Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
File: BUJK-kvO52VL3zq3kWVuREXC-Vo.mft (raw, json)
Hash identifier: U1K7HIit4P9ofXZyyGgtitcRVvyE4Kqy685WR4BpUXE=
Subject key identifier: FD:53:C3:3A:71:FF:C4:60:42:E6:0D:8B:1E:94:B3:74:DD:CC:6D:4F
Authority key identifier: 05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
Certificate issuer: /CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Certificate serial: 01967A8E0CD2606323697E55A7D73D33A53C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
Manifest number: 0323
Signing time: Mon 28 Apr 2025 04:00:51 +0000
Manifest this update: Mon 28 Apr 2025 04:00:51 +0000
Manifest next update: Tue 29 Apr 2025 04:00:51 +0000
Files and hashes: 1: BUJK-kvO52VL3zq3kWVuREXC-Vo.crl (hash: XRJCPihcVbFtK3G5sFzKXT0ZRPg/MlkTEp9KLyzNGYs=)
2: IUMtGwo7cTFP42D9nrk7-OpkQvQ.roa (hash: c6c/rj/fNAeM/ZuHFO3HQMFeZ6ws+kGa19bAnjrXmhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:8e:0c:d2:60:63:23:69:7e:55:a7:d7:3d:33:a5:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Validity
Not Before: Apr 28 04:00:51 2025 GMT
Not After : Apr 29 04:00:51 2025 GMT
Subject: CN=fd53c33a71ffc46042e60d8b1e94b374ddcc6d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fe:f6:0b:47:c5:a1:ac:b5:22:43:48:c5:85:
26:14:33:2c:6a:e9:b3:ec:fa:11:f1:98:71:85:9c:
6c:de:9a:13:d3:ab:5b:b3:e4:fb:f4:05:80:84:f4:
ae:15:fa:08:0d:8b:fa:e3:1e:9a:16:33:0a:90:b5:
dd:3c:6b:51:99:4a:e8:b8:b9:58:12:e7:78:21:2c:
55:dc:33:55:c9:2d:ce:02:b3:8a:07:cb:c0:c8:52:
5e:e4:48:bf:bb:18:00:0e:e5:10:62:7c:47:1f:dc:
65:c4:c2:5d:4a:ec:78:cb:d3:bb:9b:8d:51:2a:38:
2c:a1:6f:d7:69:6d:5d:91:0b:59:e8:0c:e6:63:dd:
27:61:01:94:e6:c0:8c:6d:43:ab:55:b2:ec:96:a1:
e0:90:31:f6:b2:07:76:b3:f0:f2:60:e7:80:af:93:
cb:b6:e4:92:8c:b3:be:7c:36:43:12:16:72:87:ab:
e5:d4:91:7b:5b:0a:87:01:8f:7f:75:12:6f:c1:81:
5b:78:17:cd:63:82:5d:81:e3:8f:67:21:c1:2b:8f:
01:a2:62:d6:ea:d2:a7:c6:52:5c:8f:aa:43:9c:70:
1e:ca:c6:76:ca:9f:9d:06:bc:17:ed:c5:82:a7:cb:
3f:96:b2:39:27:30:a6:34:5d:f2:6b:e1:39:03:83:
2b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:53:C3:3A:71:FF:C4:60:42:E6:0D:8B:1E:94:B3:74:DD:CC:6D:4F
X509v3 Authority Key Identifier:
keyid:05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:05:e8:6e:a4:39:8a:22:93:47:dd:1f:4e:ad:8c:58:bc:5e:
51:31:75:5f:7f:c7:76:36:13:53:93:dc:e1:e9:a1:c2:09:de:
c2:d2:dd:ab:ff:cc:fa:27:a3:c1:5f:b3:71:9d:b6:c0:c8:4f:
11:af:73:04:eb:14:09:7b:04:b6:6d:6d:be:7a:5c:f7:d3:57:
4c:36:43:8a:10:a5:eb:b2:9d:fb:8d:de:80:c7:dd:95:cf:70:
64:ff:ca:b2:3d:d6:a1:d5:60:65:06:34:f6:d7:46:d8:16:56:
14:ce:b7:a6:23:47:d2:77:c4:df:30:cd:1e:a7:2b:27:88:46:
83:91:e5:0e:44:f8:86:96:dd:95:a5:3b:f0:a4:e7:c3:7e:30:
7f:d0:b1:d0:07:75:20:5b:b2:f5:be:4f:44:1f:fb:27:6f:9e:
d0:36:fb:2b:1d:5f:2c:2f:b4:8a:0c:fb:31:e3:e8:71:25:c2:
5d:4f:d2:fa:e7:28:67:78:7f:a7:d8:e5:c2:3b:62:51:46:d7:
5c:03:26:a5:06:f7:a0:9e:ce:e0:40:64:f9:04:94:bc:ff:63:
f6:88:b5:c0:ec:f5:40:4f:92:c3:f5:26:eb:dc:7b:d2:f4:ae:
8e:1a:fa:77:92:f1:5a:35:b8:59:b8:f3:f0:02:e9:9e:9d:c5:
bc:f0:78:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:10:34 2025 by rpki-client