Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.mft
File: bov4V64H8NXv1Xda1SnOTu2bfS8.mft (raw, json)
Hash identifier: +DlVtRzO/ru8Xd+fXCUtpq5NVaSvtM+oqkVCLK7531E=
Subject key identifier: A1:48:B6:0D:0A:26:D2:6B:D6:69:D1:C0:79:5E:3D:35:DA:4B:C0:A8
Authority key identifier: 6E:8B:F8:57:AE:07:F0:D5:EF:D5:77:5A:D5:29:CE:4E:ED:9B:7D:2F
Certificate issuer: /CN=6e8bf857ae07f0d5efd5775ad529ce4eed9b7d2f
Certificate serial: 0199FEEBEB0C74D7BB94084AE4F631ED48CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bov4V64H8NXv1Xda1SnOTu2bfS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.mft
Manifest number: 0146
Signing time: Mon 20 Oct 2025 00:01:37 +0000
Manifest this update: Mon 20 Oct 2025 00:01:37 +0000
Manifest next update: Tue 21 Oct 2025 00:01:37 +0000
Files and hashes: 1: bov4V64H8NXv1Xda1SnOTu2bfS8.crl (hash: rj71vK4sPNZaRJyTmnof6drrrW5rVCpKuXFGwMeaqrE=)
2: xg4TB9W34T_2H7A6G22FFhh44IA.roa (hash: clTVUz8w+JASk2G55oRaZ8c/R0rPlvX1Is7X2/fJkW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bov4V64H8NXv1Xda1SnOTu2bfS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:eb:0c:74:d7:bb:94:08:4a:e4:f6:31:ed:48:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e8bf857ae07f0d5efd5775ad529ce4eed9b7d2f
Validity
Not Before: Oct 20 00:01:37 2025 GMT
Not After : Oct 21 00:01:37 2025 GMT
Subject: CN=a148b60d0a26d26bd669d1c0795e3d35da4bc0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:85:93:d6:3f:cd:f0:35:e4:d4:6a:fd:b3:06:
62:a1:05:95:ab:38:4c:9a:08:59:8f:3d:a3:bf:d1:
33:d8:9f:f3:72:73:23:24:3e:41:13:5f:b9:1c:41:
7f:d0:52:3d:ea:03:55:2f:ec:57:e6:b2:6c:9f:67:
fe:87:59:82:3a:8b:6d:fe:f4:04:5c:23:e4:e2:10:
4e:21:a7:09:a8:03:a5:16:48:55:f2:df:4b:07:06:
2c:d8:1e:bf:14:48:8e:26:a2:e6:8c:31:35:cb:1f:
78:38:a3:5f:11:79:ef:48:08:aa:39:7f:7f:08:73:
cb:2f:8d:fa:7d:25:43:9f:d2:f2:a0:52:23:1b:76:
b9:ec:72:d1:bb:e5:27:a8:cd:ee:6b:29:00:e1:5b:
71:62:56:13:c0:56:c8:fe:b4:67:70:49:a8:e3:c3:
85:a0:95:ef:77:bc:be:b1:3b:f7:c0:a2:0b:8a:39:
6a:b0:48:67:e7:31:dc:50:8d:d9:4c:ba:8f:3b:a9:
b3:e2:f3:a9:62:8a:85:da:14:22:dd:dd:3a:6f:6d:
02:18:14:bd:91:3b:71:b2:ab:1c:02:22:18:99:78:
4b:e1:ac:34:a9:d1:cc:b9:52:9d:83:2b:fd:af:7a:
01:3f:ef:5b:81:65:4f:6c:4d:aa:20:bf:aa:93:99:
5e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:48:B6:0D:0A:26:D2:6B:D6:69:D1:C0:79:5E:3D:35:DA:4B:C0:A8
X509v3 Authority Key Identifier:
keyid:6E:8B:F8:57:AE:07:F0:D5:EF:D5:77:5A:D5:29:CE:4E:ED:9B:7D:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bov4V64H8NXv1Xda1SnOTu2bfS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b9:8d:d0:ad:ab:94:c4:6a:a0:93:d6:aa:68:24:b3:c8:19:
40:48:3b:04:c7:c5:21:15:17:04:57:bf:96:74:41:33:2b:be:
ed:95:a0:23:84:0f:80:26:32:00:0c:6b:ee:50:11:45:71:79:
18:dd:a0:66:7a:47:67:6f:81:27:1c:05:7e:2e:9a:b9:ca:1f:
bd:e9:c2:f1:cb:dd:9c:87:04:bb:77:12:e8:f8:b5:38:68:9e:
f5:30:0a:23:40:5f:59:a2:34:ed:04:d3:eb:1b:9b:b0:51:4c:
a2:24:ff:7d:48:20:6b:91:00:8c:49:b3:8d:f7:9b:39:44:a4:
39:4f:bf:3a:6b:93:15:3c:6e:a7:2b:08:36:67:d9:6b:82:75:
6d:67:4e:0d:dd:98:9f:be:d6:fb:c0:d7:4c:d4:c8:31:0a:04:
c7:d6:16:af:ef:a0:d6:2f:e0:e2:86:d2:2e:39:a4:3f:6e:40:
a4:4e:ea:23:0d:9b:c9:68:b1:3d:10:0d:24:ad:c7:d7:9a:84:
e3:3a:18:e4:62:11:68:84:22:da:bb:dd:87:a3:ca:d9:72:cb:
d9:d4:6f:b0:d0:92:9c:e4:ef:05:bc:88:47:a4:27:eb:b8:86:
75:68:e1:4d:4a:11:22:a9:35:ba:21:05:09:4f:d9:d8:4d:24:
11:f2:69:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:57 2025 by rpki-client