Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
File: Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft (raw, json)
Hash identifier: hVXh2yM9ma5iaL9I98dd5Pxvgbr3oc9le5t/UunQAXQ=
Subject key identifier: E7:8E:F2:E9:43:DA:5E:10:E9:A4:57:4B:74:D6:D2:E9:9B:79:69:9A
Authority key identifier: 06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F
Certificate issuer: /CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
Certificate serial: 019A4F2B0EF474ABD88BE467DE4A15030E8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
Manifest number: 13E8
Signing time: Tue 04 Nov 2025 14:00:13 +0000
Manifest this update: Tue 04 Nov 2025 14:00:13 +0000
Manifest next update: Wed 05 Nov 2025 14:00:13 +0000
Files and hashes: 1: Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl (hash: uKd3uOWGIe6Os0gkf8F4NbRVJyUIlpn/Aham36FqBVk=)
2: kVsLk-GwVR6PxNcCkI01AGuQido.roa (hash: rA9QYx0rx3lXPqBazEwKKf6dcd24i+QHCtscNmScr3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:0e:f4:74:ab:d8:8b:e4:67:de:4a:15:03:0e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
Validity
Not Before: Nov 4 14:00:13 2025 GMT
Not After : Nov 5 14:00:13 2025 GMT
Subject: CN=e78ef2e943da5e10e9a4574b74d6d2e99b79699a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:de:38:0e:98:4b:6c:d5:a2:f4:d1:cf:1b:39:
73:5b:4c:97:3e:48:79:48:c2:c4:4e:23:9c:33:63:
d4:58:13:46:29:54:aa:b2:59:08:4b:20:ff:00:e3:
83:88:04:dc:f7:32:29:0d:ec:27:52:0b:4b:42:66:
ce:57:ae:f7:80:e8:50:b0:3a:8e:4b:b8:21:03:d8:
43:a3:23:eb:e7:59:e5:21:13:b4:0f:b7:36:94:6a:
e8:a0:03:2c:de:2b:56:93:6f:e2:51:6e:52:e1:41:
da:6c:44:51:c0:c8:fe:17:79:dd:cb:3f:85:17:98:
c4:e5:71:5a:3e:4b:c4:7b:c1:72:c5:43:7a:f5:67:
0d:65:5d:6b:dd:4a:6d:70:f0:55:cf:1c:be:23:f9:
38:91:55:0a:8a:90:27:80:a0:ab:c7:cd:4a:d2:50:
76:b6:6e:7d:92:67:c3:f6:33:c1:c6:b6:1c:f6:0a:
b7:0d:af:f8:e0:f9:34:00:82:8d:a9:bd:3b:fd:0d:
80:54:e6:6a:85:19:a3:d7:90:3e:47:63:f6:75:17:
bd:9e:95:70:a4:5f:cb:47:5b:c5:39:e5:2c:f9:4c:
cf:cd:d0:49:ee:2d:ef:35:f2:67:42:2d:ac:ff:d3:
f7:d7:29:e3:95:98:ba:9b:bd:36:39:2d:8f:30:6a:
09:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8E:F2:E9:43:DA:5E:10:E9:A4:57:4B:74:D6:D2:E9:9B:79:69:9A
X509v3 Authority Key Identifier:
keyid:06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:7f:ae:65:21:20:6f:19:7c:8e:9f:2c:c8:c3:02:cf:76:f5:
a5:54:0a:3e:a4:10:8d:c8:04:c1:ba:7c:ea:33:f5:77:04:34:
