Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
File: boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft (raw, json)
Hash identifier: dj988ZoZWNoxuuHi4vGYrw/ZFjYxwjJ1Vtp04OcX3mw=
Subject key identifier: 90:57:5E:07:A3:F9:67:34:06:64:C1:F9:D7:CE:62:5A:E6:1E:3A:8C
Authority key identifier: 6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E
Certificate issuer: /CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
Certificate serial: 0198D5F1409C5EF8F617C549A18C526007B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
Manifest number: 15A3
Signing time: Sat 23 Aug 2025 08:00:14 +0000
Manifest this update: Sat 23 Aug 2025 08:00:14 +0000
Manifest next update: Sun 24 Aug 2025 08:00:14 +0000
Files and hashes: 1: 1taXUDcoKkrQ-dr580_7U9lAPFs.roa (hash: v10BOdn0ARMHeuLgu+DFFhQlFSBEpSVcbwEGZOdb93k=)
2: Q5r7HzOrwEP1GGFCPc7woWNwbtw.roa (hash: U5JbPSv/06NMHfKHAXVH+Wi4JladerrLqdwWPT8pKOs=)
3: boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl (hash: FlbT+J3YkkbHYL1q5ovbllB7X2yLf3VQ1z0nu3yZX34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:40:9c:5e:f8:f6:17:c5:49:a1:8c:52:60:07:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
Validity
Not Before: Aug 23 08:00:14 2025 GMT
Not After : Aug 24 08:00:14 2025 GMT
Subject: CN=90575e07a3f967340664c1f9d7ce625ae61e3a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:99:09:52:03:69:41:f3:1b:a3:fc:e4:6c:e5:
c0:15:40:72:4b:f6:d6:c4:86:40:88:2d:09:12:25:
ad:36:02:30:74:a2:da:1d:a5:25:7b:56:0f:ac:70:
62:19:ce:48:8a:8e:5e:44:d3:e5:a0:81:5f:05:66:
d1:59:fa:1b:d7:d6:6f:da:d4:3f:e1:4e:41:79:3c:
d1:d7:a5:8d:4e:cf:76:d0:b6:15:07:31:f7:2b:83:
ae:ed:fb:02:9d:33:68:92:a4:b8:03:3b:7e:2a:42:
07:86:32:87:d7:56:12:67:f6:9e:8d:6e:f7:bd:6b:
68:ce:19:0c:70:84:aa:91:4b:79:5d:1c:93:2f:41:
aa:4d:a5:3e:e5:91:66:43:54:c5:fc:ff:f1:37:54:
c1:af:e9:da:7a:be:4c:17:76:5e:d8:56:e8:54:7b:
86:88:f0:4e:de:09:dc:99:f4:e3:53:54:6f:0e:aa:
13:c7:6e:30:86:4c:0c:44:d4:43:30:57:d1:ed:51:
d5:fb:24:d5:dd:aa:92:b2:d0:46:c3:e1:e8:06:5e:
d6:43:81:a1:88:72:f4:96:ca:0a:10:aa:ab:3b:f8:
ff:85:55:6e:b0:d7:36:4c:1c:0a:c7:39:34:9d:39:
11:e8:d3:17:dc:9e:b4:8a:22:64:ca:5c:e2:8d:e5:
b0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:57:5E:07:A3:F9:67:34:06:64:C1:F9:D7:CE:62:5A:E6:1E:3A:8C
X509v3 Authority Key Identifier:
keyid:6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:4e:12:08:d9:44:7d:f9:ae:4f:c6:ea:ff:d7:b2:e2:f3:c1:
18:9d:fe:5d:74:d2:9f:40:e8:07:9b:bc:0b:94:ee:7a:80:e7:
5c:db:a4:2d:7a:d6:e4:27:3d:8c:0f:6c:52:59:1d:e5:17:da:
00:44:2c:77:88:bb:c8:e9:a3:83:0d:d7:03:3b:3a:ec:60:9f:
28:1e:fc:09:a8:46:a0:07:ec:7c:a8:12:69:0b:85:de:0d:d4:
29:0c:4f:15:5b:f1:5b:8a:bf:3e:79:93:02:1a:be:79:5c:61:
6f:af:b8:5d:cf:e6:e2:65:22:e4:8e:94:92:8d:19:8a:65:96:
77:d8:fc:a6:ab:20:59:65:35:3d:fc:50:7d:be:f5:a4:e1:ad:
a5:f4:14:74:32:43:b3:a3:63:11:69:85:6d:cb:64:38:85:d3:
2b:77:60:08:14:d0:f1:ac:dd:3e:31:ad:9b:c9:25:49:94:6d:
ef:78:ef:9d:a8:01:a3:57:8d:ab:53:07:e4:1d:db:91:c8:a6:
a6:b5:98:5e:f8:36:a9:af:05:e5:79:0e:3c:e0:b5:81:84:0f:
6f:e1:d8:70:61:27:c1:0e:be:89:07:75:fa:bf:24:8b:83:2b:
ef:e0:b9:e1:65:db:a4:10:22:1f:42:dc:16:74:ca:61:ec:fb:
0e:b5:5d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:25 2025 by rpki-client