Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
File: BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft (raw, json)
Hash identifier: Psr16FcEpBsULJpDK0UVByMFh2ms5WhSt+EmD681oww=
Subject key identifier: 70:08:AE:F6:0A:85:B7:7E:C2:92:E5:DA:AA:80:30:44:2C:8A:B0:47
Authority key identifier: 05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
Certificate issuer: /CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Certificate serial: 01988243352209FE379B1D4C4D30128F3BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
Manifest number: 07BA
Signing time: Thu 07 Aug 2025 02:01:39 +0000
Manifest this update: Thu 07 Aug 2025 02:01:39 +0000
Manifest next update: Fri 08 Aug 2025 02:01:39 +0000
Files and hashes: 1: BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl (hash: EYtebilxXzr2oqgmbXKXSBWMupU0q7jAfKMybMuCB4c=)
2: FU5ckiwSRF9khD7WupXiavmIPzs.roa (hash: 84Hh9Rd/Utxajq2oO+DHR2ECiOMAuLuEnM4faDd74uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 02:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:43:35:22:09:fe:37:9b:1d:4c:4d:30:12:8f:3b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Validity
Not Before: Aug 7 02:01:39 2025 GMT
Not After : Aug 8 02:01:39 2025 GMT
Subject: CN=7008aef60a85b77ec292e5daaa8030442c8ab047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:31:f3:2a:25:d0:81:67:f0:6d:f7:e1:76:af:
64:20:e8:8f:80:c3:b3:3e:0a:c1:c4:33:55:c8:37:
c2:76:75:5f:d0:ad:e3:ee:4b:08:7a:9d:5b:20:ba:
22:ab:95:cc:e9:78:97:ee:44:28:18:b1:d7:b9:fd:
1b:4e:98:48:77:5e:c5:e4:24:46:51:83:bf:59:69:
89:95:95:9c:c4:f1:20:f6:54:ea:a2:e6:ed:f5:4c:
ef:17:e1:cb:80:86:19:31:28:e4:8b:19:dc:f6:c7:
49:b4:e6:c4:1c:39:92:3e:10:31:8d:21:2b:d9:b8:
c9:13:79:24:d9:98:a9:b8:c0:0a:83:62:86:be:9a:
92:ff:72:a6:aa:42:0e:58:c7:15:0f:63:4e:3b:e5:
5a:23:98:d9:04:82:7c:37:ee:28:f1:77:d4:31:0a:
79:84:ee:c5:54:7c:ca:e3:86:12:4e:82:84:70:fa:
59:7a:b1:12:01:ba:0e:ec:57:4a:3e:34:0d:c8:37:
18:45:63:3c:26:64:4f:85:8e:84:a2:86:63:c7:f1:
e1:f3:d4:8a:5a:9e:57:d7:16:7d:bb:75:b8:16:1e:
3b:a1:1d:40:a9:b9:2a:62:fa:25:fa:c3:36:15:7c:
85:cd:5a:f8:c0:61:4d:b7:e3:79:a5:b7:22:49:88:
ca:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:08:AE:F6:0A:85:B7:7E:C2:92:E5:DA:AA:80:30:44:2C:8A:B0:47
X509v3 Authority Key Identifier:
keyid:05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:38:46:70:d6:22:f2:ae:1a:e5:02:04:9b:52:09:58:b9:46:
