Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
File: BOYEpFZ3vncxOWmtF67GnOl8Q84.mft (raw, json)
Hash identifier: pB8xpQVj7aQPYVKkf4p1QXR49kmzk3E8Y0nM/nj0GTo=
Subject key identifier: 0A:75:11:88:62:7E:F1:5D:60:4F:11:79:16:20:3D:86:76:7E:7F:A2
Authority key identifier: 04:E6:04:A4:56:77:BE:77:31:39:69:AD:17:AE:C6:9C:E9:7C:43:CE
Certificate issuer: /CN=04e604a45677be77313969ad17aec69ce97c43ce
Certificate serial: 019A4F2AFD9B51C81571436F7EBA00D2E879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
Manifest number: 162B
Signing time: Tue 04 Nov 2025 14:00:08 +0000
Manifest this update: Tue 04 Nov 2025 14:00:08 +0000
Manifest next update: Wed 05 Nov 2025 14:00:08 +0000
Files and hashes: 1: BOYEpFZ3vncxOWmtF67GnOl8Q84.crl (hash: a1ZheH60muXr4Vzl/SWo+WDHiJlmzcHb5vwEy0h3ajQ=)
2: dPa9U6HWifFU_Cos6EbPpdfP3tk.roa (hash: 3jOPrvgsW1hyX1vCwFVn+4LuXyROUmkvR9VpXoAHZWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2a:fd:9b:51:c8:15:71:43:6f:7e:ba:00:d2:e8:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e604a45677be77313969ad17aec69ce97c43ce
Validity
Not Before: Nov 4 14:00:08 2025 GMT
Not After : Nov 5 14:00:08 2025 GMT
Subject: CN=0a751188627ef15d604f117916203d86767e7fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:06:03:34:82:bc:79:85:dc:5f:a1:f9:52:e3:
48:83:f4:6b:a3:b4:75:fe:21:45:32:77:c4:76:62:
79:ec:54:6e:9b:c5:af:f9:28:3a:f4:33:98:91:37:
f0:b6:7f:78:29:91:2c:97:5c:09:37:bf:c8:8f:55:
5f:95:f4:15:bf:ff:f8:9c:53:bd:e8:1e:24:34:95:
3a:eb:57:68:9c:8b:d6:64:0c:cb:86:ac:58:c7:6b:
bb:45:87:75:3e:b3:9d:00:35:a3:13:ff:91:bc:9f:
71:52:2e:11:e9:5b:1a:39:80:8b:f5:59:bd:b5:df:
6a:fe:32:0e:97:3e:3d:72:aa:84:0e:bb:0c:64:ab:
ca:86:87:02:fd:f5:9c:e6:ff:2a:58:1c:57:86:2e:
e8:68:a2:35:a1:ba:fc:30:36:cb:dc:b5:d6:9c:89:
02:60:12:84:59:08:22:82:7f:0a:5d:91:83:53:f7:
e5:9a:f7:b6:a3:ec:ae:57:74:3b:d6:50:3c:1f:40:
2d:0f:77:81:92:1a:27:ea:95:c6:55:41:44:8f:53:
9a:bd:9f:10:d8:6e:da:d3:f1:ea:b0:51:93:3e:94:
d4:d2:fd:b1:1d:3a:c2:5f:8e:24:1b:08:1e:ff:22:
07:16:86:fc:1a:fb:a4:88:2f:31:2a:47:97:e7:b4:
65:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:75:11:88:62:7E:F1:5D:60:4F:11:79:16:20:3D:86:76:7E:7F:A2
X509v3 Authority Key Identifier:
keyid:04:E6:04:A4:56:77:BE:77:31:39:69:AD:17:AE:C6:9C:E9:7C:43:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:df:2b:a0:29:20:8f:45:5f:06:a2:43:0a:98:3f:23:96:8b:
e5:18:73:69:fe:5a:02:e3:5f:09:58:70:6c:96:51:af:30:25:
90:5a:a2:64:9c:cf:fe:0a:03:02:3e:60:7d:d8:0d:07:a6:08:
9c:d1:ab:6f:a6:21:31:c6:a8:8b:8c:ac:21:3d:c5:6c:04:85:
b2:8c:ad:87:fa:d5:53:9d:c0:a2:be:4a:b9:ea:9d:b8:be:02:
b9:7f:9a:b9:41:a0:a1:93:d5:de:b0:3e:cf:2f:1c:ef:d3:91:
a7:bf:24:66:0b:fb:7c:c0:08:64:8b:f7:3e:28:f0:db:ba:a5:
73:77:b0:52:2c:1c:09:21:ff:fd:07:2e:08:51:bd:a7:9c:0e:
16:a9:6c:c2:38:53:b2:b2:d4:0c:44:b6:fd:5f:e6:9a:36:ca:
c6:91:95:00:6d:9e:a2:e5:48:93:03:27:7e:8e:9c:a4:7f:9c:
81:38:46:8a:e3:7b:dd:3d:ca:ee:31:8a:31:b8:26:bb:f4:af:
f4:ed:f9:be:8a:79:20:77:d2:20:18:3c:fc:45:5b:03:d8:c2:
05:ca:1d:93:f8:bb:b4:6b:a0:88:ba:d4:69:d0:3d:e4:39:7e:
9f:2f:78:44:bb:f8:e7:15:74:2f:ca:d9:71:d4:c2:d6:33:68:
b2:20:4a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:11 2025 by rpki-client