Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
File: BoekrKWB2OvN_iS2Xx5woS8omng.mft (raw, json)
Hash identifier: qH5FkcQrtuK33rn//sDA5fZLBDFNe6BvWdoIMW3Hmys=
Subject key identifier: 1D:04:04:25:75:4E:7C:5A:15:01:01:57:56:24:71:C2:29:89:79:63
Authority key identifier: 06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78
Certificate issuer: /CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78
Certificate serial: 019772D1EAD13595A70CF54044201D7A49AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
Manifest number: 074B
Signing time: Sun 15 Jun 2025 09:00:49 +0000
Manifest this update: Sun 15 Jun 2025 09:00:49 +0000
Manifest next update: Mon 16 Jun 2025 09:00:49 +0000
Files and hashes: 1: BoekrKWB2OvN_iS2Xx5woS8omng.crl (hash: zHkwD1X0964GV87jLeNla9cbnb62msm5/hQ44tWOJ6M=)
2: JTkFn5E31NEi0T3jHFsEReuBpS0.roa (hash: kKlmo0yCwDoRfIckDgl+hlLcGOfvby6dj08uXZBlD8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:d1:ea:d1:35:95:a7:0c:f5:40:44:20:1d:7a:49:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78
Validity
Not Before: Jun 15 09:00:49 2025 GMT
Not After : Jun 16 09:00:49 2025 GMT
Subject: CN=1d040425754e7c5a15010157562471c229897963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ec:51:48:e6:78:24:bb:f1:4c:e0:bc:4e:f2:
9b:c7:1f:0a:2e:6d:48:c6:46:84:25:22:4b:62:c4:
af:0b:0c:ab:7f:8d:1d:15:11:9f:c0:47:d3:e6:f6:
90:0c:28:1b:83:98:96:0f:50:27:72:88:6d:8b:1d:
fc:ff:d3:c3:72:3e:62:84:10:e1:57:db:95:10:09:
59:63:f7:78:11:e4:3e:46:6f:7d:28:51:00:48:68:
f4:43:4d:5a:df:95:12:10:09:69:ea:d9:13:c8:d6:
be:df:76:71:3c:06:38:ca:cf:9b:de:db:fc:1f:9a:
83:c0:aa:9d:5d:ce:73:72:d3:73:47:52:df:cc:ea:
ab:02:08:5c:a8:ea:0a:3f:05:ba:5d:fa:41:5c:1c:
d2:3b:8b:41:75:aa:fd:0f:04:b9:61:e7:67:56:0d:
9d:89:39:51:ba:15:56:f4:15:78:db:43:6f:57:ab:
68:0f:1d:55:8a:32:46:57:d8:31:40:38:b5:47:4c:
30:b5:c8:a6:19:a6:a2:e3:e0:af:6c:d0:95:64:94:
0e:23:b7:53:2b:4d:4b:0a:d0:aa:65:59:41:ba:fd:
eb:06:af:66:bf:06:f3:2b:9b:1a:7b:74:20:21:af:
dd:df:4a:2a:5f:9f:f6:4a:9f:23:f9:78:2a:e4:75:
d8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:04:04:25:75:4E:7C:5A:15:01:01:57:56:24:71:C2:29:89:79:63
X509v3 Authority Key Identifier:
keyid:06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e5:5d:6a:b1:44:a7:d1:04:7d:dc:df:7c:77:25:2c:c2:79:
9c:6e:8a:b1:57:70:a2:42:57:80:95:3f:65:27:d7:c0:b2:3b:
