Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft
File: bosCjRgnTSGnMWrqPMzpFYtU9IE.mft (raw, json)
Hash identifier: y1BnCjs9Smr/kzp5R5dB5SO1jmzX0YGYny9iZBjoFyM=
Subject key identifier: 27:DB:39:AC:B1:5D:41:C3:01:6C:38:09:D6:C7:EB:1F:41:5E:B1:8D
Authority key identifier: 6E:8B:02:8D:18:27:4D:21:A7:31:6A:EA:3C:CC:E9:15:8B:54:F4:81
Certificate issuer: /CN=6e8b028d18274d21a7316aea3ccce9158b54f481
Certificate serial: 019A72CA66839DD277D66EFA757602F38137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bosCjRgnTSGnMWrqPMzpFYtU9IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 12:00:58 +0000
Manifest this update: Tue 11 Nov 2025 12:00:58 +0000
Manifest next update: Wed 12 Nov 2025 12:00:58 +0000
Files and hashes: 1: WmIdnk_9nH4b99INea_I2KNfOsk.roa (hash: M5AL1LDO4kJuImuQDNFPsC6NQYMR6AeQGyLWZ0QYZSI=)
2: bosCjRgnTSGnMWrqPMzpFYtU9IE.crl (hash: 3VUTeFZr9TL5SjB3iYEgbxAH5n1EXel5juhq7nEn3Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bosCjRgnTSGnMWrqPMzpFYtU9IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:66:83:9d:d2:77:d6:6e:fa:75:76:02:f3:81:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e8b028d18274d21a7316aea3ccce9158b54f481
Validity
Not Before: Nov 11 12:00:58 2025 GMT
Not After : Nov 12 12:00:58 2025 GMT
Subject: CN=27db39acb15d41c3016c3809d6c7eb1f415eb18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cb:c9:c5:1b:00:1f:55:57:9f:45:a2:b4:7a:
00:b5:db:3a:c1:73:b5:94:7f:cf:c7:31:cc:bc:4c:
b9:62:80:38:40:3c:40:63:9b:9e:86:2b:06:1b:4e:
96:05:37:23:a6:98:91:82:1c:b6:1e:7d:5b:9c:71:
dc:4e:78:6e:24:d2:fb:45:7e:28:99:82:c1:e0:76:
c4:04:7c:e9:5c:ec:71:7d:98:0e:33:a6:91:8d:63:
1d:3c:bc:78:d8:a0:bc:35:e2:fb:47:13:74:7e:ee:
d7:88:6d:00:fb:b3:a4:df:fb:f1:59:bb:8e:89:69:
be:8c:c0:57:88:78:90:77:85:35:c3:f8:08:e0:dd:
72:17:a4:6b:da:07:f9:45:c5:c2:18:fe:0a:b3:ec:
53:1c:67:7b:96:c4:19:7c:ac:fe:54:79:55:8f:5c:
55:c8:db:75:5a:15:1b:c6:fb:f7:4f:41:6a:eb:37:
90:86:51:00:2a:9f:25:82:c9:89:12:72:09:74:30:
33:d8:5a:84:fa:9e:04:f8:5b:e9:70:49:09:11:3c:
61:0d:fc:7b:49:8e:3b:2f:e6:b3:e1:ba:88:da:b2:
6c:18:81:ef:d3:90:cf:ce:36:3d:17:a5:3f:39:0c:
64:3b:83:6b:13:94:03:d1:04:cc:28:0b:d5:c3:94:
9c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:DB:39:AC:B1:5D:41:C3:01:6C:38:09:D6:C7:EB:1F:41:5E:B1:8D
X509v3 Authority Key Identifier:
keyid:6E:8B:02:8D:18:27:4D:21:A7:31:6A:EA:3C:CC:E9:15:8B:54:F4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bosCjRgnTSGnMWrqPMzpFYtU9IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:dd:83:67:ba:76:04:f7:ef:5e:5b:26:29:60:cd:c9:7b:21:
3e:ea:d2:32:c8:11:4a:7e:de:d7:5c:9e:f6:51:f5:97:08:07:
cb:35:01:8f:56:70:3f:bc:55:f4:50:4c:5e:d6:49:5f:44:c5:
82:d7:77:82:ae:0e:65:ae:c9:8b:60:4c:fe:63:7f:df:d4:86:
73:58:af:e8:5e:b2:94:d3:84:32:e6:36:82:28:c1:19:e9:ff:
fe:58:3c:25:2b:13:95:8a:be:b6:a5:42:b0:c7:65:ef:43:1f:
5a:34:07:35:92:d7:de:26:48:8e:b3:8f:7f:4d:d2:88:bf:cd:
bf:a6:b6:05:e6:41:c5:ea:88:aa:6e:4f:48:15:c4:4b:5d:21:
8b:58:f1:11:01:b6:da:d9:34:6a:7f:8a:48:6e:79:ae:db:21:
dd:92:a5:6c:58:57:ca:c0:ec:20:86:e1:1f:07:65:2c:8c:07:
63:dd:86:63:ac:5a:3f:ac:a2:d9:a2:32:07:44:12:7a:ba:9e:
48:0c:a6:70:48:61:a0:1a:1b:59:01:81:7f:df:59:89:57:2c:
ad:b8:6c:01:08:14:c9:fc:62:b4:22:ce:c8:b2:91:82:95:8c:
b1:17:8b:41:54:8e:1a:4c:48:e5:f5:a7:1b:05:af:33:f1:8f:
ab:85:d0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:18:28 2025 by rpki-client