Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
File: Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft (raw, json)
Hash identifier: k5oLLogZCauPfA749FPSAB+lsryZRGeX+u9l7/fGW9I=
Subject key identifier: 1F:ED:E0:85:B2:9C:8E:88:A7:DA:B5:C7:35:E0:A6:7C:BD:58:C2:D7
Authority key identifier: 06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F
Certificate issuer: /CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
Certificate serial: 0198D4A7BDC79B790556FF0FA5ECA2A0EA99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
Manifest number: 1324
Signing time: Sat 23 Aug 2025 02:00:19 +0000
Manifest this update: Sat 23 Aug 2025 02:00:19 +0000
Manifest next update: Sun 24 Aug 2025 02:00:19 +0000
Files and hashes: 1: Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl (hash: 8j3OBn+A/+xNZqcVjIsLxN6jaQ4GzFtFdu4OgDTs7EE=)
2: kVsLk-GwVR6PxNcCkI01AGuQido.roa (hash: rA9QYx0rx3lXPqBazEwKKf6dcd24i+QHCtscNmScr3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:bd:c7:9b:79:05:56:ff:0f:a5:ec:a2:a0:ea:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
Validity
Not Before: Aug 23 02:00:19 2025 GMT
Not After : Aug 24 02:00:19 2025 GMT
Subject: CN=1fede085b29c8e88a7dab5c735e0a67cbd58c2d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4e:26:34:27:e3:af:29:bf:c9:c6:ab:77:28:
b5:19:5e:8e:6d:e5:db:7a:67:94:3b:a0:fe:ee:ea:
7d:d3:a6:3f:67:bc:c2:c9:41:0a:8e:f0:be:77:d9:
b7:bb:97:fc:c3:90:23:b2:96:a0:17:62:76:7f:86:
c5:65:ce:da:b7:ea:c9:e9:a0:b1:af:df:2d:76:17:
70:38:f0:b8:67:97:1e:63:15:31:5b:df:cb:19:a4:
6c:41:75:ee:4e:00:1e:2f:a7:e3:c1:78:63:76:00:
21:2e:7c:4e:f1:74:01:24:b7:f9:17:0c:cb:c4:11:
23:00:51:01:6e:15:bb:2d:ef:e3:f7:a9:02:e5:fd:
d8:be:e7:ed:ed:1e:45:18:f1:10:96:48:7c:e9:c0:
cd:73:08:b4:0e:6c:7e:13:ea:20:3a:0e:70:f0:03:
c8:27:95:80:a7:9f:c6:cb:db:e9:91:e6:c2:4b:5f:
7f:74:1b:a3:91:28:d8:9a:95:4a:5f:5c:ed:af:d4:
b6:a1:15:91:44:2e:a2:22:6d:cb:a0:57:88:ea:8d:
20:95:9a:41:ea:b2:1d:8d:1c:54:1c:5a:f1:3e:3c:
69:d5:0e:6c:71:3e:07:64:a4:67:db:18:13:7a:1e:
2d:3a:dc:5a:37:52:24:a1:5a:58:21:b0:e8:80:b4:
de:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:ED:E0:85:B2:9C:8E:88:A7:DA:B5:C7:35:E0:A6:7C:BD:58:C2:D7
X509v3 Authority Key Identifier:
keyid:06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a6:d4:ef:87:0a:72:62:d2:08:a9:94:b5:22:83:eb:cb:8c:
fe:5b:a7:f9:3a:46:73:db:1a:dd:48:91:33:e6:8f:9e:c0:60:
e5:1e:3d:84:50:07:1e:fc:88:c8:1f:34:3d:e2:f3:19:94:2b:
cc:94:22:39:a0:7f:45:41:ee:4c:93:13:0a:6a:19:35:1e:7f:
37:53:41:0d:ae:46:e6:3d:ee:8c:ff:49:2e:68:5e:e2:9d:3e:
2d:ae:0f:53:f5:87:d2:ae:aa:d5:f0:6a:1b:3a:20:6c:2c:9c:
68:8d:fe:e1:87:0b:ea:b8:4d:b3:80:48:a9:8c:c5:df:ae:4c:
03:58:c7:05:51:46:fd:da:6d:e1:bf:a3:ae:87:bd:c1:5b:69:
fc:ea:04:03:22:c2:a2:57:e0:a5:e4:5c:ea:15:e8:e8:77:e0:
94:96:8e:a3:b4:f5:9d:c1:f4:8e:fc:2f:1e:88:e9:f0:b7:fb:
f2:d1:93:9d:32:11:c3:b7:93:c0:f2:95:83:25:eb:02:ef:0f:
26:1d:2c:68:23:21:1b:c4:92:7b:48:41:8d:18:69:62:b2:ea:
26:5b:a9:43:17:5c:39:e2:7a:9b:91:43:ce:a1:1b:fc:79:a7:
1b:e0:cc:48:f3:3d:16:d0:b2:55:20:72:c2:87:13:aa:93:1d:
a8:99:4a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:16 2025 by rpki-client