a9:84:9d:81:ba:66:d2:3e:04:10:06:99:a6:43:14:17:98:ba:
a4:06:97:74:48:a8:63:a7:aa:9d:e7:95:67:c3:0b:61:fe:03:
a2:22:6b:70:05:6c:a4:e5:b9:d2:fe:93:fd:61:7c:0f:61:1b:
b6:c9:d3:b6:74:01:12:b1:69:74:e7:88:a0:32:f8:b5:d9:1a:
f2:63:52:8e:18:b8:53:87:97:69:1b:22:69:b2:99:ab:1a:b1:
75:18:25:d3:aa:25:13:a8:2a:00:6b:39:dc:99:e0:f3:18:e7:
2d:48:89:9f:73:9c:9e:d0:d5:68:00:69:92:7f:bf:49:39:71:
12:7e:51:98:eb:73:91:f8:76:1d:f2:9b:07:c4:b4:34:95:b4:
a6:28:90:7f:8b:e4:95:0b:60:70:34:40:16:18:da:e6:99:4a:
17:66:45:82:1c:a5:71:ac:b2:d4:66:ad:91:26:52:f3:73:7a:
72:69:2d:04:23:99:26:ca:b8:62:8f:47:3a:10:ed:5a:bf:47:
59:1f:3f:7b:98:c5:38:4b:b5:60:c4:8b:b5:3d:23:80:a6:e6:
2c:84:d7:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdy0erRNZWnDPVARCAdekmsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2ODdhNGFjYTU4MWQ4ZWJjZGZlMjRiNjVmMWU3MGExMmYy
ODlhNzgwHhcNMjUwNjE1MDkwMDQ5WhcNMjUwNjE2MDkwMDQ5WjAzMTEwLwYDVQQD
EygxZDA0MDQyNTc1NGU3YzVhMTUwMTAxNTc1NjI0NzFjMjI5ODk3OTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+xRSOZ4JLvxTOC8TvKbxx8KLm1I
xkaEJSJLYsSvCwyrf40dFRGfwEfT5vaQDCgbg5iWD1Ancohtix38/9PDcj5ihBDh
V9uVEAlZY/d4EeQ+Rm99KFEASGj0Q01a35USEAlp6tkTyNa+33ZxPAY4ys+b3tv8
H5qDwKqdXc5zctNzR1LfzOqrAghcqOoKPwW6XfpBXBzSO4tBdar9DwS5YednVg2d
iTlRuhVW9BV420NvV6toDx1VijJGV9gxQDi1R0wwtcimGaai4+CvbNCVZJQOI7dT
K01LCtCqZVlBuv3rBq9mvwbzK5sae3QgIa/d30oqX5/2Sp8j+Xgq5HXYmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0EBCV1TnxaFQEBV1YkccIpiXljMB8GA1UdIwQY
MBaAFAaHpKylgdjrzf4ktl8ecKEvKJp4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm9la3JLV0IyT3ZOX2lTMlh4NXdvUzhvbW5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy85ZGYxMWItMDE4Ny00YTkxLWI1ZDEt
MmQyOGExOTEzNWZkLzEvQm9la3JLV0IyT3ZOX2lTMlh4NXdvUzhvbW5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy85ZGYxMWItMDE4Ny00YTkxLWI1ZDEtMmQyOGExOTEzNWZk
LzEvQm9la3JLV0IyT3ZOX2lTMlh4NXdvUzhvbW5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj+VdarFE
p9EEfdzffHclLMJ5nG6KsVdwokJXgJU/ZSfXwLI7qYSdgbpm0j4EEAaZpkMUF5i6
pAaXdEioY6eqneeVZ8MLYf4DoiJrcAVspOW50v6T/WF8D2EbtsnTtnQBErFpdOeI
oDL4tdka8mNSjhi4U4eXaRsiabKZqxqxdRgl06olE6gqAGs53Jng8xjnLUiJn3Oc
ntDVaABpkn+/STlxEn5RmOtzkfh2HfKbB8S0NJW0piiQf4vklQtgcDRAFhja5plK
F2ZFghylcayy1GatkSZS83N6cmktBCOZJsq4Yo9HOhDtWr9HWR8/e5jFOEu1YMSL
tT0jgKbmLITXvQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 13:00:29 2025 by rpki-client