Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
File: BOUCQK9A6yrWD8MHisM_xTVdRBY.mft (raw, json)
Hash identifier: 3ECsW7IYk5yxHuOFb1GaE4zXf299hZx2nWr/pd2iknI=
Subject key identifier: 0E:42:77:E4:6A:0C:92:BD:C1:37:2B:24:B6:11:55:52:67:4B:2D:86
Authority key identifier: 04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
Certificate issuer: /CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Certificate serial: 019A4E18C516291C27F1E8EB97A892370C1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 09:00:37 +0000
Manifest this update: Tue 04 Nov 2025 09:00:37 +0000
Manifest next update: Wed 05 Nov 2025 09:00:37 +0000
Files and hashes: 1: BOUCQK9A6yrWD8MHisM_xTVdRBY.crl (hash: vwu9YvHGNASQAQwyhJdE5OadFcb4kd3nT3T4L9L56C0=)
2: Ra939hYa4qHS53vnLZC8uQUEM-E.roa (hash: B/7jSSNr2C5FakUSARiA8ySImCt+J6e0YeVP0cyVsSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:c5:16:29:1c:27:f1:e8:eb:97:a8:92:37:0c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Validity
Not Before: Nov 4 09:00:37 2025 GMT
Not After : Nov 5 09:00:37 2025 GMT
Subject: CN=0e4277e46a0c92bdc1372b24b6115552674b2d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:94:60:60:42:5c:1c:e5:fe:ab:14:c1:7a:c2:
3c:c8:24:ed:78:3a:4c:59:a2:fc:21:c1:73:82:7b:
c8:08:f8:47:d0:ec:5c:8c:ba:74:89:b2:71:bf:57:
a1:49:1f:b1:5c:f6:ba:2d:63:a9:3c:51:9e:04:b2:
bc:63:b7:b2:24:ef:c9:84:71:9e:b2:24:bc:17:aa:
8b:2e:c0:63:0a:b8:19:7e:7b:77:39:87:a6:2f:83:
8f:7e:c8:56:c8:65:80:77:01:be:12:0e:95:80:db:
11:44:5b:bc:dd:57:6d:19:d7:42:45:6c:30:8f:80:
5f:d3:0d:0e:56:81:46:8f:3d:ac:03:34:50:b7:ba:
54:79:c3:3b:5d:a6:db:02:b4:2c:30:a2:8b:ac:9a:
20:7d:b9:ee:88:a5:31:3f:75:69:29:23:ea:50:c6:
73:70:9c:45:d1:0a:c3:e3:00:77:ab:7e:02:fc:1c:
34:fb:d6:24:c0:53:69:2b:9e:f4:2b:e1:58:68:1b:
08:71:15:f6:5d:1c:51:4a:e2:11:cd:5e:4b:33:b9:
f0:40:2e:d7:c0:24:95:2f:01:11:78:ec:e9:7b:5f:
60:d1:bb:79:1a:15:c9:bf:bc:d2:b0:63:0f:d7:8f:
71:85:cc:3e:cc:7c:b6:b3:6f:a0:ac:db:6c:73:56:
b1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:42:77:E4:6A:0C:92:BD:C1:37:2B:24:B6:11:55:52:67:4B:2D:86
X509v3 Authority Key Identifier:
keyid:04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:98:7b:66:01:d9:06:ed:c4:67:44:37:b6:ee:be:e7:82:88:
de:b9:1c:11:1c:b5:da:1d:61:78:42:4e:d9:9c:6f:51:c4:2d:
fa:db:b7:25:64:55:64:69:52:e7:49:4b:53:55:ec:5a:28:54:
c9:d7:98:05:04:45:c6:9f:b3:a7:ab:a5:2d:e9:ad:2b:3c:a6:
4b:4d:09:b4:75:fd:a9:5b:b9:72:57:11:3e:fa:34:58:8c:06:
4e:8c:2f:be:5e:df:2b:29:4d:70:4b:92:f7:fe:f0:b3:1e:3a:
6d:3c:08:78:18:4a:01:71:1d:8c:de:2c:80:27:cc:76:03:01:
9e:65:41:77:4d:4c:f6:32:e4:bb:65:f4:d2:80:71:a1:db:df:
f7:7d:8e:be:33:69:52:ec:5c:f9:23:2e:64:58:69:92:8c:83:
3d:d3:9f:a2:04:d5:21:18:ca:12:55:89:c4:9e:10:11:d8:6b:
5a:6a:c0:2b:39:b0:1a:24:53:a7:c8:c3:60:17:5a:05:b2:89:
38:d9:6a:68:f3:21:55:7b:b7:63:dd:aa:78:c7:fc:da:44:3b:
8a:7a:c6:1f:08:a2:3f:52:2e:48:27:80:82:53:44:70:d5:8d:
0e:2a:83:7f:50:18:08:e7:2c:f8:a4:5d:60:68:f7:d7:36:77:
a9:45:20:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:28 2025 by rpki-client