Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
File: BUQJodiwcvfbAkUouXIDOb27sQY.mft (raw, json)
Hash identifier: T7wgCmF/LgN3lYxiclztMHr8vIFCZgTBYP7d6DZ4sTE=
Subject key identifier: 64:DC:3B:1D:87:5B:BE:EE:59:A4:9E:C2:C9:ED:0D:EC:73:6C:B9:E2
Authority key identifier: 05:44:09:A1:D8:B0:72:F7:DB:02:45:28:B9:72:03:39:BD:BB:B1:06
Certificate issuer: /CN=054409a1d8b072f7db024528b9720339bdbbb106
Certificate serial: 0196767A9BCC20DB8CD808CF3DA792895FE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 09:01:08 +0000
Manifest this update: Sun 27 Apr 2025 09:01:08 +0000
Manifest next update: Mon 28 Apr 2025 09:01:08 +0000
Files and hashes: 1: BUQJodiwcvfbAkUouXIDOb27sQY.crl (hash: xoeD6xNWarqFp4B8GgEyG3+WX5Yl4PdJICSurF2q0VE=)
2: UMjcguXzK8JJuV9OAn9YGkymPvA.roa (hash: 4DrO4r19O+5ROWEhi1+BcrHjdVH/qYD6Oqql5i/mVz8=)
3: VVkXzzLot1NoIJDj7qPW9t8KJeA.roa (hash: dj1ugJopxiv7wcnxLpO9LCCqzbXxSCBi0Qzt+qevjaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:9b:cc:20:db:8c:d8:08:cf:3d:a7:92:89:5f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054409a1d8b072f7db024528b9720339bdbbb106
Validity
Not Before: Apr 27 09:01:08 2025 GMT
Not After : Apr 28 09:01:08 2025 GMT
Subject: CN=64dc3b1d875bbeee59a49ec2c9ed0dec736cb9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ce:5f:4d:8a:47:61:79:0f:db:49:b4:03:7f:
44:0a:61:30:da:30:cd:ba:0f:f9:ec:cd:d4:bd:5a:
54:c9:04:ae:bc:5d:8d:f6:35:3a:c8:56:05:28:1b:
6a:40:f8:7a:f8:8a:d4:73:b9:09:af:6b:73:1f:4a:
a6:cc:d6:29:ff:95:1e:67:cc:77:bd:d6:39:dc:7d:
35:cf:06:83:d8:ac:09:57:e1:5e:96:19:6f:3f:c7:
da:30:e5:32:3f:84:82:7e:63:a6:94:90:f3:e1:f9:
68:6b:d4:fb:d0:44:e6:7f:37:ae:3c:39:5a:2b:eb:
6c:13:69:f1:e8:d3:2a:bb:d9:1d:06:4f:e0:4e:b8:
6a:3b:89:6c:43:1d:67:93:fb:bd:4f:bd:8a:14:fb:
e9:35:b3:61:6c:d7:49:46:5f:54:5a:18:cf:c1:92:
80:ae:29:52:07:3b:9f:df:ce:77:bf:be:30:e5:f3:
e9:fe:7b:ef:a4:c9:d3:4a:e0:f6:70:b8:ce:bc:10:
75:8a:7f:58:65:6e:cc:b0:ba:2a:b3:ea:76:ca:d9:
2e:b6:58:64:6a:48:4a:f9:31:66:42:04:ca:91:e3:
66:87:15:a9:42:f1:e3:81:e4:4d:05:56:3e:4f:fa:
fe:75:9f:9e:3c:f1:b0:bd:9c:df:8e:0e:d4:b6:18:
82:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DC:3B:1D:87:5B:BE:EE:59:A4:9E:C2:C9:ED:0D:EC:73:6C:B9:E2
X509v3 Authority Key Identifier:
keyid:05:44:09:A1:D8:B0:72:F7:DB:02:45:28:B9:72:03:39:BD:BB:B1:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a9:0d:91:c3:50:3a:db:16:48:c1:cb:69:c6:12:4b:dc:36:
a8:9a:1f:47:f4:00:4a:a7:6a:0a:aa:87:94:90:80:b6:3a:e5:
34:9a:aa:2f:b3:e3:f2:6d:01:d9:ba:a7:d0:3d:5b:07:3e:1d:
41:d2:1d:50:ef:57:e1:38:62:f8:3b:06:ad:e6:56:e6:dd:5b:
a0:a1:76:f6:57:3c:9f:1e:4e:dd:b0:c1:25:7c:4b:85:a9:13:
84:00:22:30:70:dd:12:60:a7:e9:61:08:86:34:cd:2c:72:65:
72:45:41:30:c6:24:e3:31:fb:e4:fe:7d:69:e1:2f:11:05:a1:
62:2f:96:2e:1a:fc:76:90:9c:4e:85:6b:cd:b6:5e:d1:e1:44:
f2:0c:7e:50:ba:36:6f:0a:77:3e:6b:97:a0:34:47:1d:72:8d:
e3:e2:53:bf:93:03:a9:20:d4:94:27:67:f2:cb:7c:43:4f:19:
53:90:79:4e:48:75:a8:ee:97:16:2d:c1:fc:35:3d:1f:b5:38:
76:ae:4e:d2:28:f6:9a:89:66:df:0e:37:52:f9:00:60:e5:3a:
ab:d0:99:9f:7e:7f:06:29:dc:07:82:20:ec:ed:af:1f:ce:31:
4a:5e:b3:6b:15:f1:a1:38:ab:f6:f6:63:d1:a3:22:2e:1d:8e:
5c:96:24:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2epvMINuM2AjPPaeSiV/iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDQwOWExZDhiMDcyZjdkYjAyNDUyOGI5NzIwMzM5YmRi
YmIxMDYwHhcNMjUwNDI3MDkwMTA4WhcNMjUwNDI4MDkwMTA4WjAzMTEwLwYDVQQD
Eyg2NGRjM2IxZDg3NWJiZWVlNTlhNDllYzJjOWVkMGRlYzczNmNiOWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc5fTYpHYXkP20m0A39ECmEw2jDN
ug/57M3UvVpUyQSuvF2N9jU6yFYFKBtqQPh6+IrUc7kJr2tzH0qmzNYp/5UeZ8x3
vdY53H01zwaD2KwJV+FelhlvP8faMOUyP4SCfmOmlJDz4floa9T70ETmfzeuPDla
K+tsE2nx6NMqu9kdBk/gTrhqO4lsQx1nk/u9T72KFPvpNbNhbNdJRl9UWhjPwZKA
rilSBzuf3853v74w5fPp/nvvpMnTSuD2cLjOvBB1in9YZW7MsLoqs+p2ytkutlhk
akhK+TFmQgTKkeNmhxWpQvHjgeRNBVY+T/r+dZ+ePPGwvZzfjg7UthiCkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTcOx2HW77uWaSewsntDexzbLniMB8GA1UdIwQY
MBaAFAVECaHYsHL32wJFKLlyAzm9u7EGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVRSm9kaXdjdmZiQWtVb3VYSURPYjI3c1FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9jODg1ZTctNGQ2Zi00YjQ1LTllNGEt
YjE2ZDIxOWIzNTkyLzEvQlVRSm9kaXdjdmZiQWtVb3VYSURPYjI3c1FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9jODg1ZTctNGQ2Zi00YjQ1LTllNGEtYjE2ZDIxOWIzNTky
LzEvQlVRSm9kaXdjdmZiQWtVb3VYSURPYjI3c1FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgakNkcNQ
OtsWSMHLacYSS9w2qJofR/QASqdqCqqHlJCAtjrlNJqqL7Pj8m0B2bqn0D1bBz4d
QdIdUO9X4Thi+DsGreZW5t1boKF29lc8nx5O3bDBJXxLhakThAAiMHDdEmCn6WEI
hjTNLHJlckVBMMYk4zH75P59aeEvEQWhYi+WLhr8dpCcToVrzbZe0eFE8gx+ULo2
bwp3PmuXoDRHHXKN4+JTv5MDqSDUlCdn8st8Q08ZU5B5Tkh1qO6XFi3B/DU9H7U4
dq5O0ij2molm3w43UvkAYOU6q9CZn35/BincB4Ig7O2vH84xSl6zaxXxoTir9vZj
0aMiLh2OXJYk7g==
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:23:06 2025 by rpki-client