Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
File: BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft (raw, json)
Hash identifier: tAKCVQunQlewnykuwB4LhqfMiX4AL8ME/HEHX5NjhzE=
Subject key identifier: 43:3D:D0:24:AA:EA:7E:0E:3B:DC:BD:8A:11:0F:E0:BE:50:B9:A5:11
Authority key identifier: 04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47
Certificate issuer: /CN=04e1831c9eef1b795437fcbd43e295705a1a0547
Certificate serial: 0199FBEBD27F912D7C1A5D846BF98B56A176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
Manifest number: 13D1
Signing time: Sun 19 Oct 2025 10:02:39 +0000
Manifest this update: Sun 19 Oct 2025 10:02:39 +0000
Manifest next update: Mon 20 Oct 2025 10:02:39 +0000
Files and hashes: 1: BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl (hash: NkpZffwaT7BmGSTQHOEpm7jp+0oxmCjeJ0PkSzVkTlQ=)
2: Y8uuAfRYwx-prudgnWgSWZq97Sw.roa (hash: tQZOFDuCS8oLjLePLd8o7D+wQ3I3iTNhsHY9sfMRza8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:d2:7f:91:2d:7c:1a:5d:84:6b:f9:8b:56:a1:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e1831c9eef1b795437fcbd43e295705a1a0547
Validity
Not Before: Oct 19 10:02:39 2025 GMT
Not After : Oct 20 10:02:39 2025 GMT
Subject: CN=433dd024aaea7e0e3bdcbd8a110fe0be50b9a511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e5:26:03:c4:8b:2c:eb:11:06:81:4b:2c:c3:
4c:a3:dc:5f:bd:78:a9:f1:3d:74:3d:e9:85:83:58:
0e:8d:49:31:72:03:d3:aa:27:70:eb:37:25:7f:92:
e0:df:94:bd:c2:ef:69:a1:96:3d:25:9e:e2:61:ee:
01:52:80:c5:d9:da:5b:fe:af:0d:bd:2e:56:2a:b1:
9a:d7:b5:8a:31:d6:aa:6d:b5:b7:cd:73:47:76:49:
d8:0a:e2:79:a4:58:74:77:45:c6:96:cb:39:a2:b2:
dd:fb:ad:fd:d1:6b:86:65:a5:fa:1b:1a:25:66:d5:
5c:37:49:7b:6f:90:17:7d:92:ab:83:c8:15:5d:eb:
e4:90:96:a8:08:e7:e3:db:90:c3:e2:e4:ba:bf:e6:
9e:d4:6c:db:59:f6:a4:eb:97:f3:81:78:65:0f:1a:
c2:a6:ce:3a:b1:d5:6e:5a:92:65:b5:35:7c:6d:19:
a6:7b:27:b3:c6:34:10:6c:f7:7c:26:a0:38:67:08:
87:43:63:df:52:69:9d:da:c8:6d:4c:58:ea:10:fa:
40:07:59:6e:c0:24:63:05:74:d6:67:df:7b:23:fd:
d9:ca:4f:8e:24:cf:3c:59:f7:fe:9a:b2:31:74:63:
c6:0c:80:f4:a8:ca:fd:77:cb:b9:c5:66:db:f1:31:
ae:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3D:D0:24:AA:EA:7E:0E:3B:DC:BD:8A:11:0F:E0:BE:50:B9:A5:11
X509v3 Authority Key Identifier:
keyid:04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:86:41:4c:54:74:dd:a5:84:4f:5d:67:7c:12:cb:b3:dc:ee:
1b:24:d5:dd:93:d2:af:94:a0:1c:d7:17:0d:32:09:30:2c:e2:
82:6a:a5:13:f8:67:98:48:81:78:4f:a7:32:d5:4f:f2:34:96:
af:b4:1e:f2:7a:6d:8b:43:6d:d7:21:3d:17:d5:7e:28:43:60:
5b:ec:b5:56:af:58:56:d0:ad:ee:cf:d8:68:7f:f6:f6:ae:69:
10:80:62:9e:84:af:3e:04:1f:6b:49:04:51:59:46:75:d6:55:
b5:4e:4c:9a:8a:02:ce:2f:e5:d8:6b:40:7b:82:00:04:70:8d:
f7:c8:a0:74:bf:0d:5b:2a:be:bc:e4:0f:fe:7d:89:03:e3:16:
e8:2b:23:ea:5e:e5:ec:ce:af:2b:2b:2f:e7:40:d2:87:27:90:
eb:4b:89:e3:8c:7a:c9:0a:6a:8f:49:bb:95:6a:62:f2:52:a4:
95:8a:f5:cd:b1:2f:a3:7d:f9:ed:69:25:ea:3c:f1:3b:ac:ce:
73:c6:42:24:96:d9:44:47:5c:48:a8:c4:ba:cc:1d:77:0e:0e:
3a:84:6f:2a:91:59:3c:8b:21:85:4c:20:2f:a2:e6:1a:53:e9:
6b:84:9b:4d:48:1c:33:75:bc:c9:7e:fc:d2:66:91:27:65:15:
70:e5:50:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:01 2025 by rpki-client