Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
File: BOUCQK9A6yrWD8MHisM_xTVdRBY.mft (raw, json)
Hash identifier: yC6pY8r+UNBKSAC5PfspEIWUc3wvvWM/Zt8yj63ZQG0=
Subject key identifier: 5F:33:84:6A:D3:24:27:21:64:A2:EE:E0:2E:D9:12:77:D4:73:82:C0
Authority key identifier: 04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
Certificate issuer: /CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Certificate serial: 01987306945A75474459B161CA14932FA07E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 03:01:07 +0000
Manifest this update: Mon 04 Aug 2025 03:01:07 +0000
Manifest next update: Tue 05 Aug 2025 03:01:07 +0000
Files and hashes: 1: BOUCQK9A6yrWD8MHisM_xTVdRBY.crl (hash: FYXKCBiVmK5jE9DsW08Fx89ackOZWVmC0jzk0hkImAA=)
2: Ra939hYa4qHS53vnLZC8uQUEM-E.roa (hash: B/7jSSNr2C5FakUSARiA8ySImCt+J6e0YeVP0cyVsSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:94:5a:75:47:44:59:b1:61:ca:14:93:2f:a0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Validity
Not Before: Aug 4 03:01:07 2025 GMT
Not After : Aug 5 03:01:07 2025 GMT
Subject: CN=5f33846ad324272164a2eee02ed91277d47382c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b6:37:8e:dc:89:42:83:b2:89:1a:be:5a:47:
4a:28:9d:bc:57:63:59:97:eb:9d:8b:bf:16:c1:4e:
46:96:64:69:d8:05:b4:ea:69:1d:69:45:34:ab:3f:
23:0a:91:66:70:d3:9e:3a:a2:1c:f0:ae:8c:64:17:
16:42:ce:ea:2c:92:b6:67:9f:a9:ad:48:35:d2:ce:
f0:41:75:55:84:f9:02:a0:24:2b:86:76:ff:2d:6d:
c9:4b:c7:b7:79:59:f8:15:03:a0:a9:7e:b4:9e:6d:
aa:0e:7c:e0:ed:92:69:36:42:03:b4:78:19:33:cf:
9a:c5:3c:81:96:ee:6d:b4:18:cc:8e:7d:4d:82:c5:
9f:fa:db:04:43:0a:fc:7b:4a:4e:fb:5b:1d:0c:77:
c6:46:d6:71:6c:3b:7b:a2:2b:81:c8:df:79:d2:e4:
2d:c8:b3:f1:b2:ef:7a:44:73:19:4e:c6:bb:67:27:
7b:f9:11:ab:80:eb:be:c3:66:32:f1:6e:08:26:9e:
76:d4:62:64:76:e4:e2:c6:6e:41:43:0d:84:72:06:
a6:61:fb:a7:f5:ff:29:22:4a:12:ac:6b:ce:dd:5b:
6c:a9:cc:e1:b2:0c:7b:3e:e2:f0:b6:be:4b:12:ad:
fc:2f:08:db:ae:82:f4:da:86:ab:ce:0d:4a:01:cb:
18:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:33:84:6A:D3:24:27:21:64:A2:EE:E0:2E:D9:12:77:D4:73:82:C0
X509v3 Authority Key Identifier:
keyid:04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e1:ce:d9:d3:43:d8:e7:f9:e5:91:5b:c9:23:80:bd:a4:5f:
da:6f:7d:2f:45:c4:38:5a:8e:37:54:01:9b:58:03:2e:52:28:
74:05:30:ed:03:32:6c:59:cb:72:43:f1:7f:41:03:02:8a:35:
d1:9d:10:fa:ba:94:99:74:00:de:f4:4a:de:e0:2b:69:2d:a1:
3e:6b:7e:e4:03:10:11:27:b7:50:6a:fc:1f:a1:0d:2a:6a:ac:
16:6b:75:04:ce:5f:19:28:c1:aa:54:57:8d:b3:6e:04:f5:46:
a9:65:d9:c1:60:ad:45:eb:86:10:8f:9e:47:33:a7:66:e8:69:
45:91:f9:5f:82:2e:f8:19:fe:a4:1c:c3:f1:14:68:50:39:ea:
9c:57:ae:ec:4c:ef:c4:68:5b:54:5e:9b:35:e1:f0:33:ce:5d:
23:28:3c:af:21:d3:1d:f3:ee:e6:7a:b5:33:c3:fe:80:52:78:
9d:f5:26:88:ae:16:76:db:0e:49:ef:db:1d:1e:40:fb:b6:a2:
08:5d:ae:ae:d8:f1:42:fc:b1:b8:fd:1c:b6:40:f1:c7:d0:4e:
58:46:d2:38:98:3e:cb:e4:40:6a:01:4f:28:6e:d2:01:eb:af:
c1:15:e0:e4:6b:2a:59:09:86:a5:15:cc:25:c6:46:8a:66:e8:
4d:ad:f9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:20 2025 by rpki-client