Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
File: BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft (raw, json)
Hash identifier: 7PicjB41+mmWW/PhXo+weqoiRz092O7tr4lo4kRx5Lg=
Subject key identifier: E3:9B:78:4A:53:AD:6D:A1:C1:64:AE:67:48:8D:C2:37:24:E5:81:22
Authority key identifier: 05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
Certificate issuer: /CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Certificate serial: 01976C2AC85F8AF3AF6C943187EECBAE70D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
Manifest number: 072A
Signing time: Sat 14 Jun 2025 02:00:32 +0000
Manifest this update: Sat 14 Jun 2025 02:00:32 +0000
Manifest next update: Sun 15 Jun 2025 02:00:32 +0000
Files and hashes: 1: BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl (hash: bPIcUNbVTVCIj+F5j9tObqkqkOs8Xo4pagE4pdob/bE=)
2: FU5ckiwSRF9khD7WupXiavmIPzs.roa (hash: 84Hh9Rd/Utxajq2oO+DHR2ECiOMAuLuEnM4faDd74uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:c8:5f:8a:f3:af:6c:94:31:87:ee:cb:ae:70:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Validity
Not Before: Jun 14 02:00:32 2025 GMT
Not After : Jun 15 02:00:32 2025 GMT
Subject: CN=e39b784a53ad6da1c164ae67488dc23724e58122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:38:17:fa:42:8c:cc:af:d1:f8:92:95:04:26:
4a:02:3f:fd:cf:4b:d9:c8:42:21:26:44:62:61:7b:
a4:c2:e7:75:80:15:92:88:d6:4c:d8:15:63:fe:62:
e2:e2:09:04:65:46:d5:85:1b:7b:9c:01:b8:19:fe:
cf:6c:ad:e7:87:4a:79:53:fe:ab:67:52:fc:88:ba:
4c:7c:6e:b7:7f:37:51:c7:34:a5:07:5e:7d:3f:5c:
1c:cd:5c:1c:90:6a:b9:16:09:e2:72:09:27:5c:ad:
d2:58:e0:80:a8:a9:f1:56:bd:a3:bb:b7:d7:9d:68:
27:7f:c2:2f:bc:3d:be:e5:6d:0b:c3:4a:4e:14:a7:
32:f3:20:2c:d1:1d:19:fc:14:e2:06:31:86:83:31:
8a:31:f4:60:d9:70:11:1f:da:27:d6:b2:a0:a7:de:
c1:05:81:f0:52:91:76:d4:fa:ec:62:9c:97:83:b0:
0b:bb:05:9c:5d:81:46:83:4c:c4:60:1c:60:9a:e8:
c8:d1:ce:64:e1:5f:0d:1f:bb:f7:86:ce:51:0e:05:
a2:58:e7:47:cd:cb:e2:e9:96:2c:8d:af:e5:24:8a:
63:b1:31:e8:3f:3d:4c:46:61:50:6d:39:37:84:f8:
fd:44:b2:b6:24:6e:3b:46:cb:64:ce:16:81:72:74:
9e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9B:78:4A:53:AD:6D:A1:C1:64:AE:67:48:8D:C2:37:24:E5:81:22
X509v3 Authority Key Identifier:
keyid:05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:48:7d:54:06:dd:2f:2d:4b:2b:fd:cd:e4:93:9a:d2:4e:ce:
60:2f:8a:63:72:32:b5:1a:5e:02:01:d8:24:ac:7f:40:62:39:
3f:a0:32:58:96:6e:7f:18:ae:75:38:23:d7:95:e9:d7:24:11:
ea:96:b7:f5:56:5a:bb:f5:63:5c:c5:c5:73:54:dd:84:5a:cd:
00:09:a3:e8:36:30:e8:ff:29:93:63:30:c3:dc:f0:a4:53:c1:
93:0c:a0:d3:f2:3d:90:d9:62:e5:59:e2:de:3e:7b:e4:8e:50:
39:89:ba:87:57:c1:b1:f5:5d:6d:55:6e:ff:7e:18:4f:44:47:
6a:e5:66:78:0e:3a:6e:8a:a8:56:c6:1a:2d:a7:df:e3:56:2d:
21:6c:bc:38:6f:36:32:4b:28:ea:39:2c:0c:b4:17:22:7a:9c:
eb:5a:84:3a:09:d8:6a:bc:df:af:26:11:66:fe:63:34:ce:9e:
cd:68:6f:37:f4:1c:8a:4f:34:55:86:98:d8:d3:f9:c9:b5:a0:
7e:e0:9d:b3:91:82:78:6f:5b:11:87:00:bb:3d:9d:d0:4b:f9:
33:86:8c:c8:81:cf:49:a0:59:95:c7:a9:93:f6:89:e3:cf:1f:
b8:c8:ab:78:fd:e2:9b:a4:df:63:0e:e8:94:cc:96:d6:27:3d:
38:f9:25:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:17:57 2025 by rpki-client