Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/boByUGD_SztVrN5qOXwx7ql8I3w.mft
File: boByUGD_SztVrN5qOXwx7ql8I3w.mft (raw, json)
Hash identifier: awiQ5bKNfjdei4dD/1JfZuHHAft1L0t/8V+cQoX6wGg=
Subject key identifier: A1:4F:AD:54:23:18:5C:C2:D2:DC:01:C7:ED:3A:66:3E:B8:69:E2:C9
Authority key identifier: 6E:80:72:50:60:FF:4B:3B:55:AC:DE:6A:39:7C:31:EE:A9:7C:23:7C
Certificate issuer: /CN=6e80725060ff4b3b55acde6a397c31eea97c237c
Certificate serial: 019A7225835F3FE19D9B7863DD1F6EF03A28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boByUGD_SztVrN5qOXwx7ql8I3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/boByUGD_SztVrN5qOXwx7ql8I3w.mft
Manifest number: 0A1D
Signing time: Tue 11 Nov 2025 09:00:52 +0000
Manifest this update: Tue 11 Nov 2025 09:00:52 +0000
Manifest next update: Wed 12 Nov 2025 09:00:52 +0000
Files and hashes: 1: G5hDxevfZCHIynIb7kl9zkkafFo.roa (hash: 8zV/uIn4iieWxxlFcNsO96ew34Z1C3Yh+YZ7EOCmJ5k=)
2: boByUGD_SztVrN5qOXwx7ql8I3w.crl (hash: 8AqDAgekWjUPIKoLUyEknLqvVbi1UPRopo1UmTvHGaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/boByUGD_SztVrN5qOXwx7ql8I3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/boByUGD_SztVrN5qOXwx7ql8I3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/boByUGD_SztVrN5qOXwx7ql8I3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:83:5f:3f:e1:9d:9b:78:63:dd:1f:6e:f0:3a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e80725060ff4b3b55acde6a397c31eea97c237c
Validity
Not Before: Nov 11 09:00:52 2025 GMT
Not After : Nov 12 09:00:52 2025 GMT
Subject: CN=a14fad5423185cc2d2dc01c7ed3a663eb869e2c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e4:b6:fe:4b:d2:17:3f:c6:03:43:52:05:ab:
a3:77:29:cb:45:52:5f:be:3e:a6:5f:5c:f6:39:ce:
94:9a:ec:9f:47:c8:d7:f7:72:aa:e6:8d:c6:97:76:
6a:2a:bd:55:67:de:05:ed:0f:be:c6:24:ca:90:8c:
4c:20:24:b8:98:dc:47:5e:d8:ce:5f:63:d9:8f:ab:
ad:a3:4b:df:4c:51:31:29:c5:a5:81:9c:c2:bc:b1:
81:c5:6f:2d:87:70:e3:e7:fd:32:f8:40:21:43:41:
52:ba:8b:88:52:6b:50:22:bb:28:c7:f4:0a:88:c4:
76:0d:ce:00:c7:a2:4b:cc:ce:05:80:78:8b:69:48:
9b:ef:d4:36:07:34:ad:94:b5:cf:00:d1:a7:a3:88:
19:ce:52:42:e6:0f:7a:fd:27:9b:d2:e3:53:7c:66:
e0:2e:e7:88:52:ff:ac:75:ee:62:21:17:32:b9:bd:
42:54:11:2c:32:5c:0a:9b:6e:b0:37:c4:f9:9d:34:
65:c2:33:a1:94:47:e4:4e:5b:f3:b7:48:f5:2e:12:
2f:a6:65:8b:40:31:a8:82:21:17:8b:66:fc:46:21:
16:6c:49:b4:56:e5:5f:31:cf:0b:81:d3:73:14:bc:
5b:6d:ad:96:3e:10:6f:7f:32:f8:2f:20:dc:e8:2e:
a6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4F:AD:54:23:18:5C:C2:D2:DC:01:C7:ED:3A:66:3E:B8:69:E2:C9
X509v3 Authority Key Identifier:
