Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
File: BUHqG_Ktqt02piLrPqg13Ju2gZs.mft (raw, json)
Hash identifier: 7w7wDXWNZfYMHHdUKS4uhqDAi29ndIEP7EpZJwxtx+k=
Subject key identifier: A3:DA:F2:EC:55:72:37:66:43:44:AE:26:B9:B4:A6:4F:E6:32:CC:EF
Authority key identifier: 05:41:EA:1B:F2:AD:AA:DD:36:A6:22:EB:3E:A8:35:DC:9B:B6:81:9B
Certificate issuer: /CN=0541ea1bf2adaadd36a622eb3ea835dc9bb6819b
Certificate serial: 01976BF4A94B669777BB7C005CF9CC50185B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
Manifest number: 1443
Signing time: Sat 14 Jun 2025 01:01:25 +0000
Manifest this update: Sat 14 Jun 2025 01:01:25 +0000
Manifest next update: Sun 15 Jun 2025 01:01:25 +0000
Files and hashes: 1: BUHqG_Ktqt02piLrPqg13Ju2gZs.crl (hash: HtDsa67cetL/KU77hjz4Nv2+mfaBXNHvZ24AQh8dMDA=)
2: GIPybF1nvDpVQajMG8DWoYzoWhc.roa (hash: o+zoF0xKL9l55iOY2y1WPp4gwlsjSDH8TktFrJp4Gm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:a9:4b:66:97:77:bb:7c:00:5c:f9:cc:50:18:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0541ea1bf2adaadd36a622eb3ea835dc9bb6819b
Validity
Not Before: Jun 14 01:01:25 2025 GMT
Not After : Jun 15 01:01:25 2025 GMT
Subject: CN=a3daf2ec557237664344ae26b9b4a64fe632ccef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e4:4a:4e:e6:34:fa:32:dd:e5:41:a8:38:a8:
48:ea:bc:e8:07:60:32:4b:1a:81:d3:46:d2:95:c2:
1e:cf:a3:8d:16:aa:16:e1:03:f3:2f:50:91:e5:c8:
32:b1:d1:69:ed:47:14:eb:3e:dc:c3:af:57:b8:0a:
7d:c5:bc:53:0d:1f:c5:4f:90:4c:7b:c2:fa:dd:ca:
5d:d6:7f:d8:9a:95:c9:99:a7:ac:be:de:1e:71:68:
0f:43:24:20:ce:9f:07:05:0e:ec:f8:12:ca:d1:e0:
43:90:ef:a8:06:5d:a4:b9:a5:a7:06:46:d4:a5:b7:
2a:d0:7f:12:98:e6:1f:6f:6f:43:10:19:11:b0:96:
ee:67:79:4a:e5:5e:82:c3:c2:46:f2:4e:f0:48:62:
20:0b:3e:45:2b:ea:a5:bc:e9:c4:3f:d9:be:eb:0e:
37:91:38:18:6c:e5:24:94:91:69:2f:4e:45:aa:9d:
96:38:54:b3:08:24:92:60:0d:de:e2:5c:91:eb:14:
64:40:2e:58:f0:99:d3:12:08:ed:ba:78:08:e3:61:
53:39:d7:94:18:ff:df:e0:3e:b7:39:36:b2:ab:95:
14:1e:9f:a1:87:f5:ea:c6:38:d4:55:5c:8f:e1:4e:
63:b0:c1:31:2c:3e:1b:d7:8c:d9:7f:58:c1:08:14:
26:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DA:F2:EC:55:72:37:66:43:44:AE:26:B9:B4:A6:4F:E6:32:CC:EF
X509v3 Authority Key Identifier:
keyid:05:41:EA:1B:F2:AD:AA:DD:36:A6:22:EB:3E:A8:35:DC:9B:B6:81:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:c4:93:03:5c:a8:68:3a:6d:de:70:64:df:ab:d3:92:d4:55:
