Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
File: BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft (raw, json)
Hash identifier: 3PA+eZaCmP2Kzc5E2sDMdhTnkI4r1l95agRHilAQ1gk=
Subject key identifier: 9A:77:3C:67:5B:A8:FE:F4:05:2A:80:89:AF:66:2C:96:2E:A0:92:C6
Authority key identifier: 05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
Certificate issuer: /CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Certificate serial: 019A4DE1E0AA8ABF75AC046463367F999AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
Manifest number: 08A8
Signing time: Tue 04 Nov 2025 08:00:39 +0000
Manifest this update: Tue 04 Nov 2025 08:00:39 +0000
Manifest next update: Wed 05 Nov 2025 08:00:39 +0000
Files and hashes: 1: BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl (hash: K+AwgvxYecmPr8b8rNjOLTeWeW6WbuYJ8+VnjNF763w=)
2: FU5ckiwSRF9khD7WupXiavmIPzs.roa (hash: 84Hh9Rd/Utxajq2oO+DHR2ECiOMAuLuEnM4faDd74uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:e0:aa:8a:bf:75:ac:04:64:63:36:7f:99:9a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Validity
Not Before: Nov 4 08:00:39 2025 GMT
Not After : Nov 5 08:00:39 2025 GMT
Subject: CN=9a773c675ba8fef4052a8089af662c962ea092c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:35:df:f9:b0:d9:1e:13:4d:22:30:65:f1:25:
e6:75:21:94:21:2b:93:0a:90:73:d1:80:37:55:74:
95:7b:9b:ae:18:0b:6c:16:e9:58:07:89:b5:49:bb:
19:39:6b:43:2c:37:aa:34:c0:99:83:78:03:cd:0f:
ba:0b:29:e8:fa:24:aa:b7:00:fc:fb:55:dc:f6:ed:
d0:f0:9a:14:b6:09:10:bc:4c:13:bb:84:d0:91:b4:
1b:27:21:51:2e:94:08:73:24:79:9b:72:4f:37:a8:
07:b9:49:26:62:50:cc:3a:15:19:df:bb:91:9d:15:
38:23:0d:13:6c:60:7e:4b:58:0e:4d:89:85:7f:4a:
b8:b6:86:2c:de:e6:cd:0e:1c:ad:77:ef:c9:1a:66:
c5:71:41:c3:ce:99:e7:70:c2:f2:21:e8:d3:17:ca:
c2:bf:0f:b6:2b:76:ed:cc:8a:bc:05:dd:d6:7f:8a:
a6:79:c2:59:c3:ff:0b:73:0a:14:31:3b:10:ca:51:
4c:14:ee:f5:dc:ec:6c:52:64:2c:0e:a5:8c:fd:a2:
55:c7:9d:f1:51:48:e2:5a:cb:bf:a1:07:95:0c:62:
58:c5:06:d2:74:32:92:2e:4a:de:2b:51:09:f2:ba:
51:e5:97:61:c1:3d:7c:4d:c4:fe:c3:6c:50:99:13:
6c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:77:3C:67:5B:A8:FE:F4:05:2A:80:89:AF:66:2C:96:2E:A0:92:C6
X509v3 Authority Key Identifier:
keyid:05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ee:1f:39:88:29:d4:c7:d8:64:8b:12:a7:fb:15:56:19:bb:
ab:11:e4:ea:2c:09:ca:1d:60:36:02:c8:dc:dc:07:be:39:30:
cd:43:da:64:c3:73:e8:a8:ed:6f:7a:95:c2:c1:4c:34:d2:39:
ba:eb:46:01:1d:1b:df:ea:b9:57:5b:9b:9f:e6:7a:26:f6:09:
2a:55:3d:9e:11:3a:1c:73:f4:31:e4:ff:60:60:ee:7f:09:2a:
c5:61:a2:10:3a:7f:f3:fa:a4:0b:37:17:0b:c4:01:9f:26:fe:
5b:d9:85:32:02:db:a8:74:4e:86:1c:7c:2f:f1:f3:7f:04:80:
5b:b5:7a:10:77:4c:4a:95:32:fc:09:ff:0c:85:b4:48:8f:7a:
1d:23:96:34:4e:09:a4:79:58:de:e2:25:d2:77:e0:5c:e9:2b:
e1:73:eb:01:3c:23:bb:7a:24:f1:02:ef:c5:d0:1b:06:8a:68:
ac:67:26:5e:30:fd:14:16:63:ed:4e:49:85:ed:8d:ab:cb:df:
bf:43:c7:22:ab:3d:8d:df:b0:86:a1:04:a4:60:e3:a1:52:34:
02:25:8a:11:59:14:a7:67:c0:b7:9a:2e:54:6b:88:1a:52:39:
79:7d:1e:6e:aa:e5:54:4e:9e:3d:b0:e7:da:39:33:b1:04:71:
94:fb:24:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:27 2025 by rpki-client