Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
File: BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft (raw, json)
Hash identifier: SlfcpAbggl3tE43K/xw72IglzH8lwt3C0Dv75C90eUU=
Subject key identifier: A4:83:ED:18:A2:E5:A6:3D:C5:0F:F2:6C:F4:C9:B4:33:F3:DF:0D:58
Authority key identifier: 04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47
Certificate issuer: /CN=04e1831c9eef1b795437fcbd43e295705a1a0547
Certificate serial: 019A1CBE23F895A449A4B3DC39D74DB338FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
Manifest number: 13E2
Signing time: Sat 25 Oct 2025 19:00:14 +0000
Manifest this update: Sat 25 Oct 2025 19:00:14 +0000
Manifest next update: Sun 26 Oct 2025 19:00:14 +0000
Files and hashes: 1: BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl (hash: 6rxttisA7BZcgmkspt6zOEmwCI60/PvUH6VWCqBOeAc=)
2: Y8uuAfRYwx-prudgnWgSWZq97Sw.roa (hash: tQZOFDuCS8oLjLePLd8o7D+wQ3I3iTNhsHY9sfMRza8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:be:23:f8:95:a4:49:a4:b3:dc:39:d7:4d:b3:38:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e1831c9eef1b795437fcbd43e295705a1a0547
Validity
Not Before: Oct 25 19:00:14 2025 GMT
Not After : Oct 26 19:00:14 2025 GMT
Subject: CN=a483ed18a2e5a63dc50ff26cf4c9b433f3df0d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fc:3b:50:58:7b:1b:80:52:ba:d9:89:ec:a7:
7b:2e:fd:c9:56:50:04:53:d5:36:0e:40:0a:df:9e:
b6:ea:34:10:b6:8c:64:ed:44:18:33:4b:0a:aa:5f:
6e:ab:f3:7e:8b:5c:9b:09:f2:5a:9e:c8:a5:4c:29:
98:73:27:21:a6:b0:ef:c4:42:86:89:8c:bf:ff:e9:
5e:a7:1e:c5:69:e8:a1:2c:69:93:89:e8:c2:5e:c4:
d2:ba:7d:5f:0b:3b:88:e1:41:aa:6a:83:6f:92:21:
6f:3f:57:44:95:3f:e1:60:97:16:1d:7f:5f:75:ad:
8e:d9:0f:1d:b4:b6:05:11:3c:e0:c9:b3:45:72:99:
92:16:9e:89:d5:2e:c3:b4:5f:0c:08:43:9c:0c:80:
b7:09:8c:5b:56:a9:3f:68:56:7f:ac:ac:2b:f6:bd:
36:94:09:dc:1b:a8:d2:35:cb:73:42:e2:9f:b4:fe:
66:df:ce:66:79:a2:a8:97:26:2b:d2:a7:c8:e8:a9:
ea:1a:fe:83:39:57:76:23:14:5e:1c:cc:14:1e:e3:
d5:1a:fc:d1:4e:bf:67:fa:ac:5c:97:9e:5d:c0:cf:
e3:5e:78:ea:c6:70:5d:97:b2:a1:ad:20:bb:a9:39:
e8:76:67:1c:44:a2:6a:0b:20:d5:0f:23:ee:96:be:
f7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:83:ED:18:A2:E5:A6:3D:C5:0F:F2:6C:F4:C9:B4:33:F3:DF:0D:58
X509v3 Authority Key Identifier:
keyid:04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b2:47:f2:7c:2c:7c:b9:79:ff:89:8b:81:d5:c5:85:7d:90:
53:ae:b4:21:99:59:2a:d3:d5:ea:3d:56:49:67:6f:ad:eb:10:
27:86:00:84:a4:a9:d1:fe:4a:1f:d6:87:6b:19:89:55:fc:ff:
c4:3f:6c:f6:61:1f:8c:b6:6f:21:40:fd:f6:5b:32:d7:1a:0d:
ef:2e:86:45:5b:ed:2f:15:cd:18:34:13:b7:77:77:b8:f8:db:
5f:bf:25:26:91:59:3a:c2:ad:32:1f:d4:09:fe:41:ad:1d:a8:
b3:47:24:27:8d:c9:e8:79:8d:b5:27:75:a5:d3:14:26:43:e4:
81:54:e1:92:e4:81:de:e2:de:da:2f:d6:c0:86:5a:a1:3f:c8:
d2:c1:80:f6:02:c5:9d:ce:6c:5a:f3:9b:e4:11:c4:ca:74:1d:
17:fd:51:89:23:3f:03:75:bf:99:93:3a:11:95:20:1d:6d:88:
7d:d3:fa:6b:58:5a:5f:70:5b:33:a0:a2:fa:98:df:05:34:5d:
0d:2f:db:f9:fa:f9:4d:8f:77:0e:cf:04:87:d7:d5:a7:49:b2:
e4:cc:8f:d4:40:fb:70:fa:a8:ee:be:6c:34:fb:01:46:ca:7c:
a0:fb:2b:90:2b:83:c2:8f:64:15:e3:6f:01:eb:59:24:e1:61:
84:8f:f9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 03:17:25 2025 by rpki-client