Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
File: BOIiiGeO__Ff6nne8kxgZ84kqic.mft (raw, json)
Hash identifier: O5EBFF3sc+3Gdwj6E7fy5Teh0WSz4ftzPXwrOqI6kds=
Subject key identifier: 7E:D4:61:B9:94:98:8F:D3:5B:89:FD:55:C0:6C:1B:1D:B2:8D:BA:35
Authority key identifier: 04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27
Certificate issuer: /CN=04e22288678efff15fea79def24c6067ce24aa27
Certificate serial: 0198D6612712B65F9BE60171A4A761C8344B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:02:27 +0000
Manifest this update: Sat 23 Aug 2025 10:02:27 +0000
Manifest next update: Sun 24 Aug 2025 10:02:27 +0000
Files and hashes: 1: BOIiiGeO__Ff6nne8kxgZ84kqic.crl (hash: 3EQlv7ui2ZU5OIxzMlTRzZ//SD/L+HMt6fCXW/aZlTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:27:12:b6:5f:9b:e6:01:71:a4:a7:61:c8:34:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e22288678efff15fea79def24c6067ce24aa27
Validity
Not Before: Aug 23 10:02:27 2025 GMT
Not After : Aug 24 10:02:27 2025 GMT
Subject: CN=7ed461b994988fd35b89fd55c06c1b1db28dba35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:c4:2e:bd:f6:42:87:47:d4:bd:5a:67:da:e3:
8f:b7:d4:fe:03:3f:73:17:14:fc:14:22:2a:27:02:
35:a0:4a:d4:5d:5d:53:c6:19:3a:51:e8:f5:0c:e1:
f3:3d:dc:5b:18:50:4e:20:52:6c:6d:98:a0:0f:e4:
34:53:e6:56:e6:a8:e5:72:3d:3c:5f:cb:c8:f8:1f:
9f:98:87:5b:1a:0f:67:a6:8b:19:3b:af:e0:68:94:
36:9d:c5:89:3f:ae:fa:66:b6:eb:ff:9b:ed:40:c8:
e0:4b:03:91:9a:5b:05:88:64:41:31:37:b3:aa:2d:
99:0e:5b:db:f5:06:07:a6:a3:10:e7:a4:80:07:ed:
d0:53:a9:7a:9a:d9:cf:b7:a7:89:d5:fb:42:cf:d0:
0f:bf:7b:6d:c6:cb:95:e1:b8:6f:62:0d:b8:9c:1f:
b1:b7:71:12:17:23:76:93:6e:d3:44:fd:2a:7f:bf:
fd:b0:bf:ef:aa:e1:6b:bd:a6:55:b1:60:cc:59:e4:
98:53:0f:2f:41:a0:ef:2d:b6:de:0b:73:64:cc:f6:
96:76:aa:e0:d3:62:c4:2b:54:9d:0c:19:c4:b1:24:
b9:bb:ee:1f:81:9e:ba:b8:08:6a:09:ae:7d:8c:5c:
b5:46:22:13:0d:23:00:c7:11:79:1d:32:97:23:b0:
d7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D4:61:B9:94:98:8F:D3:5B:89:FD:55:C0:6C:1B:1D:B2:8D:BA:35
X509v3 Authority Key Identifier:
keyid:04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a6:ed:8a:d4:1e:86:0d:17:68:e4:aa:11:ef:59:34:84:8a:
9c:d1:b1:47:48:55:bb:14:04:a7:e7:64:33:f1:75:2d:ca:0d:
a4:e8:a8:a3:72:63:32:94:fb:16:0f:92:2c:c5:58:4f:c4:b5:
a3:f0:fb:22:64:f6:10:44:f4:5e:9b:cb:68:1c:f1:a2:f9:7b:
54:e3:bb:2f:33:f8:6c:25:ef:ee:67:b5:fa:0e:e5:27:41:9d:
99:15:fd:9a:6c:da:50:58:6c:3d:08:7f:47:2e:7c:29:33:b0:
a1:a6:cc:e9:63:c2:82:26:14:2b:e9:33:d6:2e:b3:37:46:f7:
d9:42:3e:49:fc:9d:c5:60:db:d7:39:71:5e:64:4e:60:3e:a2:
55:1d:e7:0c:a8:e3:af:2e:64:b4:68:40:c1:33:a3:45:73:3d:
bd:bb:a0:c1:24:f5:a6:b2:bb:60:5c:b6:c4:ed:f8:3c:11:46:
eb:f0:de:a6:d5:38:c0:74:3d:21:a0:c6:fd:2d:0e:50:8b:d3:
b7:dc:a1:97:30:64:0a:6f:4b:40:97:25:ff:6a:d2:7a:d5:5d:
84:47:7c:cf:52:63:78:6d:13:9a:d2:29:31:dc:4c:89:35:69:
ce:fe:b9:1b:63:d7:31:e7:ee:71:e6:48:c3:e3:1e:75:e3:e0:
76:e0:8c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:49:42 2025 by rpki-client