Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
File: boSxI5O_yw5tbzLMlcDXEXT8mzA.mft (raw, json)
Hash identifier: tNxn3yZED0Kkmb+2kKo/oeQFIO8o+sN6lSh7vG/lYCU=
Subject key identifier: E1:B7:08:86:1A:B9:71:BF:43:50:BF:48:03:FC:B2:21:9B:23:2A:00
Authority key identifier: 6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30
Certificate issuer: /CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30
Certificate serial: 019A5119C163187A044A931E7C31B1AD9E49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 23:00:33 +0000
Manifest this update: Tue 04 Nov 2025 23:00:33 +0000
Manifest next update: Wed 05 Nov 2025 23:00:33 +0000
Files and hashes: 1: Ws5DKPvqbwWmiknqYjYd59bVY2o.roa (hash: YBEW16WVtIIoX5bJxlmYLW0GT3fXf0v/AYf7w0McGNc=)
2: boSxI5O_yw5tbzLMlcDXEXT8mzA.crl (hash: DGiwFKUGZ78ZnyjKoH7P7xpnn3SMHBPnkkOo+YFdt08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 23:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:c1:63:18:7a:04:4a:93:1e:7c:31:b1:ad:9e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30
Validity
Not Before: Nov 4 23:00:33 2025 GMT
Not After : Nov 5 23:00:33 2025 GMT
Subject: CN=e1b708861ab971bf4350bf4803fcb2219b232a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:36:d7:2b:85:90:b3:8b:36:90:51:6e:09:c2:
32:ac:b3:60:7e:4f:47:a9:45:2c:0b:a3:e4:48:de:
95:c9:02:91:9f:37:78:d3:da:dd:c9:b1:33:f4:7a:
43:27:ae:03:f5:de:4b:b2:7c:45:d6:b3:c5:a3:94:
cc:ee:1c:24:5e:bf:ce:df:19:57:c9:30:66:35:bb:
1b:de:ad:a6:e5:6e:d7:95:8d:f1:05:96:b9:26:fb:
f4:bd:82:95:b2:ea:3d:80:b0:72:f1:35:c7:fb:60:
75:a9:ca:aa:13:6a:34:34:66:d2:16:7d:ba:fb:19:
f8:76:7d:05:04:72:2f:57:c1:90:58:a9:e9:83:7c:
ad:6a:17:6b:13:3b:43:11:97:4a:52:cf:5f:76:c7:
89:d4:d1:d9:67:01:d8:32:33:4f:d8:bf:87:53:e6:
18:9e:49:fa:57:0b:b7:66:6a:a4:33:cb:5b:20:da:
37:90:5a:24:65:92:d3:4a:a6:bc:e8:87:37:04:44:
df:97:e1:e6:8c:22:3d:0b:a3:9d:8e:e8:0b:cf:8f:
f3:d2:03:22:15:32:bc:fa:ae:12:63:4a:48:47:16:
b1:fd:66:ab:75:39:73:6d:75:e4:33:0d:f2:e5:55:
80:71:99:c6:58:65:aa:4a:d0:6d:35:80:8a:de:c9:
6a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B7:08:86:1A:B9:71:BF:43:50:BF:48:03:FC:B2:21:9B:23:2A:00
X509v3 Authority Key Identifier:
keyid:6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:11:66:9e:f1:c5:f8:84:00:43:27:b1:ec:5e:3a:89:af:be:
66:ec:09:30:97:57:ef:45:23:06:24:8f:ed:8d:bb:d9:1b:19:
b3:6d:76:71:be:42:1c:f9:be:a5:2c:88:d2:b5:1a:e2:a1:1c:
28:3b:68:f4:e3:94:d1:38:d9:fd:d8:fa:e8:63:e7:65:60:bf:
bc:43:c0:2f:21:76:4d:53:da:22:3e:6a:30:10:b6:17:1c:67:
41:86:20:af:15:c9:90:78:46:f8:b9:a7:31:10:8a:a7:e3:07:
42:0a:ab:eb:99:48:a7:9e:df:03:0f:e0:c0:36:9e:80:53:00:
38:11:6b:dc:b6:34:da:be:83:e1:d4:c4:8e:c8:b8:19:b8:ae:
6f:2f:8e:2c:82:68:27:ee:fd:a1:55:ac:69:e6:69:4e:84:9b:
6a:80:c8:41:b4:cc:43:5a:30:7b:2c:d1:8c:78:20:b2:af:3b:
ff:38:8b:08:fc:67:48:6d:f1:9c:c5:a8:5f:1b:5d:94:34:fa:
b7:ed:e7:ee:da:81:ac:93:0e:5e:bc:11:85:c0:56:08:30:7f:
1f:2c:40:05:fe:fe:14:34:e3:66:25:bb:a2:ff:d5:de:95:cd:
97:82:50:d1:5c:ad:bb:95:e4:c7:1a:e8:c3:b2:ef:66:04:5c:
8e:13:81:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:09:13 2025 by rpki-client