ec:29:ca:eb:ef:66:f1:5d:99:f6:6e:49:3a:f6:3a:ef:66:b4:
67:b6:ba:e8:f1:9a:df:63:8b:72:4c:36:ba:4f:6d:bf:a8:cd:
f6:ee:07:a5:59:db:c4:f2:b2:01:70:11:2e:f1:f2:92:92:2e:
56:2a:53:a6:3d:96:f9:e7:b9:5c:dd:11:92:53:56:f1:1c:02:
57:e4:5c:d2:51:d2:3c:01:d1:06:af:52:54:8e:a7:c9:f4:d5:
ee:1b:05:d0:76:93:75:72:0f:38:5a:54:1c:94:9e:95:6b:7b:
f6:11:dc:da:1f:4f:60:c0:ba:c8:ed:db:98:75:17:e2:d8:87:
5d:fd:bc:57:44:84:c1:9c:09:f5:f5:a2:fe:19:5f:54:a7:95:
39:eb:cb:6d:c9:a5:00:56:be:1d:63:87:36:7a:67:b7:6f:9a:
ea:3f:c3:18:e1:b0:5f:25:13:a5:c9:1e:36:7b:8e:09:69:f9:
ec:24:62:9c:3a:e0:e3:38:3a:11:74:ea:53:45:bc:80:f0:11:
7c:56:7f:f9:c2:74:af:06:67:47:a2:dc:60:49:3b:df:94:d8:
78:fe:fa:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPKw70dKvYi+Rn3koVAw6LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2OGNiODViYzRlOWU0YjczMmU5NTdmMDhhYTFjMDIzN2Fh
ZGM0N2YwHhcNMjUxMTA0MTQwMDEzWhcNMjUxMTA1MTQwMDEzWjAzMTEwLwYDVQQD
EyhlNzhlZjJlOTQzZGE1ZTEwZTlhNDU3NGI3NGQ2ZDJlOTliNzk2OTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyt44DphLbNWi9NHPGzlzW0yXPkh5
SMLETiOcM2PUWBNGKVSqslkISyD/AOODiATc9zIpDewnUgtLQmbOV673gOhQsDqO
S7ghA9hDoyPr51nlIRO0D7c2lGrooAMs3itWk2/iUW5S4UHabERRwMj+F3ndyz+F
F5jE5XFaPkvEe8FyxUN69WcNZV1r3UptcPBVzxy+I/k4kVUKipAngKCrx81K0lB2
tm59kmfD9jPBxrYc9gq3Da/44Pk0AIKNqb07/Q2AVOZqhRmj15A+R2P2dRe9npVw
pF/LR1vFOeUs+UzPzdBJ7i3vNfJnQi2s/9P31ynjlZi6m702OS2PMGoJtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOeO8ulD2l4Q6aRXS3TW0umbeWmaMB8GA1UdIwQY
MBaAFAaMuFvE6eS3MulX8IqhwCN6rcR/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm95NFc4VHA1TGN5NlZmd2lxSEFJM3F0eEg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8xOGM4NTYtMThiMS00Mzc1LWJjYWMt
MTlmMjJlZDYxM2E1LzEvQm95NFc4VHA1TGN5NlZmd2lxSEFJM3F0eEg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8xOGM4NTYtMThiMS00Mzc1LWJjYWMtMTlmMjJlZDYxM2E1
LzEvQm95NFc4VHA1TGN5NlZmd2lxSEFJM3F0eEg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPH+uZSEg
bxl8jp8syMMCz3b1pVQKPqQQjcgEwbp86jP1dwQ07CnK6+9m8V2Z9m5JOvY672a0
Z7a66PGa32OLckw2uk9tv6jN9u4HpVnbxPKyAXARLvHykpIuVipTpj2W+ee5XN0R
klNW8RwCV+Rc0lHSPAHRBq9SVI6nyfTV7hsF0HaTdXIPOFpUHJSelWt79hHc2h9P
YMC6yO3bmHUX4tiHXf28V0SEwZwJ9fWi/hlfVKeVOevLbcmlAFa+HWOHNnpnt2+a
6j/DGOGwXyUTpckeNnuOCWn57CRinDrg4zg6EXTqU0W8gPARfFZ/+cJ0rwZnR6Lc
YEk735TYeP768A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:42 2025 by rpki-client