Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
File: BUHqG_Ktqt02piLrPqg13Ju2gZs.mft (raw, json)
Hash identifier: p0C1eu7n4IAZo5ImSMMlakVZx2oGKUFF1KjIg7p+2Nc=
Subject key identifier: 88:7A:34:E5:7B:28:BD:53:E7:00:9F:19:F6:C4:3A:12:36:90:58:47
Authority key identifier: 05:41:EA:1B:F2:AD:AA:DD:36:A6:22:EB:3E:A8:35:DC:9B:B6:81:9B
Certificate issuer: /CN=0541ea1bf2adaadd36a622eb3ea835dc9bb6819b
Certificate serial: 0198D515A42973732A3AA5734C725E178926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
Manifest number: 14FE
Signing time: Sat 23 Aug 2025 04:00:21 +0000
Manifest this update: Sat 23 Aug 2025 04:00:21 +0000
Manifest next update: Sun 24 Aug 2025 04:00:21 +0000
Files and hashes: 1: BUHqG_Ktqt02piLrPqg13Ju2gZs.crl (hash: Mkm5eiWCsPMtPz8X803DH7q1SLhy90MpZXnXjrkMAJA=)
2: GIPybF1nvDpVQajMG8DWoYzoWhc.roa (hash: o+zoF0xKL9l55iOY2y1WPp4gwlsjSDH8TktFrJp4Gm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:a4:29:73:73:2a:3a:a5:73:4c:72:5e:17:89:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0541ea1bf2adaadd36a622eb3ea835dc9bb6819b
Validity
Not Before: Aug 23 04:00:21 2025 GMT
Not After : Aug 24 04:00:21 2025 GMT
Subject: CN=887a34e57b28bd53e7009f19f6c43a1236905847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:25:39:5d:d0:ce:79:53:b1:06:3f:37:c6:70:
19:ce:03:97:7f:b2:fe:b7:65:bd:63:1b:c8:98:30:
54:f5:88:44:e6:88:64:79:9b:3a:66:d5:42:a8:a5:
78:ec:49:64:67:5d:c4:a2:8e:2b:db:5c:7b:4d:75:
d1:86:79:da:73:48:e4:8b:2d:65:9a:f1:2d:3e:a8:
8e:11:c9:f7:eb:29:ea:e7:87:23:de:e1:27:4c:ad:
69:09:31:42:e8:af:07:e2:e2:ec:f1:dc:a2:e5:42:
63:9f:63:92:8f:ba:ba:10:88:73:d7:9b:b7:38:4e:
26:73:f4:e6:a4:44:15:0f:00:f5:fc:c8:76:45:b3:
5c:7e:b0:6f:b6:77:11:11:85:01:b2:11:1a:44:cd:
f9:8f:80:4b:17:6b:85:bd:19:4d:d9:14:c1:f0:a3:
ad:34:fb:9e:19:1f:45:e8:24:51:2c:a6:71:99:2e:
bf:45:07:1f:55:04:b2:88:7a:5a:16:e1:c8:dd:d1:
d1:27:57:69:7a:53:5c:b4:bf:34:13:48:57:40:67:
07:58:17:9f:38:56:82:0e:ed:b2:0c:ab:72:f8:03:
a3:35:17:34:28:5c:57:73:b0:4f:34:91:82:c9:71:
ef:32:c9:38:0d:b2:3d:f7:f6:03:b0:be:e7:70:3f:
bd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7A:34:E5:7B:28:BD:53:E7:00:9F:19:F6:C4:3A:12:36:90:58:47
X509v3 Authority Key Identifier:
keyid:05:41:EA:1B:F2:AD:AA:DD:36:A6:22:EB:3E:A8:35:DC:9B:B6:81:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:7b:31:37:84:d2:8d:43:e7:32:ff:32:82:52:06:94:4b:1a:
cb:16:a0:c0:cd:13:d6:3e:c3:80:60:5c:82:fe:7a:c6:6b:c6:
73:26:2e:2b:30:f6:e0:e7:0d:d4:2b:d8:f2:ed:82:36:56:60:
fc:f3:3a:c6:84:50:70:c5:e1:b1:48:96:bd:67:ff:40:1c:e7:
c1:e3:65:e5:00:a7:15:e2:2d:8e:06:e6:7a:43:7b:03:7d:71:
2c:bc:d3:f4:ed:ac:78:2a:30:bf:05:50:1b:de:ef:09:ca:1c:
8f:1f:23:33:5c:49:b4:b5:ac:68:44:fa:51:cd:eb:20:e2:d9:
90:0b:ea:de:c3:2a:b6:0b:0a:0b:ff:de:7f:b1:7e:9e:e7:a5:
c8:ff:a8:fb:50:f6:80:bb:7c:eb:e4:3b:c7:6b:86:aa:1b:aa:
80:08:f1:0f:ef:c3:81:48:77:07:72:42:1a:31:d3:b1:fa:08:
d0:d1:30:f1:ae:54:1f:95:ee:fb:78:89:4e:3f:70:d0:7c:5e:
4b:ce:26:e7:84:57:ca:68:1b:57:4c:c6:f1:6b:10:12:2b:11:
35:16:1f:38:e5:4a:09:5d:18:8c:a2:96:8f:fa:26:f2:5c:dc:
32:e0:7f:1c:be:55:b7:a4:85:78:4b:b7:71:aa:cf:8f:ee:f4:
1f:35:de:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:39 2025 by rpki-client