af:fe:1d:f8:18:2d:12:11:7b:82:c6:a2:b7:57:0d:33:2e:b2:
ba:ad:fe:9d:9d:f0:08:45:ce:68:1f:bd:e1:e6:78:ae:54:60:
d1:fa:4c:4a:93:91:40:ce:2f:b9:4d:b2:c5:b1:7b:74:98:da:
80:a0:19:09:6c:46:b6:a6:8a:20:e3:de:0b:f5:cd:0f:05:b7:
0c:6f:f3:56:de:c4:18:c1:4c:56:7b:c6:89:f7:5d:a6:0f:8b:
32:93:84:71:aa:a9:01:d1:30:11:7f:f3:00:0d:7f:d0:10:78:
40:25:0e:bc:54:29:09:3d:a9:12:a5:7b:8d:6c:17:75:b7:c1:
44:f3:51:54:0a:6c:90:e2:25:46:08:7b:22:10:d8:80:7b:62:
71:03:06:d7:df:77:41:2b:96:86:28:87:8c:79:b9:25:29:9d:
bc:86:b8:d0:2b:da:ab:bf:77:55:2b:72:92:38:c8:24:d2:db:
76:2e:f9:59:77:ab:8f:ed:31:e3:5b:80:01:ca:18:ec:90:ca:
3c:66:cb:a6:9c:7e:a6:08:59:9e:1b:81:04:65:2f:8a:c7:1a:
17:cf:95:d4:56:da:2e:bf:3e:34:d4:05:1f:c0:15:2c:59:6e:
79:9f:6b:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiCQzUiCf43mx1MTTASjzuoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDUyNzlkODdmOGMwZjM4YzM5MGEzM2NmMTY5OTU1MWRj
MzBmZTQwHhcNMjUwODA3MDIwMTM5WhcNMjUwODA4MDIwMTM5WjAzMTEwLwYDVQQD
Eyg3MDA4YWVmNjBhODViNzdlYzI5MmU1ZGFhYTgwMzA0NDJjOGFiMDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszHzKiXQgWfwbffhdq9kIOiPgMOz
PgrBxDNVyDfCdnVf0K3j7ksIep1bILoiq5XM6XiX7kQoGLHXuf0bTphId17F5CRG
UYO/WWmJlZWcxPEg9lTqoubt9UzvF+HLgIYZMSjkixnc9sdJtObEHDmSPhAxjSEr
2bjJE3kk2ZipuMAKg2KGvpqS/3KmqkIOWMcVD2NOO+VaI5jZBIJ8N+4o8XfUMQp5
hO7FVHzK44YSToKEcPpZerESAboO7FdKPjQNyDcYRWM8JmRPhY6EooZjx/Hh89SK
Wp5X1xZ9u3W4Fh47oR1AqbkqYvol+sM2FXyFzVr4wGFNt+N5pbciSYjK7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAIrvYKhbd+wpLl2qqAMEQsirBHMB8GA1UdIwQY
MBaAFAVFJ52H+MDzjDkKM88WmVUdww/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVVbm5ZZjR3UE9NT1Fvenp4YVpWUjNERC1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC83NjgzNzgtZDc5Yi00NWM3LWEyOTAt
OWQzODZkMDQ2ZmIwLzEvQlVVbm5ZZjR3UE9NT1Fvenp4YVpWUjNERC1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC83NjgzNzgtZDc5Yi00NWM3LWEyOTAtOWQzODZkMDQ2ZmIw
LzEvQlVVbm5ZZjR3UE9NT1Fvenp4YVpWUjNERC1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGThGcNYi
8q4a5QIEm1IJWLlGr/4d+BgtEhF7gsait1cNMy6yuq3+nZ3wCEXOaB+94eZ4rlRg
0fpMSpORQM4vuU2yxbF7dJjagKAZCWxGtqaKIOPeC/XNDwW3DG/zVt7EGMFMVnvG
ifddpg+LMpOEcaqpAdEwEX/zAA1/0BB4QCUOvFQpCT2pEqV7jWwXdbfBRPNRVAps
kOIlRgh7IhDYgHticQMG1993QSuWhiiHjHm5JSmdvIa40Cvaq793VStykjjIJNLb
di75WXerj+0x41uAAcoY7JDKPGbLppx+pghZnhuBBGUviscaF8+V1FbaLr8+NNQF
H8AVLFlueZ9ryQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 11:23:29 2025 by rpki-client