Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
File: BuS72riW5mET81G02cgt9Q5mpxI.mft (raw, json)
Hash identifier: aPIwA+w9uavYCqKr1qX3L/PBvhKo6IQNn1FHZ5nFR/k=
Subject key identifier: 0B:21:02:E6:F2:2A:82:A3:D1:A2:D8:0A:B0:E6:6E:ED:4F:53:0C:AD
Authority key identifier: 06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
Certificate issuer: /CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Certificate serial: 0199FFFE9C87BA8619D4E3AA309ECF872A3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
Manifest number: 0682
Signing time: Mon 20 Oct 2025 05:01:40 +0000
Manifest this update: Mon 20 Oct 2025 05:01:40 +0000
Manifest next update: Tue 21 Oct 2025 05:01:40 +0000
Files and hashes: 1: BuS72riW5mET81G02cgt9Q5mpxI.crl (hash: iXgOjLlRQ14GcVQWmDx2Xb7nVnKv08Ih2AnYa5DjzNI=)
2: KnO7E8tJ1abhGCx2wXuCqs1IO3U.roa (hash: BCSVnZM2aJUhjEMy986ORQcWilXP95wH0oKfNXEAgBs=)
3: Q3h6qAQg8Z7eTE0PbTbXQ8Re-9A.roa (hash: S28QHIVwCTs2cZmHNwDOnovD8sAEfmTgDloHmODDCO4=)
4: Tg5Eip16OiivA4_zKye1REwFA00.roa (hash: Gd1niBs91vG5rW4xFPormFpiCgQUUugy0jDW22UcbYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:9c:87:ba:86:19:d4:e3:aa:30:9e:cf:87:2a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Validity
Not Before: Oct 20 05:01:40 2025 GMT
Not After : Oct 21 05:01:40 2025 GMT
Subject: CN=0b2102e6f22a82a3d1a2d80ab0e66eed4f530cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:98:dc:7b:81:78:6a:38:43:84:01:18:c6:a3:
81:94:14:a9:44:67:57:fd:b1:4a:d7:79:e5:48:18:
c2:eb:36:53:e7:f6:0f:eb:60:23:15:c9:d6:a2:d5:
f8:b2:dc:b2:56:6f:58:4b:a5:7d:19:58:19:4f:68:
fc:84:9d:d2:bd:a0:6d:6e:2c:bd:eb:93:71:72:64:
43:60:c5:e8:2e:ef:e9:6b:8d:d7:cf:3a:95:e3:e7:
40:c8:8a:74:58:75:f7:a1:bf:03:3e:2d:fe:44:1e:
b6:ae:33:90:b5:ca:b5:fe:56:19:77:1a:25:fa:ab:
02:99:91:30:35:0e:f6:61:74:0a:fd:74:3a:51:e6:
72:61:ce:9c:86:02:48:e0:9c:a4:99:d7:b2:86:df:
87:da:c9:c9:a4:b8:bd:c2:3f:00:22:1d:dd:83:60:
0e:03:a2:23:60:c6:6a:20:10:1e:40:53:54:18:5a:
1e:fa:f9:96:9b:73:79:d5:cd:bd:9c:66:ac:13:6b:
0f:cc:5e:73:f3:c7:47:31:e6:49:42:55:37:79:92:
e1:af:32:58:62:1d:ab:a0:3a:97:73:db:91:3f:1c:
b6:19:5a:2b:9a:36:c5:d0:de:a2:71:29:84:71:75:
01:99:bc:c7:a9:57:d3:e9:7e:a3:34:e9:e1:42:b8:
e0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:21:02:E6:F2:2A:82:A3:D1:A2:D8:0A:B0:E6:6E:ED:4F:53:0C:AD
X509v3 Authority Key Identifier:
keyid:06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d0:2f:eb:63:8e:5e:6e:13:9d:e6:d0:38:fb:ca:b1:20:bf:
48:9f:b3:ec:87:29:ae:ae:10:55:c6:39:90:02:de:5f:0c:96:
7b:fc:20:05:29:4a:fd:91:56:db:60:2b:a8:56:95:f9:d4:2b:
36:14:75:b7:d1:61:b1:25:00:47:9e:95:5d:1a:bc:1b:88:6d:
15:27:84:81:b3:f4:6c:ed:14:e8:fb:37:7d:4e:f9:3f:73:12:
6b:4a:6a:fe:98:41:37:e5:f3:5f:cf:5a:6f:bd:61:8c:27:78:
7b:e7:e1:ff:f2:b0:51:42:33:7a:fc:42:84:d6:c3:95:09:7f:
36:fb:fa:84:00:83:19:0e:6a:d0:69:9b:d7:ec:5a:60:37:53:
99:4c:fc:f1:9d:70:d8:e7:3e:1a:81:f2:6a:44:a3:a6:fb:43:
46:60:b5:1e:c1:ce:62:d9:4e:fb:27:f9:c5:f1:f4:fe:5d:d3:
b6:08:14:d1:c1:72:1e:7f:5d:4d:7c:5b:eb:1a:5b:de:5a:28:
ba:f9:f7:02:e6:a5:df:e1:ac:db:59:3f:21:e7:2d:07:82:d1:
d6:41:2b:b3:b6:b1:98:2e:b0:b9:93:0b:50:b9:5a:1b:88:f1:
c6:49:67:cd:4b:3b:b3:da:3d:61:b6:68:6c:c0:21:a7:e0:89:
b5:0d:7b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:44:43 2025 by rpki-client