Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
File: Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft (raw, json)
Hash identifier: EOHHV+G6V2qM6CUuuW6tvz9YXhB6EFpi/eZFsbSEK2M=
Subject key identifier: 8F:FA:45:60:45:F9:F8:CC:7C:3F:83:AA:F2:C9:EC:70:B9:A9:E6:7B
Authority key identifier: 06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F
Certificate issuer: /CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
Certificate serial: 0199FC2191EC49121073F9A233FC8B210985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
Manifest number: 13BD
Signing time: Sun 19 Oct 2025 11:01:22 +0000
Manifest this update: Sun 19 Oct 2025 11:01:22 +0000
Manifest next update: Mon 20 Oct 2025 11:01:22 +0000
Files and hashes: 1: Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl (hash: wRvu3fwfP9j0tTEjMwxwBuI9W735pxG/BlpFZfxYU5U=)
2: kVsLk-GwVR6PxNcCkI01AGuQido.roa (hash: rA9QYx0rx3lXPqBazEwKKf6dcd24i+QHCtscNmScr3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:91:ec:49:12:10:73:f9:a2:33:fc:8b:21:09:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
Validity
Not Before: Oct 19 11:01:22 2025 GMT
Not After : Oct 20 11:01:22 2025 GMT
Subject: CN=8ffa456045f9f8cc7c3f83aaf2c9ec70b9a9e67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e8:b5:9a:0f:52:63:be:ee:88:58:42:87:23:
ab:41:f8:e0:7a:2d:42:ec:82:b2:4a:64:14:59:c7:
84:f9:5c:09:08:49:a4:fd:e6:db:ef:81:33:e3:9b:
75:28:a0:31:73:07:ce:66:f5:6c:ee:1f:f9:dd:21:
01:be:b1:26:4d:2f:56:6b:b3:fd:8e:82:ed:cf:db:
4a:3f:a1:4c:b1:9c:ee:31:0f:b4:e3:ae:4a:36:73:
71:e9:ba:82:3a:19:00:1b:6d:82:3c:d0:98:03:0b:
13:6a:19:1c:a9:39:a7:e6:8a:e6:ad:f7:26:f6:c9:
a5:fd:7d:9f:f1:c1:a1:2b:43:b6:5a:a9:60:94:df:
e5:46:8c:51:7b:e8:2e:80:94:e5:54:23:a8:5e:42:
e4:fa:88:39:c7:5c:bb:aa:e4:81:ea:ac:71:f4:0c:
52:aa:cd:72:ad:a1:95:7c:16:0c:3c:8c:4c:53:26:
04:1d:48:b5:ea:fe:c4:af:0c:65:52:f5:59:b5:e9:
94:64:1e:7d:60:01:10:c6:68:a9:82:dc:e3:5f:d3:
dd:d8:a5:e4:bd:72:8c:e2:ff:4d:9a:4e:c9:d4:d1:
26:b3:d9:da:16:c6:b6:e1:28:34:ea:e8:2c:3e:03:
7b:3b:99:0a:70:86:85:3e:f9:bb:22:f7:c1:01:26:
7b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FA:45:60:45:F9:F8:CC:7C:3F:83:AA:F2:C9:EC:70:B9:A9:E6:7B
X509v3 Authority Key Identifier:
keyid:06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:d6:8d:cd:80:e5:69:1d:62:c7:75:b3:93:0f:59:7f:84:32:
40:b3:6f:a4:c5:10:e6:c4:24:f4:43:f0:3d:37:7c:1d:1b:ac:
13:dd:de:90:c2:67:48:21:50:23:96:c2:b0:e1:3b:1c:6d:b7:
dc:66:07:c7:16:72:67:bc:34:b5:90:d3:5f:7e:ca:b7:41:f8:
47:e4:30:1c:af:0f:7e:f9:ab:e0:88:52:6b:32:a5:e8:6a:ab:
75:83:83:3d:cb:f0:b2:2d:9c:f4:7c:4d:cc:6a:2b:e1:47:e3:
eb:5c:08:f0:a4:48:11:42:b1:b8:34:4e:b1:3e:b3:d8:67:bc:
4d:92:28:a2:2e:54:0f:1e:22:2a:8d:84:70:16:eb:43:a3:8a:
41:35:ea:e5:69:20:35:1a:a4:a4:31:26:ef:bf:22:28:47:c7:
cb:5a:17:47:d6:0e:7e:8a:a9:07:10:d2:08:e9:d2:8e:93:69:
f3:9e:29:1a:95:45:ae:91:56:63:ae:06:a8:37:9c:d3:d3:84:
77:7b:73:43:7e:5c:13:4d:b3:a1:40:43:b8:c9:b9:87:e4:68:
bb:a1:b1:06:cb:1d:b8:0e:1d:43:64:a7:1c:40:8b:f9:3f:9c:
fb:f7:69:af:3a:36:c8:2f:2e:f6:6b:be:3e:ac:99:52:be:44:
d3:f4:9e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:39 2025 by rpki-client