:7f:
e5:c7:83:f3:26:cb:7c:d5:00:4e:50:71:dd:b9:47:ae:f8:c5:
4c:a8:c5:a4:1f:93:1c:c9:74:40:3f:a0:52:cb:89:dc:b7:76:
4e:2d:6b:a4:c3:37:48:d2:82:17:03:c0:17:9e:da:1b:1f:77:
d1:ef:b6:e3:eb:ee:1c:8e:ea:43:f5:89:4c:a3:9f:2d:3c:63:
1d:30:40:7a:28:05:64:b0:fb:26:4d:11:c9:40:54:14:01:8b:
c3:52:e9:6a:b4:27:4c:10:8e:57:b6:20:85:68:82:10:26:60:
77:ee:01:22:50:84:80:81:17:3f:11:80:56:5b:d9:ff:6c:62:
e0:a4:3e:03:7b:bd:1f:61:e3:89:f2:c9:0f:9b:5c:96:e4:08:
05:b6:80:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQ6qGxpbAN++Flr/V0usf8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODMxMDY2ZWE4ZmUyMGIwNjdhMTM2MDA2YjdhZjkwNjYz
Mzg0M2IwHhcNMjUwNjA4MTkwMDQzWhcNMjUwNjA5MTkwMDQzWjAzMTEwLwYDVQQD
Eyg1MGE4MWVhOWQzZTlkNmY0OTk1ZGIyMGM2OTUzZDA4ZWQ4NGQ2ZjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyyC/iBF86irU6nkYCnYZCMWIUBu
20vgADgbUH1ElkX1VPQFZpMJVM2+jadG+OnrdoJb08LM5wFyIE95ez0U6jTa3AOl
3BqeZRm1/ESppvvn09SAv1N2tPlEq26XVhCGMSa6yOabLqCY/9w1t2d68u0N2UPS
uAagShJj5h8ffPwje80VYcwl0Tx61rLv6LFPdztRI6w+TMGuoYX7getMQNpF5Hb1
m7sbBJad9t3/fJnZZekRm65e2FnyY4WhXV3z6B43Y7NsRG+rCISukmMbzilGzsuY
7XAGbQGAMb8pCNSEW6mlQTHn94ZzluxS7fAzXpWLZxyZwD0kMqC2ExvI0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCoHqnT6db0mV2yDGlT0I7YTW8eMB8GA1UdIwQY
MBaAFG6DEGbqj+ILBnoTYAa3r5BmM4Q7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9NUVp1cVA0Z3NHZWhOZ0JyZXZrR1l6aERzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9iZDE5ZmQtZjM2OS00MmJmLTkyNmYt
MmE0ZGQyM2EyZjlhLzEvYm9NUVp1cVA0Z3NHZWhOZ0JyZXZrR1l6aERzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9iZDE5ZmQtZjM2OS00MmJmLTkyNmYtMmE0ZGQyM2EyZjlh
LzEvYm9NUVp1cVA0Z3NHZWhOZ0JyZXZrR1l6aERzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKEqpEYiG
S79yXCATUVO7/6yu4owuTncDZZ6c60HIlqUmF1ELtPVNcQttSfOFHkDOHdsMEShV
ifwd/+9NL9b8i6PFx11JdDSL+6NgcyBXTTnrbMzYTKHQr1j8GoWiWQ1bNb2o3Djq
iLTcz61/5ceD8ybLfNUATlBx3blHrvjFTKjFpB+THMl0QD+gUsuJ3Ld2Ti1rpMM3
SNKCFwPAF57aGx930e+24+vuHI7qQ/WJTKOfLTxjHTBAeigFZLD7Jk0RyUBUFAGL
w1LparQnTBCOV7YghWiCECZgd+4BIlCEgIEXPxGAVlvZ/2xi4KQ+A3u9H2HjifLJ
D5tcluQIBbaA0Q==
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:30:26 2025 by rpki-client