Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
File: BoekrKWB2OvN_iS2Xx5woS8omng.mft (raw, json)
Hash identifier: UqTU7OFK/RmtmGNrCYGLwelOaSzQjKTr/WvRoYvhzPU=
Subject key identifier: 37:6F:E0:6C:0D:38:C3:CE:FC:CF:6E:E0:06:BF:B8:18:3E:1C:77:70
Authority key identifier: 06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78
Certificate issuer: /CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78
Certificate serial: 01974E208A9AD59DC0D4E488B4CF2784EE03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
Manifest number: 0738
Signing time: Sun 08 Jun 2025 06:00:44 +0000
Manifest this update: Sun 08 Jun 2025 06:00:44 +0000
Manifest next update: Mon 09 Jun 2025 06:00:44 +0000
Files and hashes: 1: BoekrKWB2OvN_iS2Xx5woS8omng.crl (hash: fNwUe7w3/UFjNkz0Z3h9hYrT2LMf0wU7wGNMVM9tRVU=)
2: JTkFn5E31NEi0T3jHFsEReuBpS0.roa (hash: kKlmo0yCwDoRfIckDgl+hlLcGOfvby6dj08uXZBlD8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:8a:9a:d5:9d:c0:d4:e4:88:b4:cf:27:84:ee:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78
Validity
Not Before: Jun 8 06:00:44 2025 GMT
Not After : Jun 9 06:00:44 2025 GMT
Subject: CN=376fe06c0d38c3cefccf6ee006bfb8183e1c7770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:78:5a:03:7d:bf:f0:3c:47:ee:85:fd:22:29:
27:9e:24:22:88:13:ff:b8:f2:5d:cc:3e:5e:4f:9d:
5f:c5:45:50:b2:31:7d:a2:ad:12:37:81:d9:fc:61:
2a:e6:fa:ba:d7:64:f0:8e:ff:7f:c4:4a:36:0c:bf:
80:f8:ce:4a:39:e3:b0:7f:b5:0a:61:00:b7:04:fb:
5d:8c:c5:39:ed:06:d7:20:e3:c2:81:d1:1e:9f:ad:
8e:5c:08:3b:32:9f:3b:15:50:8e:45:48:0d:1b:2d:
66:24:9c:ed:6a:bb:e2:3b:32:2a:ec:73:88:21:6c:
5d:e7:9b:11:f4:ef:b3:07:69:b5:5d:1e:bc:64:2c:
20:65:a2:81:4a:fe:32:dc:26:7f:00:c4:9c:83:7a:
70:c8:1b:a3:0e:87:0d:25:5f:0f:62:95:23:dd:fd:
3b:4f:68:a1:c9:11:9c:eb:44:cc:53:65:f4:37:4b:
23:63:57:b4:7f:e4:18:e6:ed:51:8a:e8:cb:d8:bf:
a1:40:48:6a:30:aa:20:30:30:f9:ab:ef:90:13:e3:
d5:c2:d7:2e:52:fd:1a:c8:1c:bc:15:4b:50:4d:80:
3a:ad:9e:5f:4c:4e:37:7a:5c:93:91:e8:bb:26:b9:
00:ce:c2:26:a1:fd:73:01:85:65:ce:da:62:06:10:
e7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6F:E0:6C:0D:38:C3:CE:FC:CF:6E:E0:06:BF:B8:18:3E:1C:77:70
X509v3 Authority Key Identifier:
keyid:06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:3b:9e:04:02:e2:0b:dd:5f:4d:48:95:e6:6c:ca:0a:40:65:
e9:76:78:7b:e0:5d:21:39:de:2a:b3:97:e7:bf:17:47:15:c9:
6f:7a:ad:7f:9c:69:49:02:e8:6d:a5:07:5f:81:a8:e3:1b:a6:
48:e4:e1:a5:83:31:1a:35:3c:77:78:75:5b:cf:7b:e1:a6:b1:
2e:bd:3c:ce:0b:d0:a8:3f:13:09:19:94:37:83:f7:e7:8e:21:
10:6b:e2:cb:2b:60:20:bf:33:c2:7d:9a:da:f9:0c:74:ac:98:
f5:71:bf:6c:c4:5e:52:fd:2f:b8:a6:4a:b8:42:50:81:9a:46:
ac:f4:99:d3:93:8a:0d:34:ba:91:82:d6:7e:b0:58:66:4b:7c:
ed:fa:6f:6f:d8:a6:49:e5:fe:fe:82:8f:fe:fd:34:94:cc:a8:
8c:8d:82:20:c0:8e:c3:11:f1:c2:cf:95:d4:50:03:7e:3e:0b:
ff:89:d6:88:65:e3:4e:52:00:96:f6:54:be:74:40:8a:b3:fb:
3a:a3:7b:d1:fa:7b:da:a7:c0:7a:04:03:ac:04:eb:9c:e1:4c:
58:22:57:c9:1f:a1:5e:0d:2e:1c:d9:28:b7:45:e9:92:d0:4a:
ab:22:cf:5b:17:91:a8:97:4d:12:b3:fe:85:78:f3:8c:1f:8b:
c1:ea:2c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:17:20 2025 by rpki-client