Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
File: Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft (raw, json)
Hash identifier: OrF5NgAg/DFcU3us6E2Wzu0hoKDigeHF77deBe7xUpo=
Subject key identifier: 89:3C:0B:85:FC:1F:0B:47:3F:E8:DE:72:0B:B4:13:17:22:CB:63:DF
Authority key identifier: 06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F
Certificate issuer: /CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
Certificate serial: 0197B6D75844D8F6237000F143ED2603D590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
Manifest number: 1290
Signing time: Sat 28 Jun 2025 14:00:55 +0000
Manifest this update: Sat 28 Jun 2025 14:00:55 +0000
Manifest next update: Sun 29 Jun 2025 14:00:55 +0000
Files and hashes: 1: Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl (hash: gbsDTv4GmSmltdwkuprMwS0GdVwDVny32L0cdSNnmBA=)
2: kVsLk-GwVR6PxNcCkI01AGuQido.roa (hash: rA9QYx0rx3lXPqBazEwKKf6dcd24i+QHCtscNmScr3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:58:44:d8:f6:23:70:00:f1:43:ed:26:03:d5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
Validity
Not Before: Jun 28 14:00:55 2025 GMT
Not After : Jun 29 14:00:55 2025 GMT
Subject: CN=893c0b85fc1f0b473fe8de720bb4131722cb63df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e7:10:45:40:5a:3d:fb:15:25:b2:c3:ab:d8:
ca:72:6f:0f:9b:94:81:1b:3e:da:1b:b2:95:cd:01:
24:69:ba:75:a0:11:0f:ab:a8:bf:5e:3c:c7:d1:3a:
05:6a:c3:f0:2a:49:11:5f:56:8f:02:5b:ba:58:48:
86:67:2c:ba:d5:f3:4e:ee:5f:4d:9c:4c:35:cc:76:
49:13:3f:28:11:8d:46:75:84:df:de:3a:80:fd:33:
02:e0:4f:a8:67:d1:cf:3c:22:9c:cb:8d:74:88:5c:
88:83:e8:0f:b9:db:49:8f:c4:22:13:d9:c4:b3:bc:
0d:86:8e:fc:ec:9a:eb:47:0f:c8:fe:a6:af:93:94:
a9:7a:e2:5a:0d:26:8d:96:07:2f:99:5e:3a:ed:5a:
38:f9:58:a1:b8:0b:1c:f1:58:87:ad:e2:a5:0d:a7:
08:da:df:48:fc:02:58:31:f9:31:b6:67:01:76:94:
c5:30:46:9b:fc:38:f2:c4:ee:91:fd:10:8f:c8:d3:
a6:bd:85:c6:8e:73:7c:81:2a:f3:6b:7c:a7:a2:ec:
f1:c1:b6:e7:fe:b4:f0:63:3e:f2:6b:78:57:60:96:
48:76:7e:9d:e6:6b:87:9d:8f:a5:2a:84:99:6a:87:
0f:e8:77:77:7c:8e:06:d5:cb:48:14:ef:0e:6e:e7:
5d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3C:0B:85:FC:1F:0B:47:3F:E8:DE:72:0B:B4:13:17:22:CB:63:DF
X509v3 Authority Key Identifier:
keyid:06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:20:21:69:35:d3:ca:35:d3:4f:95:5a:7f:aa:b7:f6:37:91:
02:17:5b:d8:f1:7b:a4:5a:eb:be:47:c1:a9:a0:06:f3:50:c5:
78:17:c0:dc:c0:5d:64:6e:95:c3:04:e4:71:bd:9f:86:4d:de:
50:d5:93:70:57:27:bf:b8:89:9b:28:95:93:84:06:b1:cf:0d:
9e:aa:3b:e3:8e:6d:93:12:8c:82:43:ea:35:ee:df:2a:84:3c:
07:f8:26:e3:f7:ca:a6:06:48:6b:8b:6e:cb:0f:d8:63:35:e6:
15:b6:6f:6c:3c:09:e7:02:23:c9:bb:9d:e5:e8:fd:79:fb:f1:
d4:56:4b:68:97:c9:57:71:40:5a:9c:24:8d:1b:26:9f:ef:64:
9d:db:de:e6:2b:25:d5:be:a1:dd:b3:56:d2:1a:9e:ca:b8:a3:
c1:bb:0d:dd:0a:61:03:31:f9:c1:88:be:1e:51:b6:88:47:7c:
41:b6:01:10:fc:cf:b7:dd:2e:6e:b0:fc:3f:0e:bb:81:e5:af:
a6:d4:37:ce:c1:ad:4b:31:d0:6b:d2:6c:96:11:24:24:7f:b4:
46:7c:78:e5:15:21:ae:f6:0b:ff:86:19:26:63:e0:1c:94:96:
8d:89:3e:bc:17:30:95:c3:2f:80:7f:75:be:27:ba:e8:9b:74:
23:a8:b7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:17 2025 by rpki-client