Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
File: boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft (raw, json)
Hash identifier: pqJOwHnk/qC6+sHu9pD9V0znySfivhoQNEgyq9Exugo=
Subject key identifier: 18:3D:BA:B7:AE:F3:B4:E3:CB:98:51:B9:AC:8B:1F:B5:02:02:0E:7C
Authority key identifier: 6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E
Certificate issuer: /CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
Certificate serial: 019A52631B154F9A2AB22725C4229F2D0BED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
Manifest number: 1668
Signing time: Wed 05 Nov 2025 05:00:17 +0000
Manifest this update: Wed 05 Nov 2025 05:00:17 +0000
Manifest next update: Thu 06 Nov 2025 05:00:17 +0000
Files and hashes: 1: 1taXUDcoKkrQ-dr580_7U9lAPFs.roa (hash: v10BOdn0ARMHeuLgu+DFFhQlFSBEpSVcbwEGZOdb93k=)
2: Q5r7HzOrwEP1GGFCPc7woWNwbtw.roa (hash: U5JbPSv/06NMHfKHAXVH+Wi4JladerrLqdwWPT8pKOs=)
3: boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl (hash: jI4S6dW46VNGliyqOywoO6ljsH+IFU4I0aYIwGfDSNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:1b:15:4f:9a:2a:b2:27:25:c4:22:9f:2d:0b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
Validity
Not Before: Nov 5 05:00:17 2025 GMT
Not After : Nov 6 05:00:17 2025 GMT
Subject: CN=183dbab7aef3b4e3cb9851b9ac8b1fb502020e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5c:81:89:82:8d:16:6b:97:17:5d:a5:62:e1:
80:56:52:f8:a2:20:ce:e7:13:45:c5:c7:0b:3c:81:
7c:97:11:ec:ab:11:d7:04:22:a5:6b:e0:ca:f1:b4:
df:c1:b2:7c:4b:b5:c8:94:86:bf:79:48:8c:fe:2c:
fd:44:52:bd:74:fc:d7:ec:42:db:d3:f6:79:78:5f:
c7:f3:a7:a8:bb:78:d1:cf:eb:16:be:bb:a8:d3:de:
fc:d5:dd:da:31:6f:d7:3d:da:d1:6a:63:4c:5f:cb:
a5:4c:6d:d9:78:b9:53:13:cf:a2:bb:30:f2:2e:c5:
60:0b:cc:37:89:88:2f:f2:44:be:91:9b:1b:b3:61:
c5:f4:69:6b:3d:96:fc:a0:6b:b5:bc:e6:32:ce:64:
d1:15:c2:c3:fc:8e:99:66:26:b2:81:c4:77:6a:f8:
31:11:83:03:b4:34:95:9a:01:b7:28:aa:5d:bc:a6:
e4:f1:b8:e1:f6:dd:5f:9c:ca:74:68:82:58:2a:2f:
17:57:a4:3a:f2:78:41:51:4a:2a:2c:41:5a:11:0e:
25:00:3c:5a:c3:ba:88:01:92:08:cd:1d:8e:e3:3e:
ab:94:a9:e8:50:8d:1f:73:33:40:65:02:ab:df:2e:
d2:85:52:8d:83:1d:20:e6:43:72:cc:10:f1:51:f6:
53:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3D:BA:B7:AE:F3:B4:E3:CB:98:51:B9:AC:8B:1F:B5:02:02:0E:7C
X509v3 Authority Key Identifier:
keyid:6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e3:d1:e1:ad:1a:4e:c8:0f:3e:61:a2:15:76:5b:5f:23:2f:
