Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
File: boMQZuqP4gsGehNgBrevkGYzhDs.mft (raw, json)
Hash identifier: UxU9w7YFp/AczmFwlNGYwgm9JVJzi3lIzNOiPvdftAE=
Subject key identifier: ED:D9:7F:65:E5:32:01:A7:22:66:89:30:7F:FF:16:0D:31:0E:C2:C5
Authority key identifier: 6E:83:10:66:EA:8F:E2:0B:06:7A:13:60:06:B7:AF:90:66:33:84:3B
Certificate issuer: /CN=6e831066ea8fe20b067a136006b7af906633843b
Certificate serial: 019A4F98E5E02864D9EEE4E77484D1C93AD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 16:00:11 +0000
Manifest this update: Tue 04 Nov 2025 16:00:11 +0000
Manifest next update: Wed 05 Nov 2025 16:00:11 +0000
Files and hashes: 1: K0elnSjthwyDpqUrzqz0WWkS5i4.roa (hash: gy/lZpvudI4NuVtj5Cr7txBBixWEIa8xyvy8FV7O+jc=)
2: boMQZuqP4gsGehNgBrevkGYzhDs.crl (hash: 9Wr3Zi9TD8ElZxFXRb73XqW9JpiRjY0QHDisaWSa5EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:e5:e0:28:64:d9:ee:e4:e7:74:84:d1:c9:3a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e831066ea8fe20b067a136006b7af906633843b
Validity
Not Before: Nov 4 16:00:11 2025 GMT
Not After : Nov 5 16:00:11 2025 GMT
Subject: CN=edd97f65e53201a7226689307fff160d310ec2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:65:3c:10:10:be:90:7c:73:3d:0f:0d:bb:7f:
fe:96:3b:25:c7:7d:32:b3:ab:e4:74:bf:e9:45:ad:
76:85:10:e5:2a:bc:49:06:5f:70:9e:5b:ca:2a:58:
49:c1:39:3b:41:36:3d:c1:e6:04:1c:82:71:4a:9f:
bf:ec:7d:f8:05:79:e5:89:bb:55:61:64:fe:4f:d3:
d3:50:47:a1:66:36:58:36:b1:16:53:5a:83:0b:cd:
f6:ad:c1:e2:ac:a5:0b:99:b6:e4:0a:39:ec:d4:78:
a5:a2:40:9b:ab:9a:62:52:96:ba:d8:41:94:09:23:
cc:27:f6:05:4c:e1:7f:43:9d:8b:64:4b:e1:de:bb:
29:b4:c8:7e:53:9c:4c:90:81:c6:08:c8:b8:03:11:
2e:b9:1c:22:bf:50:34:93:76:db:f9:8f:c6:b6:7d:
53:5b:62:b3:f6:7c:60:70:a6:a1:74:55:72:eb:4b:
2d:b6:b2:6e:ef:d2:07:75:42:31:f2:4f:84:e4:cf:
bf:64:cb:f6:60:0c:14:7e:92:1a:95:92:b2:17:75:
3b:56:31:48:fd:eb:6c:f6:c5:72:de:8c:27:a2:a7:
a1:05:9e:69:7e:1e:bb:50:a8:8c:56:1c:12:c2:c9:
f2:ac:fe:b3:02:82:99:5b:15:c5:4f:ca:4e:f6:8e:
55:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D9:7F:65:E5:32:01:A7:22:66:89:30:7F:FF:16:0D:31:0E:C2:C5
X509v3 Authority Key Identifier:
keyid:6E:83:10:66:EA:8F:E2:0B:06:7A:13:60:06:B7:AF:90:66:33:84:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:9c:bb:08:eb:fb:df:87:44:9e:a9:a0:55:0b:8c:d1:02:17:
ba:06:2c:9d:7e:05:b6:b0:bc:5f:a7:5d:f1:c9:f9:bf:19:55:
0c:f9:b6:72:4f:ce:e0:77:e8:d5:6d:3b:ff:b5:27:3e:5f:05:
a6:5e:40:8d:f8:51:20:81:8a:ab:3a:58:92:08:fe:a0:98:9a:
dc:77:c9:fa:7b:c7:69:8f:bd:1d:b1:6a:09:cb:c5:7a:81:d6:
51:be:42:61:6f:db:cf:e5:d7:47:00:c0:00:44:c6:6c:27:e2:
25:fc:5a:4a:d3:16:44:db:89:65:12:53:88:6a:85:0d:92:8c:
26:be:b2:72:68:b7:84:fc:e4:36:56:f5:20:a1:47:99:f0:87:
0b:94:e9:2c:6f:9e:20:38:cb:c3:8c:fb:ef:b7:dc:24:e3:7e:
df:a9:c4:4e:06:fc:40:76:59:ad:ab:bd:40:a7:6a:d4:47:2b:
99:2e:bb:25:0d:88:fe:13:82:7c:c1:da:ec:58:3a:6c:ab:46:
d3:d2:12:86:b9:e4:7a:0c:04:d8:e7:53:cc:d6:d5:1e:59:2a:
9e:27:2c:d3:ee:40:3a:f2:7d:21:c2:8e:9d:92:f0:ca:59:e5:
2e:5f:d2:22:7f:33:b4:2b:77:20:a1:20:80:cd:3e:55:ee:b0:
0c:2f:c4:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmOXgKGTZ7uTndITRyTrWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODMxMDY2ZWE4ZmUyMGIwNjdhMTM2MDA2YjdhZjkwNjYz
Mzg0M2IwHhcNMjUxMTA0MTYwMDExWhcNMjUxMTA1MTYwMDExWjAzMTEwLwYDVQQD
EyhlZGQ5N2Y2NWU1MzIwMWE3MjI2Njg5MzA3ZmZmMTYwZDMxMGVjMmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mU8EBC+kHxzPQ8Nu3/+ljslx30y
s6vkdL/pRa12hRDlKrxJBl9wnlvKKlhJwTk7QTY9weYEHIJxSp+/7H34BXnlibtV
YWT+T9PTUEehZjZYNrEWU1qDC832rcHirKULmbbkCjns1HilokCbq5piUpa62EGU
CSPMJ/YFTOF/Q52LZEvh3rsptMh+U5xMkIHGCMi4AxEuuRwiv1A0k3bb+Y/Gtn1T
W2Kz9nxgcKahdFVy60sttrJu79IHdUIx8k+E5M+/ZMv2YAwUfpIalZKyF3U7VjFI
/ets9sVy3ownoqehBZ5pfh67UKiMVhwSwsnyrP6zAoKZWxXFT8pO9o5VOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3Zf2XlMgGnImaJMH//Fg0xDsLFMB8GA1UdIwQY
MBaAFG6DEGbqj+ILBnoTYAa3r5BmM4Q7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9NUVp1cVA0Z3NHZWhOZ0JyZXZrR1l6aERzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9iZDE5ZmQtZjM2OS00MmJmLTkyNmYt
MmE0ZGQyM2EyZjlhLzEvYm9NUVp1cVA0Z3NHZWhOZ0JyZXZrR1l6aERzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9iZDE5ZmQtZjM2OS00MmJmLTkyNmYtMmE0ZGQyM2EyZjlh
LzEvYm9NUVp1cVA0Z3NHZWhOZ0JyZXZrR1l6aERzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoJy7COv7
34dEnqmgVQuM0QIXugYsnX4FtrC8X6dd8cn5vxlVDPm2ck/O4Hfo1W07/7UnPl8F
pl5AjfhRIIGKqzpYkgj+oJia3HfJ+nvHaY+9HbFqCcvFeoHWUb5CYW/bz+XXRwDA
AETGbCfiJfxaStMWRNuJZRJTiGqFDZKMJr6ycmi3hPzkNlb1IKFHmfCHC5TpLG+e
IDjLw4z777fcJON+36nETgb8QHZZrau9QKdq1EcrmS67JQ2I/hOCfMHa7Fg6bKtG
09IShrnkegwE2OdTzNbVHlkqnics0+5AOvJ9IcKOnZLwylnlLl/SIn8ztCt3IKEg
gM0+Ve6wDC/Epw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:16 2025 by rpki-client