Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
File: BUJK-kvO52VL3zq3kWVuREXC-Vo.mft (raw, json)
Hash identifier: HjFIa9hz2imOv6usgSnRoPzAaUhq0LhxLgJRIJZphlM=
Subject key identifier: D6:05:EA:91:00:92:07:F8:B4:77:33:03:03:59:23:8C:59:DB:24:47
Authority key identifier: 05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
Certificate issuer: /CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Certificate serial: 0198820C38A01E5E1E4FD6CF5B581ADDD0D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
Manifest number: 0430
Signing time: Thu 07 Aug 2025 01:01:35 +0000
Manifest this update: Thu 07 Aug 2025 01:01:35 +0000
Manifest next update: Fri 08 Aug 2025 01:01:35 +0000
Files and hashes: 1: BUJK-kvO52VL3zq3kWVuREXC-Vo.crl (hash: 766sJHy9CvoW1KaHnPoLGMCQSKTzyoiLWT0MIsBrsu0=)
2: IUMtGwo7cTFP42D9nrk7-OpkQvQ.roa (hash: c6c/rj/fNAeM/ZuHFO3HQMFeZ6ws+kGa19bAnjrXmhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0c:38:a0:1e:5e:1e:4f:d6:cf:5b:58:1a:dd:d0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Validity
Not Before: Aug 7 01:01:35 2025 GMT
Not After : Aug 8 01:01:35 2025 GMT
Subject: CN=d605ea91009207f8b47733030359238c59db2447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3c:0c:b2:ff:00:dd:87:e7:e2:cc:43:47:2f:
e2:1d:e7:51:70:b7:66:e7:74:3a:17:06:e0:83:0c:
de:0c:92:27:20:34:c5:ea:0e:1c:d2:4d:48:96:cf:
49:8c:97:d2:3a:e5:69:71:47:ab:c5:e7:f1:17:9e:
48:1c:0f:9e:da:d1:68:ed:48:9b:d6:cd:a0:70:1c:
35:6e:4e:1d:d0:cf:13:ee:19:87:6e:3b:f5:b8:cf:
f9:71:3b:65:0a:03:23:4f:78:91:dc:e2:35:de:f9:
bb:53:d1:f1:b6:9a:f2:f3:93:61:32:fc:cb:89:b8:
f5:cb:8c:98:53:99:f7:0c:df:ab:68:78:14:43:33:
7b:05:91:a1:7b:6a:df:9c:76:6a:38:19:94:65:00:
ad:48:5e:08:af:f9:6b:ef:46:db:34:16:e9:16:f6:
b4:20:0c:d2:47:44:41:64:b4:44:8c:a8:ec:42:59:
55:f1:e1:ab:e3:87:8c:14:9b:5e:8e:7f:a1:52:8c:
13:67:23:87:06:68:50:2e:53:79:91:a2:75:9c:50:
3f:b5:f2:25:97:d5:57:36:e8:4b:e9:43:ce:eb:1c:
61:76:81:94:e6:40:6c:d9:6b:7a:2a:1d:59:33:df:
f0:35:e4:2a:85:97:f7:51:d4:ec:ba:5f:97:5d:9d:
ed:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:05:EA:91:00:92:07:F8:B4:77:33:03:03:59:23:8C:59:DB:24:47
X509v3 Authority Key Identifier:
keyid:05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:5d:cb:04:aa:d1:e8:7a:ee:21:66:f5:80:0b:bf:ce:28:7c:
c0:e6:e4:a6:99:5e:b7:61:3a:58:f9:2d:80:41:c4:94:f3:60:
