Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
File: BoekrKWB2OvN_iS2Xx5woS8omng.mft (raw, json)
Hash identifier: D3IRDDF0fRIQ3bT8YaawfSSskBgaRoiXRLWepcHZCEA=
Subject key identifier: F7:CC:97:CB:1F:44:79:4C:CF:05:04:F9:F9:4E:E9:13:DD:D9:27:3E
Authority key identifier: 06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78
Certificate issuer: /CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78
Certificate serial: 01987B9BE43D2B766684622F6E51BD1C42B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
Manifest number: 07D4
Signing time: Tue 05 Aug 2025 19:01:10 +0000
Manifest this update: Tue 05 Aug 2025 19:01:10 +0000
Manifest next update: Wed 06 Aug 2025 19:01:10 +0000
Files and hashes: 1: BoekrKWB2OvN_iS2Xx5woS8omng.crl (hash: yBlthEq9lJtKLXWiTpK1rO+0okh9RnU0czK7zwq+Zd8=)
2: JTkFn5E31NEi0T3jHFsEReuBpS0.roa (hash: kKlmo0yCwDoRfIckDgl+hlLcGOfvby6dj08uXZBlD8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9b:e4:3d:2b:76:66:84:62:2f:6e:51:bd:1c:42:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78
Validity
Not Before: Aug 5 19:01:10 2025 GMT
Not After : Aug 6 19:01:10 2025 GMT
Subject: CN=f7cc97cb1f44794ccf0504f9f94ee913ddd9273e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:49:9e:96:b7:54:7d:85:a5:21:12:bf:95:31:
28:ac:c8:88:4e:d8:1f:7c:79:a5:62:ee:ab:e8:e1:
ef:28:f6:d9:65:ba:ac:c6:1c:82:cc:f1:7f:35:88:
c0:d7:dd:70:e8:7a:0e:7f:48:d5:e3:42:73:96:61:
8a:eb:68:c7:88:94:aa:84:1d:8a:36:90:d9:ef:36:
66:42:49:20:a3:7d:6d:1d:16:d3:6a:8f:38:78:bf:
90:ea:7a:de:02:24:98:51:fd:96:c9:df:4f:c2:b9:
72:05:44:a2:de:ae:b8:62:7c:ce:19:30:ff:08:fb:
b7:05:62:75:79:1d:16:d6:3c:1c:23:61:64:75:3b:
ba:a6:e5:88:72:b5:f1:89:79:e7:cb:f1:95:75:01:
2e:54:94:2e:3c:95:f7:15:60:93:83:95:c6:7f:96:
d5:76:d4:f7:da:79:64:99:03:be:3b:7c:0c:09:1b:
2a:6c:95:2b:e4:66:e7:4c:fd:62:84:76:a7:72:2e:
f6:3a:a9:4e:61:8c:99:c9:b4:1e:cf:cf:b0:6f:73:
0e:23:79:90:da:91:e9:2e:f0:17:79:7c:48:38:e7:
14:b4:96:21:bb:64:aa:30:dc:32:26:c1:2e:63:1a:
5c:5f:fe:ee:9c:6d:d6:31:8f:96:0a:75:b0:dc:8f:
81:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CC:97:CB:1F:44:79:4C:CF:05:04:F9:F9:4E:E9:13:DD:D9:27:3E
X509v3 Authority Key Identifier:
keyid:06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:71:ff:dd:64:76:d1:0b:49:95:e2:ff:51:8c:6a:d6:a3:6f:
06:14:be:d2:76:0b:b3:99:61:e1:24:f0:32:70:ac:25:cd:0b:
64:fe:d0:fd:ff:ee:50:22:0f:bb:e4:65:8c:0f:80:dc:d9:dc:
42:86:cd:e7:fb:d4:24:79:1d:1f:65:f3:1e:de:af:a9:6b:2c:
4b:76:1d:cb:29:77:bb:2d:0d:f1:1a:ca:0c:0e:b0:6d:85:7e:
8b:6a:a5:76:47:4d:55:3f:ae:85:d9:cd:29:a4:e4:4f:e3:40:
07:fa:0b:41:f5:d4:62:45:d5:42:f4:e0:b8:a1:b6:a4:17:ca:
b6:70:de:69:4d:08:12:c6:02:9c:7f:9b:6c:82:11:57:e1:84:
24:a5:b7:97:c6:57:87:4b:c1:48:bc:61:a0:ce:de:de:e0:b0:
f9:de:e4:16:2d:76:fb:2e:be:da:90:4b:60:f9:8c:d6:81:6d:
a3:99:b7:53:b5:68:6b:9a:cd:b5:21:8e:da:15:44:76:dc:a8:
31:b7:76:26:19:53:cf:8f:91:d3:3b:ed:c6:13:f7:c7:7b:a3:
6a:0d:8a:7b:a4:d0:af:bb:2f:88:10:bb:b1:21:7b:79:c7:f7:
a5:bb:b7:f3:e8:1b:7e:66:4e:83:f7:02:f8:d5:16:a8:d5:f1:
e9:fa:a2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:49:16 2025 by rpki-client