Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
File: BUJK-kvO52VL3zq3kWVuREXC-Vo.mft (raw, json)
Hash identifier: d6xKqMo+Ql9QOJqbfySYtuaym8lWZnphIZNcPYFknTI=
Subject key identifier: 4D:67:7C:7E:3D:AE:F3:C6:1A:63:14:3E:C1:C3:DE:3C:7E:4F:28:69
Authority key identifier: 05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
Certificate issuer: /CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Certificate serial: 019A4DAAD6E84C3199FBB55492A69B59FF9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
Manifest number: 051E
Signing time: Tue 04 Nov 2025 07:00:32 +0000
Manifest this update: Tue 04 Nov 2025 07:00:32 +0000
Manifest next update: Wed 05 Nov 2025 07:00:32 +0000
Files and hashes: 1: BUJK-kvO52VL3zq3kWVuREXC-Vo.crl (hash: I7HB/H4eQkifdzdb9etykCJruWz53nlYd5RF3qzu+Pk=)
2: IUMtGwo7cTFP42D9nrk7-OpkQvQ.roa (hash: c6c/rj/fNAeM/ZuHFO3HQMFeZ6ws+kGa19bAnjrXmhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:d6:e8:4c:31:99:fb:b5:54:92:a6:9b:59:ff:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Validity
Not Before: Nov 4 07:00:32 2025 GMT
Not After : Nov 5 07:00:32 2025 GMT
Subject: CN=4d677c7e3daef3c61a63143ec1c3de3c7e4f2869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:33:ef:35:47:47:24:02:23:17:01:fe:1e:8a:
f6:75:49:60:c7:9b:36:fa:2e:8d:c3:4c:97:6d:d9:
fe:64:64:96:3a:91:28:56:0b:0b:93:36:d1:84:1c:
29:64:9f:ee:08:2d:0d:0b:5d:4d:9f:be:68:31:6e:
16:09:6a:35:44:1c:9d:a0:0b:1e:ef:67:eb:b2:ee:
d7:32:e9:51:f3:55:d8:01:4a:fa:34:0b:04:2f:cf:
ca:2b:39:a6:1d:a4:30:ef:32:0b:23:01:b5:c1:57:
83:46:2a:9f:3d:b7:15:27:62:41:ff:a6:65:44:00:
e1:a6:69:61:b1:d7:00:b7:ba:7e:8d:ca:32:f8:4d:
4a:09:78:f6:65:9d:7f:d4:73:e7:80:b6:bc:32:04:
4f:ad:8d:df:be:73:6d:3e:62:f3:0e:c7:c2:ca:e5:
e0:e6:ad:a3:73:69:c3:5e:c3:41:6d:02:eb:c0:f1:
a0:41:01:b8:3a:11:b5:f5:3b:d3:c0:45:a9:3a:7a:
ce:5e:97:fd:5c:72:05:c6:d5:36:e1:c8:00:99:dc:
c4:e9:be:72:3e:ce:78:eb:ae:8e:58:f8:af:be:1a:
68:00:d6:1c:05:c8:0f:b6:de:09:2f:3e:bd:87:c6:
26:23:6c:b0:62:ee:3c:f5:c7:2a:94:fa:a0:ed:6e:
fa:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:67:7C:7E:3D:AE:F3:C6:1A:63:14:3E:C1:C3:DE:3C:7E:4F:28:69
X509v3 Authority Key Identifier:
keyid:05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:60:41:93:b4:7f:53:bb:6c:82:7e:7f:9c:b8:d3:93:3d:b7:
e0:58:4f:06:94:c5:36:c9:71:e0:01:73:da:ff:23:ed:ce:0f:
a2:78:4e:e3:bb:5d:e8:9a:98:ca:7c:d1:60:3a:b8:31:75:ba:
05:6d:97:0b:e5:2e:96:fb:25:6e:84:d7:a0:c1:46:e5:11:c4:
ba:87:43:da:33:da:09:59:b9:58:c1:71:c0:93:8a:c1:30:e8:
d1:b2:d8:2c:88:0c:99:f5:c6:09:f9:1c:ce:28:84:a5:c2:74:
4b:9d:69:8b:15:fc:85:8f:8a:b2:4a:45:20:14:82:0f:9a:33:
34:39:ba:c7:67:a6:2b:77:28:5e:7c:40:94:80:55:4a:34:42:
8c:20:af:0b:72:86:6d:be:be:71:2b:b8:cb:65:e9:25:cd:a7:
43:80:00:64:9e:9d:65:01:40:01:1a:81:66:56:3c:df:53:7a:
cd:74:13:40:72:a0:0c:36:ac:49:a8:9a:0d:55:71:78:d2:6e:
4f:c6:4c:88:98:c8:bf:89:90:c4:45:dc:35:b7:80:c2:af:bc:
c8:a3:84:e7:01:90:32:96:18:62:1d:23:69:ab:a8:63:06:16:
bd:61:88:93:5e:cb:ba:65:8c:47:62:cc:0a:50:61:db:fb:fd:
ac:30:87:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqtboTDGZ+7VUkqabWf+cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDI0YWZhNGJjZWU3NjU0YmRmM2FiNzkxNjU2ZTQ0NDVj
MmY5NWEwHhcNMjUxMTA0MDcwMDMyWhcNMjUxMTA1MDcwMDMyWjAzMTEwLwYDVQQD
Eyg0ZDY3N2M3ZTNkYWVmM2M2MWE2MzE0M2VjMWMzZGUzYzdlNGYyODY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zPvNUdHJAIjFwH+Hor2dUlgx5s2
+i6Nw0yXbdn+ZGSWOpEoVgsLkzbRhBwpZJ/uCC0NC11Nn75oMW4WCWo1RBydoAse
72frsu7XMulR81XYAUr6NAsEL8/KKzmmHaQw7zILIwG1wVeDRiqfPbcVJ2JB/6Zl
RADhpmlhsdcAt7p+jcoy+E1KCXj2ZZ1/1HPngLa8MgRPrY3fvnNtPmLzDsfCyuXg
5q2jc2nDXsNBbQLrwPGgQQG4OhG19TvTwEWpOnrOXpf9XHIFxtU24cgAmdzE6b5y
Ps54666OWPivvhpoANYcBcgPtt4JLz69h8YmI2ywYu489ccqlPqg7W76VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1nfH49rvPGGmMUPsHD3jx+TyhpMB8GA1UdIwQY
MBaAFAVCSvpLzudlS986t5FlbkRFwvlaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVKSy1rdk81MlZMM3pxM2tXVnVSRVhDLVZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi81MTE2ZjMtZjQ1NC00ZDcwLWI5ZDQt
MDgxYjE3OTkzM2M0LzEvQlVKSy1rdk81MlZMM3pxM2tXVnVSRVhDLVZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi81MTE2ZjMtZjQ1NC00ZDcwLWI5ZDQtMDgxYjE3OTkzM2M0
LzEvQlVKSy1rdk81MlZMM3pxM2tXVnVSRVhDLVZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmBBk7R/
U7tsgn5/nLjTkz234FhPBpTFNslx4AFz2v8j7c4PonhO47td6JqYynzRYDq4MXW6
BW2XC+UulvslboTXoMFG5RHEuodD2jPaCVm5WMFxwJOKwTDo0bLYLIgMmfXGCfkc
ziiEpcJ0S51pixX8hY+KskpFIBSCD5ozNDm6x2emK3coXnxAlIBVSjRCjCCvC3KG
bb6+cSu4y2XpJc2nQ4AAZJ6dZQFAARqBZlY831N6zXQTQHKgDDasSaiaDVVxeNJu
T8ZMiJjIv4mQxEXcNbeAwq+8yKOE5wGQMpYYYh0jaauoYwYWvWGIk17LumWMR2LM
ClBh2/v9rDCHTQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:27 2025 by rpki-client