keyid:6E:80:72:50:60:FF:4B:3B:55:AC:DE:6A:39:7C:31:EE:A9:7C:23:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boByUGD_SztVrN5qOXwx7ql8I3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/boByUGD_SztVrN5qOXwx7ql8I3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/boByUGD_SztVrN5qOXwx7ql8I3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:eb:b7:a0:2a:84:0f:f2:37:6f:58:90:82:e2:7e:16:91:41:
1a:11:f6:1b:5e:19:25:a7:bd:40:97:c7:cb:fe:97:ed:5b:a8:
5b:d5:ec:d4:5a:25:de:83:3b:66:08:5c:c1:e1:75:f4:e3:b1:
6b:0c:93:45:84:25:55:9c:c3:db:1d:6e:d7:a8:43:06:c6:cc:
a6:e9:64:de:f5:2a:26:d7:5c:2e:d7:64:15:4e:62:45:a3:50:
27:aa:05:80:c6:a5:bb:5b:ff:f0:d0:74:6a:19:1f:14:9f:ae:
76:30:97:da:a0:6a:a3:17:3d:8e:88:e0:4d:04:a5:7f:67:ab:
23:3d:15:f0:e4:58:d7:ce:e3:2f:32:56:99:15:68:e5:b2:e6:
5e:c6:8a:b7:7f:16:7e:94:2d:66:08:f3:06:22:ad:95:0b:f0:
7a:c9:18:24:39:08:a1:0b:ea:aa:cc:fb:f2:4e:84:7f:88:36:
96:c9:98:27:c0:fb:98:d5:b3:18:e8:ce:f0:4e:4f:82:17:44:
1d:3f:3b:54:ff:0e:d5:cf:58:02:f1:af:b0:60:af:50:3c:ca:
3c:a8:88:59:01:22:16:6a:48:13:ee:9e:5e:44:13:b7:70:bb:
24:b2:2d:8f:c2:cd:dd:57:b4:93:c7:08:e6:3f:0c:da:bb:42:
66:ac:d8:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJYNfP+Gdm3hj3R9u8DooMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODA3MjUwNjBmZjRiM2I1NWFjZGU2YTM5N2MzMWVlYTk3
YzIzN2MwHhcNMjUxMTExMDkwMDUyWhcNMjUxMTEyMDkwMDUyWjAzMTEwLwYDVQQD
EyhhMTRmYWQ1NDIzMTg1Y2MyZDJkYzAxYzdlZDNhNjYzZWI4NjllMmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuS2/kvSFz/GA0NSBaujdynLRVJf
vj6mX1z2Oc6UmuyfR8jX93Kq5o3Gl3ZqKr1VZ94F7Q++xiTKkIxMICS4mNxHXtjO
X2PZj6uto0vfTFExKcWlgZzCvLGBxW8th3Dj5/0y+EAhQ0FSuouIUmtQIrsox/QK
iMR2Dc4Ax6JLzM4FgHiLaUib79Q2BzStlLXPANGno4gZzlJC5g96/Seb0uNTfGbg
LueIUv+sde5iIRcyub1CVBEsMlwKm26wN8T5nTRlwjOhlEfkTlvzt0j1LhIvpmWL
QDGogiEXi2b8RiEWbEm0VuVfMc8LgdNzFLxbba2WPhBvfzL4LyDc6C6mYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKFPrVQjGFzC0twBx+06Zj64aeLJMB8GA1UdIwQY
MBaAFG6AclBg/0s7Vazeajl8Me6pfCN8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9CeVVHRF9TenRWck41cU9Yd3g3cWw4STN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS83YTZiZDktNGJlOS00MDJiLTg1MzYt
NTMzMzVkYTBjZmQzLzEvYm9CeVVHRF9TenRWck41cU9Yd3g3cWw4STN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS83YTZiZDktNGJlOS00MDJiLTg1MzYtNTMzMzVkYTBjZmQz
LzEvYm9CeVVHRF9TenRWck41cU9Yd3g3cWw4STN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmOu3oCqE
D/I3b1iQguJ+FpFBGhH2G14ZJae9QJfHy/6X7VuoW9Xs1Fol3oM7ZghcweF19OOx
awyTRYQlVZzD2x1u16hDBsbMpulk3vUqJtdcLtdkFU5iRaNQJ6oFgMalu1v/8NB0
ahkfFJ+udjCX2qBqoxc9jojgTQSlf2erIz0V8ORY187jLzJWmRVo5bLmXsaKt38W
fpQtZgjzBiKtlQvweskYJDkIoQvqqsz78k6Ef4g2lsmYJ8D7mNWzGOjO8E5PghdE
HT87VP8O1c9YAvGvsGCvUDzKPKiIWQEiFmpIE+6eXkQTt3C7JLItj8LN3Ve0k8cI
5j8M2rtCZqzYCg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:48 2025 by rpki-client