Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
File: BoekrKWB2OvN_iS2Xx5woS8omng.mft (raw, json)
Hash identifier: Z3Q+9jCoth2VFM0sEIpUlzmTXXsOF1+ZHDxVc2NWxnQ=
Subject key identifier: 2B:DA:6A:BA:C7:E8:21:70:A2:1B:00:BA:57:E9:30:5C:79:33:3B:13
Authority key identifier: 06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78
Certificate issuer: /CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78
Certificate serial: 019A4EF46E72F8DD1B48B68E6AD625EEC119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
Manifest number: 08C6
Signing time: Tue 04 Nov 2025 13:00:33 +0000
Manifest this update: Tue 04 Nov 2025 13:00:33 +0000
Manifest next update: Wed 05 Nov 2025 13:00:33 +0000
Files and hashes: 1: BoekrKWB2OvN_iS2Xx5woS8omng.crl (hash: +4IW4SywWagjlbXNnt3LFj5Vch91M5q6lEbOuqEvoMM=)
2: JTkFn5E31NEi0T3jHFsEReuBpS0.roa (hash: kKlmo0yCwDoRfIckDgl+hlLcGOfvby6dj08uXZBlD8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:6e:72:f8:dd:1b:48:b6:8e:6a:d6:25:ee:c1:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78
Validity
Not Before: Nov 4 13:00:33 2025 GMT
Not After : Nov 5 13:00:33 2025 GMT
Subject: CN=2bda6abac7e82170a21b00ba57e9305c79333b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2a:6d:06:fb:58:38:3a:49:d4:c5:b0:6a:ee:
da:a2:38:34:ed:ed:75:df:8c:eb:a3:72:3f:ec:48:
9b:eb:b5:09:b0:81:4f:a3:8d:f7:67:7c:40:89:70:
b3:f2:33:3d:c1:7e:09:05:2c:ed:c8:65:1b:fa:37:
3c:d5:25:95:f0:fc:37:09:b0:d1:d3:a3:ec:7e:67:
cb:aa:35:8e:b4:69:eb:78:c7:27:d1:d6:1c:74:08:
67:eb:7d:c3:a2:83:8e:5f:78:b8:0b:e2:d4:1f:02:
dd:5f:e2:c5:fe:62:cb:2c:a7:22:a3:58:6f:d1:8d:
7b:e2:ca:96:c3:80:e0:2d:84:26:c6:1e:e1:cf:fb:
44:52:85:46:53:f9:3a:84:ac:af:70:be:ca:d2:a1:
d1:9a:2a:4c:4c:80:8b:e2:be:2d:cd:b2:63:13:9a:
d3:e8:15:89:e6:7d:4f:b4:af:a4:c5:44:25:14:77:
90:bd:62:b6:95:d4:56:64:d8:2a:c7:a8:c7:75:e6:
7c:0b:9d:28:a6:ff:39:a2:a5:34:38:05:f2:2b:40:
e7:51:87:5e:f6:bf:7d:81:dc:7a:a3:a5:f2:95:5b:
c5:6f:5a:a7:c1:ef:6a:ae:06:f7:c5:67:a7:fa:64:
5b:15:14:47:30:ac:91:98:be:a3:81:74:39:70:1c:
b7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DA:6A:BA:C7:E8:21:70:A2:1B:00:BA:57:E9:30:5C:79:33:3B:13
X509v3 Authority Key Identifier:
keyid:06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:6c:21:29:d0:dc:d0:f3:af:f9:81:6e:be:57:89:d5:8c:63:
21:14:af:f0:5b:99:bc:7b:17:dc:14:0a:05:a4:a8:4c:0c:33:
27:97:ba:74:55:7c:33:05:6e:e5:58:f9:77:24:ff:b3:82:33:
85:da:08:11:c9:87:b6:1b:a8:99:c1:61:97:14:93:fd:0d:44:
c4:32:23:45:00:a4:15:a8:04:1c:13:f8:1a:45:dd:1c:58:f8:
82:19:42:62:81:ea:80:a3:72:a5:5e:cf:b4:da:af:14:f8:c6:
18:fd:bc:ef:c6:e2:0f:ed:59:39:29:23:19:da:cf:a2:35:8a:
a5:9a:c6:c8:34:2f:d9:5a:a8:b6:61:a7:75:92:39:ec:5c:57:
bd:09:a3:a6:d6:1a:4b:d2:f5:82:1e:fa:92:c2:9a:21:a3:32:
19:d1:5d:bc:d0:d1:26:cc:d3:4f:d1:db:34:9a:c4:b3:f4:da:
60:8a:7b:96:2e:d2:12:11:56:14:14:8f:bb:fe:3c:02:52:ee:
b1:2a:94:61:7b:76:d5:8d:f6:89:e8:19:47:0e:c5:5d:2d:4d:
d2:b4:37:56:8c:30:42:d2:7b:d4:39:f0:31:56:a6:ba:95:7f:
cf:44:9d:37:0f:55:f7:9a:da:85:a2:7e:c5:25:d8:04:52:e4:
35:68:cc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:44:36 2025 by rpki-client