Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
File: BOIiiGeO__Ff6nne8kxgZ84kqic.mft (raw, json)
Hash identifier: JUzHcJ0pJa/l7DvMgzMUn6xPc81ZDHWEoamQFnWBwNo=
Subject key identifier: 81:EE:96:A3:8C:6F:18:4A:83:06:AF:65:47:78:D7:B7:5C:52:C4:F6
Authority key identifier: 04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27
Certificate issuer: /CN=04e22288678efff15fea79def24c6067ce24aa27
Certificate serial: 0197B6A08D3A864AB3DC49855EEDAF20C8DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:01:04 +0000
Manifest this update: Sat 28 Jun 2025 13:01:04 +0000
Manifest next update: Sun 29 Jun 2025 13:01:04 +0000
Files and hashes: 1: BOIiiGeO__Ff6nne8kxgZ84kqic.crl (hash: fB8EtVdHj7sHMJQzFXrJHMtyeT5Bf6+uJ6Y9i12CMO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:8d:3a:86:4a:b3:dc:49:85:5e:ed:af:20:c8:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e22288678efff15fea79def24c6067ce24aa27
Validity
Not Before: Jun 28 13:01:04 2025 GMT
Not After : Jun 29 13:01:04 2025 GMT
Subject: CN=81ee96a38c6f184a8306af654778d7b75c52c4f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8f:fe:32:60:93:d9:16:15:aa:f2:e4:c3:7b:
8c:b4:78:26:d3:6c:40:80:a8:c7:d8:2d:54:45:51:
82:47:86:93:67:1a:66:32:fa:6b:10:5d:0b:6e:a9:
ca:b4:f8:9b:83:f5:73:d2:6c:c2:f8:ff:46:d1:89:
19:ad:97:4b:52:2e:e9:6c:31:3e:a8:a4:67:d9:c3:
e5:65:f2:75:5a:d9:6a:08:54:fe:ac:df:cf:bd:36:
36:71:9f:45:39:d2:04:b7:e8:3c:1e:6b:ed:87:dd:
a7:6f:4c:07:e2:b6:16:91:14:e0:bf:e3:b4:a3:94:
c4:39:d7:f2:42:bf:27:d7:2e:87:a9:89:cd:67:01:
33:5f:6f:db:98:97:04:80:e4:85:ab:6c:a3:3e:f3:
e3:79:c9:55:8d:fa:19:1b:9c:e5:34:2e:a6:c2:e8:
7c:52:df:6c:87:82:b1:c1:51:cd:12:b5:9f:5d:db:
94:c2:3a:9d:79:9f:66:52:28:a1:3c:0f:43:05:4b:
99:57:e4:69:bd:89:8e:7a:97:88:a8:e6:4a:b5:da:
89:8f:39:09:90:5f:28:75:b7:d6:d9:1b:66:bb:3c:
78:e0:c5:b6:b8:88:d2:62:ea:c8:b3:0b:9c:11:32:
8d:17:dc:e9:94:c4:c0:4e:7a:a8:fd:bc:a4:b0:53:
ca:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:EE:96:A3:8C:6F:18:4A:83:06:AF:65:47:78:D7:B7:5C:52:C4:F6
X509v3 Authority Key Identifier:
keyid:04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:15:63:4f:db:fe:19:a5:19:6f:c9:5b:3e:79:b8:51:f8:d7:
65:9e:b5:69:4d:39:ce:90:df:01:ea:4a:e7:f1:ae:ba:a7:7e:
66:72:da:25:c5:1f:f1:2c:50:38:b1:55:23:a9:ec:22:8d:6f:
cd:d0:54:e9:f8:f0:08:31:4e:bf:b9:b3:7f:3f:6f:a4:e8:3b:
4a:4d:f5:3a:4e:f9:cc:6f:3a:54:99:95:e9:bf:4a:1a:98:51:
57:a1:d4:ae:ce:97:03:89:f1:12:0f:50:be:e1:2e:8e:30:84:
7e:a4:7f:8f:07:02:38:fd:15:44:cc:14:63:21:ef:ff:ec:2c:
2c:d8:b2:1d:af:d7:0c:1d:08:15:f5:2d:27:72:65:52:fc:59:
60:d9:90:19:df:36:f4:d0:b4:96:f0:40:f2:65:1d:bd:84:f5:
0c:50:2a:45:bc:40:0a:17:c9:1f:8a:de:8f:00:46:2a:c9:b9:
60:6b:10:b4:6b:54:d3:77:b5:1e:c9:34:3e:8d:31:ad:3a:e9:
da:ea:72:2e:d7:47:53:a8:9c:c9:cb:c0:ef:81:06:11:89:7d:
24:37:fc:51:49:d0:7b:ba:54:09:e0:f5:bc:c7:44:01:30:f0:
42:89:b9:cd:54:8c:d9:17:7d:b1:27:a6:1a:0c:73:5b:31:18:
56:0f:88:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:21:11 2025 by rpki-client