89:85:24:f8:c3:17:d2:07:4b:1b:f2:f5:f4:3c:95:db:34:4e:
e4:5f:8e:9f:1d:c5:bd:2a:47:af:3c:77:cf:42:7a:64:47:07:
00:c5:6b:25:1d:be:b5:e2:25:b9:a7:6b:1f:13:73:71:84:ab:
66:c8:f2:55:4c:9d:c2:9f:47:bd:ec:ef:f0:40:2a:9c:2b:10:
0d:da:4a:66:4b:8a:99:cb:da:82:9a:6c:59:20:64:1a:2b:f3:
1c:fb:a2:12:20:5b:69:ee:8f:bc:d4:1c:e5:25:14:1a:66:ee:
e1:09:c0:da:98:1b:4d:fc:8e:42:20:13:3d:4f:ac:29:3f:09:
b6:a8:df:4a:41:a2:f8:14:82:0c:4f:3f:0f:5e:8b:3f:ec:3a:
4c:4b:a6:fe:e4:9a:0b:cd:7f:47:8a:ab:fd:18:62:0c:9c:27:
cb:6d:3a:7b:f8:f7:f4:d1:1c:af:cf:fe:3f:47:96:a5:c3:ed:
69:a1:d5:95:1e:3f:fc:2f:74:a2:ce:e5:5c:39:e2:70:8a:d4:
b8:cf:c9:37:f5:53:91:3d:79:1a:01:a3:c5:9a:dc:79:03:d0:
59:f6:f8:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiCDDigHl4eT9bPW1ga3dDUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDI0YWZhNGJjZWU3NjU0YmRmM2FiNzkxNjU2ZTQ0NDVj
MmY5NWEwHhcNMjUwODA3MDEwMTM1WhcNMjUwODA4MDEwMTM1WjAzMTEwLwYDVQQD
EyhkNjA1ZWE5MTAwOTIwN2Y4YjQ3NzMzMDMwMzU5MjM4YzU5ZGIyNDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzwMsv8A3Yfn4sxDRy/iHedRcLdm
53Q6FwbggwzeDJInIDTF6g4c0k1Ils9JjJfSOuVpcUerxefxF55IHA+e2tFo7Uib
1s2gcBw1bk4d0M8T7hmHbjv1uM/5cTtlCgMjT3iR3OI13vm7U9Hxtpry85NhMvzL
ibj1y4yYU5n3DN+raHgUQzN7BZGhe2rfnHZqOBmUZQCtSF4Ir/lr70bbNBbpFva0
IAzSR0RBZLREjKjsQllV8eGr44eMFJtejn+hUowTZyOHBmhQLlN5kaJ1nFA/tfIl
l9VXNuhL6UPO6xxhdoGU5kBs2Wt6Kh1ZM9/wNeQqhZf3UdTsul+XXZ3tswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNYF6pEAkgf4tHczAwNZI4xZ2yRHMB8GA1UdIwQY
MBaAFAVCSvpLzudlS986t5FlbkRFwvlaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVKSy1rdk81MlZMM3pxM2tXVnVSRVhDLVZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi81MTE2ZjMtZjQ1NC00ZDcwLWI5ZDQt
MDgxYjE3OTkzM2M0LzEvQlVKSy1rdk81MlZMM3pxM2tXVnVSRVhDLVZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi81MTE2ZjMtZjQ1NC00ZDcwLWI5ZDQtMDgxYjE3OTkzM2M0
LzEvQlVKSy1rdk81MlZMM3pxM2tXVnVSRVhDLVZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATl3LBKrR
6HruIWb1gAu/zih8wObkpplet2E6WPktgEHElPNgiYUk+MMX0gdLG/L19DyV2zRO
5F+Onx3FvSpHrzx3z0J6ZEcHAMVrJR2+teIluadrHxNzcYSrZsjyVUydwp9Hvezv
8EAqnCsQDdpKZkuKmcvagppsWSBkGivzHPuiEiBbae6PvNQc5SUUGmbu4QnA2pgb
TfyOQiATPU+sKT8JtqjfSkGi+BSCDE8/D16LP+w6TEum/uSaC81/R4qr/RhiDJwn
y206e/j39NEcr8/+P0eWpcPtaaHVlR4//C90os7lXDnicIrUuM/JN/VTkT15GgGj
xZrceQPQWfb4ew==
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:15:36 2025 by rpki-client