
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
File: BUQJodiwcvfbAkUouXIDOb27sQY.mft (raw, json)
Hash identifier: W2G9neNKDrpM7jBAcGd6JxHKTTluzltnhCU2prQ2og4=
Subject key identifier: 02:2D:72:80:30:72:9C:65:E5:D1:65:D4:F4:D3:8E:C9:EA:59:B3:12
Authority key identifier: 05:44:09:A1:D8:B0:72:F7:DB:02:45:28:B9:72:03:39:BD:BB:B1:06
Certificate issuer: /CN=054409a1d8b072f7db024528b9720339bdbbb106
Certificate serial: 019881D53E883130BD4DD2F1408F29E93357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
Manifest number: 1620
Signing time: Thu 07 Aug 2025 00:01:32 +0000
Manifest this update: Thu 07 Aug 2025 00:01:32 +0000
Manifest next update: Fri 08 Aug 2025 00:01:32 +0000
Files and hashes: 1: BUQJodiwcvfbAkUouXIDOb27sQY.crl (hash: jiYAmm5IIVvUI3iTZBWvAjaSH6ew9zEFCQ8FuIqy060=)
2: UMjcguXzK8JJuV9OAn9YGkymPvA.roa (hash: 4DrO4r19O+5ROWEhi1+BcrHjdVH/qYD6Oqql5i/mVz8=)
3: VVkXzzLot1NoIJDj7qPW9t8KJeA.roa (hash: dj1ugJopxiv7wcnxLpO9LCCqzbXxSCBi0Qzt+qevjaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 00:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:3e:88:31:30:bd:4d:d2:f1:40:8f:29:e9:33:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054409a1d8b072f7db024528b9720339bdbbb106
Validity
Not Before: Aug 7 00:01:32 2025 GMT
Not After : Aug 8 00:01:32 2025 GMT
Subject: CN=022d728030729c65e5d165d4f4d38ec9ea59b312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fe:9c:98:be:26:e2:81:95:d4:11:ef:9b:43:
53:3e:22:aa:6f:23:8d:88:66:e4:0c:c4:af:3c:de:
88:91:a5:da:76:52:45:d3:a0:dd:af:67:d8:a8:b8:
11:9b:89:53:91:6c:de:fc:ac:e6:1f:3d:79:eb:68:
ef:63:2e:25:ac:d5:8c:b9:d2:86:44:db:51:5e:04:
ab:e6:b1:b7:44:7a:20:f2:96:3b:54:80:0b:57:b7:
14:81:9d:7f:ee:c4:db:1e:8f:14:c9:76:b0:7d:6d:
29:64:26:8c:5e:07:c0:f9:a8:b4:0b:72:30:c2:21:
e1:ec:8d:e3:7a:fb:ce:ab:28:59:b6:b2:dc:c9:63:
6c:90:c9:bd:cd:c9:cd:8b:56:f0:72:92:b8:67:51:
70:9e:32:d3:a1:d5:a7:4a:48:80:40:e1:f9:71:ff:
7a:58:9b:bd:60:a5:2d:2f:18:e7:61:40:a1:68:1a:
6c:b3:85:13:46:3d:85:66:c7:69:96:58:9f:6d:d9:
e6:b7:96:6b:86:96:ab:75:26:c2:22:08:c1:03:4b:
f5:39:8b:5f:89:6f:95:ab:70:a3:75:4d:f8:27:a2:
1c:9f:9b:4d:d3:1f:f7:d9:fa:0e:80:2d:dd:3c:c0:
8b:50:e0:ae:1a:1a:19:ae:d7:36:a8:95:23:2d:d5:
a4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2D:72:80:30:72:9C:65:E5:D1:65:D4:F4:D3:8E:C9:EA:59:B3:12
X509v3 Authority Key Identifier:
keyid:05:44:09:A1:D8:B0:72:F7:DB:02:45:28:B9:72:03:39:BD:BB:B1:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:17:4d:65:62:03:7e:17:2c:06:84:af:a2:c8:37:d5:ac:4d:
59:86:86:ec:bd:ca:73:ee:bb:2a:bd:d9:09:43:41:f1:b6:11:
78:4e:5b:d7:e2:39:3f:bc:80:f4:0d:9c:a6:5a:ac:86:2e:32:
97:8c:a5:7e:08:82:db:ae:fd:09:75:5a:b3:f2:86:9b:4f:02:
2a:3f:a7:35:64:6c:bf:8b:c0:0b:36:c0:9f:3d:b4:70:fc:15:
ce:68:cc:52:0b:4c:38:2b:12:46:5a:25:2a:8f:39:58:de:82:
9d:0f:65:52:3f:8b:ca:b0:9e:f4:10:19:85:7c:1e:58:5c:7e:
e4:06:6e:e8:6a:f5:40:09:b4:92:19:2d:49:b6:16:d5:ee:b4:
18:3e:7c:3e:48:03:04:37:b7:7b:8d:c8:5b:90:fb:bc:2c:a7:
22:f5:ea:b5:e4:6b:e5:82:08:43:3e:e2:e0:94:b4:6f:57:57:
f2:d3:f9:ac:d8:4a:0e:14:31:50:2d:df:33:69:d1:aa:fd:ea:
5b:0f:ec:d2:92:b8:b9:a1:c8:dc:50:86:b1:61:79:df:a0:43:
05:0a:05:76:a0:56:16:90:eb:35:d1:18:b1:40:84:fb:cb:c3:
a7:a7:62:f5:b7:47:03:14:bb:e0:b0:65:2a:6e:8f:6f:70:5b:
ca:7b:a1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:12:43 2025 by rpki-client