
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
File: BOZbg9ITFfi6dXjoi984Eyld3go.mft (raw, json)
Hash identifier: HlGwDk/aqnfaZag5uV5lnHyz92TZHoa1f+R35SXh0wQ=
Subject key identifier: 55:84:63:37:43:13:64:D1:BE:32:B0:AB:C1:68:5C:B6:ED:A4:8A:83
Authority key identifier: 04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A
Certificate issuer: /CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
Certificate serial: 019A71134C3BC9A7D692C0ACE229748340C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
Manifest number: 0E3B
Signing time: Tue 11 Nov 2025 04:01:21 +0000
Manifest this update: Tue 11 Nov 2025 04:01:21 +0000
Manifest next update: Wed 12 Nov 2025 04:01:21 +0000
Files and hashes: 1: BOZbg9ITFfi6dXjoi984Eyld3go.crl (hash: 2TmutPpp+CcM0pCJ2/kvTy32XL+PkHdpZhTMBAicjR0=)
2: E9Q22GIdMyoqpYS3_A3Sv4bLQrU.roa (hash: U3UIBvBEgw3rK3s+0sDC6RFjCDwgftn5pIAbSSrZ/Fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:4c:3b:c9:a7:d6:92:c0:ac:e2:29:74:83:40:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
Validity
Not Before: Nov 11 04:01:21 2025 GMT
Not After : Nov 12 04:01:21 2025 GMT
Subject: CN=55846337431364d1be32b0abc1685cb6eda48a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cf:77:ed:d1:37:07:e2:46:b4:a8:b8:96:24:
8b:83:1b:bd:3e:61:04:8f:fb:a2:62:6b:ad:bb:57:
32:f4:28:d8:9f:65:ff:47:0b:7d:3a:76:5c:d9:42:
b3:03:31:39:b5:b9:b8:6c:a7:47:76:f9:ff:fe:82:
4f:b3:07:74:8b:ce:dd:cf:bc:c5:49:e8:27:64:07:
a2:85:90:dd:63:f6:d9:38:18:65:e5:45:2a:47:0f:
f0:bb:3a:b3:cb:60:63:98:ce:ba:86:a4:c0:c1:e8:
8f:77:d0:a3:be:61:3c:08:7f:dd:f7:d5:7a:57:7f:
66:93:f2:0d:52:10:fc:46:72:95:12:d2:2f:c9:dd:
34:4d:00:1b:c7:3c:87:4c:ed:ba:6d:04:3b:d0:d9:
58:63:33:13:d6:c0:6e:92:d2:bd:9f:c1:3f:e3:1f:
09:1e:0c:7f:19:85:0c:18:10:fb:ab:8c:13:25:27:
d4:bb:f5:6c:bd:af:a6:3a:df:70:f2:a7:a1:83:b5:
d6:dd:db:dd:78:13:a5:c0:df:25:02:7c:47:55:a7:
80:49:e1:c4:ff:86:dd:d0:62:2f:16:56:74:3c:ae:
76:d8:e7:56:ca:79:7d:d8:ce:9b:c8:84:35:cb:8b:
49:3f:f2:62:53:f5:1e:b4:59:a3:bb:29:8a:e1:96:
af:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:84:63:37:43:13:64:D1:BE:32:B0:AB:C1:68:5C:B6:ED:A4:8A:83
X509v3 Authority Key Identifier:
keyid:04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:5b:c1:7e:70:9a:d3:f5:79:6a:5c:e9:39:e7:0a:f2:8b:b8:
4a:25:eb:10:42:d6:0b:46:cc:24:2d:10:ba:ca:41:3f:70:6a:
21:a7:27:8a:de:7f:2d:2a:c3:17:be:d1:13:d9:8a:3d:83:b5:
a2:d8:df:0c:3a:98:0b:db:53:9d:5c:b0:3d:d2:bc:fd:e7:46:
68:f8:6a:dd:33:cb:0d:28:40:29:07:5e:66:a2:b2:87:72:0a:
e3:aa:06:7f:b6:42:c3:1d:e4:be:63:ab:9b:f8:e1:80:a7:e1:
3e:48:b5:78:2e:e0:be:1d:80:c5:89:b3:8b:e9:d8:47:18:fa:
b6:b2:97:8f:cc:dd:25:fe:fb:6d:5b:4a:4a:5d:90:53:56:e9:
3a:e9:2b:5c:3f:06:57:09:66:c8:91:1a:1d:83:66:ba:c7:1a:
63:5e:f5:99:4c:3c:6b:59:e6:ab:84:a3:9a:08:fb:47:08:59:
b2:43:df:52:fa:35:7b:2d:4b:05:75:19:34:37:84:15:0b:1e:
2f:05:b2:59:2b:11:25:e1:46:b7:19:31:df:dc:25:f2:10:b3:
0c:de:04:d4:c4:43:5e:09:3f:59:e3:6c:38:b5:0c:0e:d6:e2:
66:3d:7e:e9:8f:b8:de:02:bf:90:22:76:04:5f:70:86:a4:3c:
6a:d9:4f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:23 2025 by rpki-client