Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
File: boMQZuqP4gsGehNgBrevkGYzhDs.mft (raw, json)
Hash identifier: FQjd5+J9yesXM4MMJliwnOObxfjVSxCWmg5cxgY6q9E=
Subject key identifier: 08:54:29:53:28:E6:A9:2E:B5:F0:1C:16:71:A0:EE:14:05:3A:14:53
Authority key identifier: 6E:83:10:66:EA:8F:E2:0B:06:7A:13:60:06:B7:AF:90:66:33:84:3B
Certificate issuer: /CN=6e831066ea8fe20b067a136006b7af906633843b
Certificate serial: 01989749A0CA0DF0E5BDA80A73AE579D5EDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
Manifest number: 162C
Signing time: Mon 11 Aug 2025 04:00:41 +0000
Manifest this update: Mon 11 Aug 2025 04:00:41 +0000
Manifest next update: Tue 12 Aug 2025 04:00:41 +0000
Files and hashes: 1: K0elnSjthwyDpqUrzqz0WWkS5i4.roa (hash: gy/lZpvudI4NuVtj5Cr7txBBixWEIa8xyvy8FV7O+jc=)
2: boMQZuqP4gsGehNgBrevkGYzhDs.crl (hash: pGjI/ytGdSHAw7Kdh5rEf1vUXghwfLAr9ie/n7nSgLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:49:a0:ca:0d:f0:e5:bd:a8:0a:73:ae:57:9d:5e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e831066ea8fe20b067a136006b7af906633843b
Validity
Not Before: Aug 11 04:00:41 2025 GMT
Not After : Aug 12 04:00:41 2025 GMT
Subject: CN=0854295328e6a92eb5f01c1671a0ee14053a1453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:89:9c:b2:37:02:6c:79:20:1e:a2:80:15:30:
de:ef:07:b0:94:89:e7:78:64:94:b6:74:ef:96:39:
fd:b2:13:30:96:e2:c4:bf:23:4f:18:8c:10:f8:8e:
79:02:45:5e:5e:43:63:cd:fd:9b:26:55:63:bb:47:
b0:d0:b9:e3:31:41:43:0b:2d:be:9e:cb:08:ac:09:
22:d7:3e:b9:ef:6a:ec:0c:ed:cb:db:94:67:2b:02:
de:98:b6:46:f9:be:38:f2:91:00:a1:fb:01:3c:02:
02:b9:86:ff:f6:41:66:ab:00:c8:17:0d:ca:6b:a5:
bd:eb:e0:af:c7:4f:bc:3a:4a:07:49:02:2d:81:dc:
6a:2d:87:1e:d2:50:ef:ce:c4:e2:99:7d:28:99:3d:
bc:ad:4e:33:e9:8f:cc:c1:b9:44:62:f1:33:8d:c5:
eb:72:4f:74:8b:bd:51:df:42:6d:d6:19:55:53:81:
4e:fd:6b:3f:88:33:c7:71:d6:6f:06:3c:58:c5:98:
1c:c2:be:db:50:3f:e9:85:f4:2d:ac:40:8f:68:ee:
fe:dd:c1:1c:87:6e:06:97:22:07:c8:c4:3f:04:90:
c1:9d:05:e3:03:86:d0:64:eb:db:a5:79:99:fd:7e:
3b:23:91:fb:e0:24:7e:33:21:90:0c:73:64:7b:29:
9a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:54:29:53:28:E6:A9:2E:B5:F0:1C:16:71:A0:EE:14:05:3A:14:53
X509v3 Authority Key Identifier:
keyid:6E:83:10:66:EA:8F:E2:0B:06:7A:13:60:06:B7:AF:90:66:33:84:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:f9:5c:d5:d6:af:ba:4a:10:75:1d:41:2e:1e:c2:30:e4:c3:
91:92:f8:c7:f2:0e:c7:e1:20:5b:6e:0e:9f:a2:14:2b:9a:db:
e3:93:4e:3f:29:ff:a5:03:a2:04:73:33:6d:9e:1f:90:e9:b2:
52:c5:c0:26:3b:42:29:59:e5:3b:aa:02:79:ba:d8:bb:ce:df:
94:b3:2a:a6:ac:15:aa:5a:3e:ad:57:8d:c8:69:59:05:57:41:
83:a1:50:22:f4:29:ee:19:1c:ea:f3:db:ac:4e:ff:e8:05:a9:
ea:13:6b:30:0a:8f:ef:1e:e7:ec:79:a0:6e:40:ea:8e:97:6d:
27:0a:ec:78:6d:59:10:72:9f:5c:98:13:f3:8d:e1:bf:f1:2a:
c3:bb:bf:e8:65:b9:d5:c8:11:0a:39:f0:f2:6a:b5:7b:06:a3:
78:d2:38:8a:0f:bb:38:a7:95:97:e8:52:e8:6a:e1:86:62:d5:
a5:60:05:7a:38:3d:ae:f1:f5:00:e6:4e:af:09:d7:0f:06:50:
de:f6:2f:69:81:88:fc:8d:70:01:62:c2:9b:68:dc:14:77:fa:
ca:12:52:c4:fe:30:d3:9e:47:24:6b:90:16:d9:60:00:17:0a:
f9:5a:f1:62:16:1e:2e:cb:13:0c:c1:0d:6d:18:ef:e2:ef:73:
9d:8a:79:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:54:18 2025 by rpki-client