30:e6:98:3d:5b:0a:79:a7:71:8c:94:a6:13:56:1b:f8:fd:19:
2a:28:68:92:62:ef:1d:eb:2d:9a:70:21:b6:88:95:f9:b4:13:
23:72:77:f7:fc:00:27:c1:8a:f7:b1:ce:ea:f6:12:68:0b:32:
90:5f:47:7d:b8:53:50:00:2f:89:93:cd:2a:34:9f:88:3c:a3:
f3:3b:da:b6:e7:6e:d4:97:48:30:5d:07:ce:c0:5e:96:86:a3:
40:ce:1e:ea:57:e6:3d:39:95:6a:bb:e7:bd:77:fc:91:a3:be:
fa:4d:bd:e7:60:0a:4d:0e:b1:e7:e7:36:0e:7d:f5:0a:6f:54:
21:17:38:31:1b:23:cf:13:5a:69:2e:b5:bb:e6:58:6e:a0:9c:
fb:46:1e:38:04:39:b4:46:c2:90:10:3c:7c:12:87:83:2f:5a:
32:ac:af:e1:62:f6:c4:69:cc:9e:74:88:99:cf:02:4a:e7:1d:
5f:26:d8:12:9d:bc:2e:fb:60:94:28:fa:c0:ea:3d:2f:4a:b3:
a4:3a:21:35:17:5d:dc:25:60:e3:96:95:3d:cf:53:f5:9c:a7:
db:7b:c6:f7:82:7b:bd:69:44:6b:2d:25:4a:13:e9:2c:d5:61:
42:6a:42:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSYxsVT5oqsiclxCKfLQvtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODMyNTE2NjFiMGI3NzQyNzFjNWNmNTI2YWFiODg0YjFm
YTdjN2UwHhcNMjUxMTA1MDUwMDE3WhcNMjUxMTA2MDUwMDE3WjAzMTEwLwYDVQQD
EygxODNkYmFiN2FlZjNiNGUzY2I5ODUxYjlhYzhiMWZiNTAyMDIwZTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VyBiYKNFmuXF12lYuGAVlL4oiDO
5xNFxccLPIF8lxHsqxHXBCKla+DK8bTfwbJ8S7XIlIa/eUiM/iz9RFK9dPzX7ELb
0/Z5eF/H86eou3jRz+sWvruo09781d3aMW/XPdrRamNMX8ulTG3ZeLlTE8+iuzDy
LsVgC8w3iYgv8kS+kZsbs2HF9GlrPZb8oGu1vOYyzmTRFcLD/I6ZZiaygcR3avgx
EYMDtDSVmgG3KKpdvKbk8bjh9t1fnMp0aIJYKi8XV6Q68nhBUUoqLEFaEQ4lADxa
w7qIAZIIzR2O4z6rlKnoUI0fczNAZQKr3y7ShVKNgx0g5kNyzBDxUfZTMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBg9ureu87Tjy5hRuayLH7UCAg58MB8GA1UdIwQY
MBaAFG6DJRZhsLd0Jxxc9SaquISx+nx+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9NbEZtR3d0M1FuSEZ6MUpxcTRoTEg2Zkg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jNjI2ZDUtZDQwNS00MDZlLThjODEt
NWMwMTgxN2ZiODIyLzEvYm9NbEZtR3d0M1FuSEZ6MUpxcTRoTEg2Zkg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jNjI2ZDUtZDQwNS00MDZlLThjODEtNWMwMTgxN2ZiODIy
LzEvYm9NbEZtR3d0M1FuSEZ6MUpxcTRoTEg2Zkg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABuPR4a0a
TsgPPmGiFXZbXyMvMOaYPVsKeadxjJSmE1Yb+P0ZKihokmLvHestmnAhtoiV+bQT
I3J39/wAJ8GK97HO6vYSaAsykF9HfbhTUAAviZPNKjSfiDyj8zvatudu1JdIMF0H
zsBeloajQM4e6lfmPTmVarvnvXf8kaO++k2952AKTQ6x5+c2Dn31Cm9UIRc4MRsj
zxNaaS61u+ZYbqCc+0YeOAQ5tEbCkBA8fBKHgy9aMqyv4WL2xGnMnnSImc8CSucd
XybYEp28LvtglCj6wOo9L0qzpDohNRdd3CVg45aVPc9T9Zyn23vG94J7vWlEay0l
ShPpLNVhQmpCdA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:42:20 2025 by rpki-client