be:a7:1a:59:57:72:4e:14:f5:3a:f5:27:ab:1d:71:9f:2a:87:
c0:fd:a0:83:27:b8:ae:0b:8b:f5:6c:c2:56:0e:a4:3f:72:a2:
60:8d:94:5d:70:bd:61:a4:51:a8:50:7b:1d:8c:80:77:cd:30:
a5:ba:4c:5d:22:0c:2b:aa:6f:95:52:42:4b:7c:6d:50:57:c4:
27:11:46:7c:bf:d8:68:d7:ac:d2:2b:7a:0b:51:08:a3:8d:9d:
74:da:c7:78:20:c7:42:64:9f:82:63:8c:9f:35:f4:c7:c7:d6:
5a:9d:70:8a:4a:9c:de:60:47:83:a8:29:1f:96:df:7b:a2:a6:
93:3e:9d:5d:4a:00:c9:47:cc:eb:2f:1a:92:58:83:e7:d4:65:
d7:03:7a:98:40:03:f2:49:4c:ce:09:74:c3:b8:92:67:97:7b:
1a:f3:b7:7e:f2:8f:05:ac:de:9c:bb:1f:db:98:00:49:63:96:
2c:6d:cd:0e:e9:33:01:55:48:10:80:49:65:73:f3:dd:6a:4c:
a4:61:63:e1:fb:e1:af:52:1d:a4:33:88:c0:b8:b2:83:57:d3:
8e:a7:3c:13:4a:76:f1:0e:1c:a3:3d:ec:ec:ab:d4:1f:b3:60:
85:c0:d3:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdr9KlLZpd3u3wAXPnMUBhbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDFlYTFiZjJhZGFhZGQzNmE2MjJlYjNlYTgzNWRjOWJi
NjgxOWIwHhcNMjUwNjE0MDEwMTI1WhcNMjUwNjE1MDEwMTI1WjAzMTEwLwYDVQQD
EyhhM2RhZjJlYzU1NzIzNzY2NDM0NGFlMjZiOWI0YTY0ZmU2MzJjY2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteRKTuY0+jLd5UGoOKhI6rzoB2Ay
SxqB00bSlcIez6ONFqoW4QPzL1CR5cgysdFp7UcU6z7cw69XuAp9xbxTDR/FT5BM
e8L63cpd1n/YmpXJmaesvt4ecWgPQyQgzp8HBQ7s+BLK0eBDkO+oBl2kuaWnBkbU
pbcq0H8SmOYfb29DEBkRsJbuZ3lK5V6Cw8JG8k7wSGIgCz5FK+qlvOnEP9m+6w43
kTgYbOUklJFpL05Fqp2WOFSzCCSSYA3e4lyR6xRkQC5Y8JnTEgjtungI42FTOdeU
GP/f4D63OTayq5UUHp+hh/XqxjjUVVyP4U5jsMExLD4b14zZf1jBCBQmFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPa8uxVcjdmQ0SuJrm0pk/mMszvMB8GA1UdIwQY
MBaAFAVB6hvyrardNqYi6z6oNdybtoGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVIcUdfS3RxdDAycGlMclBxZzEzSnUyZ1pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi82NGEwNjMtNWM0ZC00MTBjLTg2YWEt
MjRhZmNlZjRmM2Y1LzEvQlVIcUdfS3RxdDAycGlMclBxZzEzSnUyZ1pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi82NGEwNjMtNWM0ZC00MTBjLTg2YWEtMjRhZmNlZjRmM2Y1
LzEvQlVIcUdfS3RxdDAycGlMclBxZzEzSnUyZ1pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt8STA1yo
aDpt3nBk36vTktRVvqcaWVdyThT1OvUnqx1xnyqHwP2ggye4rguL9WzCVg6kP3Ki
YI2UXXC9YaRRqFB7HYyAd80wpbpMXSIMK6pvlVJCS3xtUFfEJxFGfL/YaNes0it6
C1EIo42ddNrHeCDHQmSfgmOMnzX0x8fWWp1wikqc3mBHg6gpH5bfe6Kmkz6dXUoA
yUfM6y8akliD59Rl1wN6mEAD8klMzgl0w7iSZ5d7GvO3fvKPBazenLsf25gASWOW
LG3NDukzAVVIEIBJZXPz3WpMpGFj4fvhr1IdpDOIwLiyg1fTjqc8E0p28Q4coz3s
7KvUH7NghcDT3w==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:35:51 2025 by rpki-client