Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
File: BOIiiGeO__Ff6nne8kxgZ84kqic.mft (raw, json)
Hash identifier: UBcENCokyDyP+7eoU1P+EZgJEzrEL5RX/FCvWzWrPjc=
Subject key identifier: B3:C9:14:BF:CA:B3:F0:77:CF:AE:7F:3C:07:01:40:CD:35:3A:10:5B
Authority key identifier: 04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27
Certificate issuer: /CN=04e22288678efff15fea79def24c6067ce24aa27
Certificate serial: 0199FBEAE39B48DC34B20477D2CB5249E72E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:01:38 +0000
Manifest this update: Sun 19 Oct 2025 10:01:38 +0000
Manifest next update: Mon 20 Oct 2025 10:01:38 +0000
Files and hashes: 1: BOIiiGeO__Ff6nne8kxgZ84kqic.crl (hash: svelnOw0/ajPwlUMrmElsy/ajwWyJvjdEwpeE7Fha5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:e3:9b:48:dc:34:b2:04:77:d2:cb:52:49:e7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e22288678efff15fea79def24c6067ce24aa27
Validity
Not Before: Oct 19 10:01:38 2025 GMT
Not After : Oct 20 10:01:38 2025 GMT
Subject: CN=b3c914bfcab3f077cfae7f3c070140cd353a105b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cd:77:a9:2a:a2:8a:34:f4:7d:13:4d:f8:c9:
75:81:f4:d5:dc:8f:73:c0:d0:f3:ec:1b:04:b5:b3:
f4:26:b6:6f:28:3c:2c:fa:6c:56:f8:20:8a:63:5e:
09:37:f3:b4:54:c3:c8:cd:8c:d8:9b:b9:25:b2:16:
d5:77:9a:74:6a:fa:61:0d:8e:1f:7c:8c:c1:2a:f3:
9f:f3:98:1c:90:b0:b7:9a:ed:50:6e:c2:c2:03:ea:
63:9d:f2:b3:70:d6:77:f4:b1:de:54:cb:82:34:82:
9d:d0:02:65:70:19:68:1e:6a:7f:99:fe:0c:2b:50:
ed:47:a5:eb:9c:c2:77:fc:fd:e3:c0:e4:54:f4:f9:
35:45:18:d1:bc:3a:d3:f7:ff:3e:6b:f3:69:1c:be:
30:f7:fc:2e:b6:53:31:5e:cd:8d:08:b9:89:c7:b1:
84:2c:0c:ba:67:68:d0:4e:05:18:90:87:a9:09:eb:
c3:b2:9f:86:2e:35:11:af:d9:41:b5:eb:1d:10:1f:
8c:34:f8:39:73:b5:5c:f4:96:d1:23:e0:d9:5b:97:
15:c9:33:a8:b5:15:d4:ce:2b:43:66:ff:5b:0f:6f:
3a:3c:d6:43:0d:77:11:8f:dc:2b:58:69:fd:ff:35:
dc:13:16:75:ac:1b:da:9e:32:39:8d:3b:ac:09:cf:
79:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C9:14:BF:CA:B3:F0:77:CF:AE:7F:3C:07:01:40:CD:35:3A:10:5B
X509v3 Authority Key Identifier:
keyid:04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e6:67:49:70:df:44:77:f0:1d:e1:55:f9:cd:94:1e:37:5b:
5a:54:d7:0f:1e:a0:a9:ae:fe:ac:ac:9e:61:c3:1e:a1:7e:9e:
29:3c:82:ff:b2:9f:04:b4:3e:92:29:a4:71:73:eb:64:5d:f5:
61:7c:8d:cd:d8:f5:75:07:3a:5c:6e:28:7c:f6:70:dc:33:45:
3c:be:5e:e1:82:c3:b3:fd:21:5a:af:65:2f:99:91:b5:d5:68:
58:b0:2e:c8:0b:24:de:d4:55:9e:44:fb:2f:d9:78:d0:9b:0f:
46:36:e9:0d:6e:9d:8d:00:3f:df:e4:8b:ee:46:75:34:4e:6f:
e7:1a:73:27:30:29:7e:46:40:e2:e4:d8:0b:c4:3a:76:27:30:
8b:bf:ff:75:ac:19:94:d1:69:eb:c5:ea:29:33:81:8f:c3:32:
2e:a1:c9:56:af:ff:b2:4f:e6:e6:ae:67:64:09:f8:41:b7:b3:
fd:d8:b9:84:c0:1d:c6:91:ac:0d:ef:9f:ce:6e:b2:f6:7d:f0:
b3:a5:5f:41:14:b5:ba:2c:8c:23:d0:02:40:01:7d:43:a1:ee:
f9:2a:cb:56:fd:68:d7:1d:b1:d0:61:26:28:fc:48:7e:36:ef:
f2:74:15:8c:ea:08:43:8a:71:11:33:9f:be:ee:96:33:c2:e5:
08:ee:d3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:40 2025 by rpki-client