Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
File: BoekrKWB2OvN_iS2Xx5woS8omng.mft (raw, json)
Hash identifier: qeicupPETU8MhN04aeEJU4RMjVjQNNphNnrvD1dVXJY=
Subject key identifier: 4B:F3:B5:9D:8B:7C:D5:D3:0D:1F:42:62:3B:B8:D6:01:B1:9F:36:0E
Authority key identifier: 06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78
Certificate issuer: /CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78
Certificate serial: 019A0591E5E1981DA527F57D3AF6F81EA1BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
Manifest number: 08A0
Signing time: Tue 21 Oct 2025 07:00:38 +0000
Manifest this update: Tue 21 Oct 2025 07:00:38 +0000
Manifest next update: Wed 22 Oct 2025 07:00:38 +0000
Files and hashes: 1: BoekrKWB2OvN_iS2Xx5woS8omng.crl (hash: fzUTxf3IRJvu8lJ5x2ACUe68DozTkKLWJo+t5uup2SQ=)
2: JTkFn5E31NEi0T3jHFsEReuBpS0.roa (hash: kKlmo0yCwDoRfIckDgl+hlLcGOfvby6dj08uXZBlD8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:91:e5:e1:98:1d:a5:27:f5:7d:3a:f6:f8:1e:a1:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78
Validity
Not Before: Oct 21 07:00:38 2025 GMT
Not After : Oct 22 07:00:38 2025 GMT
Subject: CN=4bf3b59d8b7cd5d30d1f42623bb8d601b19f360e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1b:d6:05:8a:69:8a:24:b7:7b:ff:d0:8b:74:
4b:d8:b6:27:88:71:91:41:c7:cb:d3:7f:57:b8:d4:
50:7a:dc:42:c9:1b:10:8c:aa:8c:52:9d:e4:5e:64:
92:1a:0f:fd:23:ce:d5:5c:6b:1f:9a:2d:ef:7a:4c:
f8:72:5b:b2:04:e9:bf:14:f3:f0:a1:79:09:b0:d2:
e3:00:e9:ea:96:69:68:43:23:e7:c1:87:cc:0d:99:
7a:10:12:1d:43:b0:f0:9e:c4:f9:48:01:bb:3f:8f:
d3:33:d8:06:da:a4:50:63:fe:94:5d:c1:01:e4:14:
6e:08:b2:61:ef:46:b8:05:05:95:5a:6d:dd:74:fd:
9d:1d:82:da:2f:8a:2e:52:dc:70:cf:9d:03:58:29:
af:ff:41:20:7e:dd:ab:10:79:93:3c:24:dd:86:bb:
6f:8d:53:6b:bf:03:12:cb:f9:5d:2c:91:4d:a6:da:
ca:48:6e:f3:6b:0d:bf:e3:10:51:83:41:12:0e:dc:
96:65:12:29:81:6a:ad:1c:91:67:56:3e:fb:65:c9:
38:f6:3e:e1:29:ed:ef:5f:a1:4d:f2:95:68:38:1e:
cf:48:7a:ad:b1:f0:0e:5f:f8:51:fc:eb:1a:18:5e:
a3:a5:31:0b:86:7c:4e:35:ad:9b:0d:ae:8f:c1:d9:
c5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F3:B5:9D:8B:7C:D5:D3:0D:1F:42:62:3B:B8:D6:01:B1:9F:36:0E
X509v3 Authority Key Identifier:
keyid:06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:a3:70:43:69:83:71:6a:8f:b2:41:05:c2:66:47:bd:6a:42:
58:2c:4e:4e:d5:4f:b9:30:b1:b8:68:69:1a:89:90:9b:bc:02:
d5:3a:80:8b:a4:98:af:34:9b:25:1f:b0:fe:9b:d9:cc:53:37:
01:5c:79:a0:c2:87:50:d5:59:9e:17:ce:a7:47:59:ac:61:0f:
c7:f2:5a:c0:ff:43:03:ba:02:b2:ca:bb:eb:c5:00:21:35:1d:
67:c5:10:9c:a5:52:d4:c7:aa:51:19:8c:62:cb:b0:b1:61:3d:
af:4f:85:c4:95:d9:93:0b:3c:b2:48:a4:2b:b6:d5:ac:fa:bc:
30:61:8a:35:13:ef:2c:4b:76:4d:bc:ed:bc:2a:74:c3:3d:1a:
1e:45:73:3c:6b:41:9b:34:f0:8c:9a:c7:3c:79:33:07:4b:4c:
9c:0e:d3:b7:a4:0b:98:99:97:53:ca:c1:74:7e:6a:04:57:ac:
73:06:23:33:e4:87:81:b7:2d:70:52:58:24:1e:70:72:65:58:
87:13:15:a9:19:9a:10:ec:84:9a:c4:a4:f6:28:20:71:3c:28:
79:6e:d4:8e:f1:ee:da:28:f9:da:92:33:61:b0:88:b3:09:da:
80:42:10:cf:27:c4:2a:33:dc:d9:3b:da:9a:c9:83:8b:9c:15:
8c:a9:61:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 13:27:02 2025 by rpki-client