Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
File: BUQJodiwcvfbAkUouXIDOb27sQY.mft (raw, json)
Hash identifier: CXPv3+y8lyS4TPwXdQR+WHiWIJV8JjatB1xabj9WWdw=
Subject key identifier: CF:7A:AB:3B:BD:82:D5:B0:FA:26:54:2B:72:7E:74:C6:A3:24:53:B6
Authority key identifier: 05:44:09:A1:D8:B0:72:F7:DB:02:45:28:B9:72:03:39:BD:BB:B1:06
Certificate issuer: /CN=054409a1d8b072f7db024528b9720339bdbbb106
Certificate serial: 0196C1CB6ECF9CD6490AF560023F424F1817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 00:00:56 +0000
Manifest this update: Mon 12 May 2025 00:00:56 +0000
Manifest next update: Tue 13 May 2025 00:00:56 +0000
Files and hashes: 1: BUQJodiwcvfbAkUouXIDOb27sQY.crl (hash: VcF/arbqMDkx8vhYSzziousYk+HbGqLD2Gj7lxaBBZ4=)
2: UMjcguXzK8JJuV9OAn9YGkymPvA.roa (hash: 4DrO4r19O+5ROWEhi1+BcrHjdVH/qYD6Oqql5i/mVz8=)
3: VVkXzzLot1NoIJDj7qPW9t8KJeA.roa (hash: dj1ugJopxiv7wcnxLpO9LCCqzbXxSCBi0Qzt+qevjaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:6e:cf:9c:d6:49:0a:f5:60:02:3f:42:4f:18:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054409a1d8b072f7db024528b9720339bdbbb106
Validity
Not Before: May 12 00:00:56 2025 GMT
Not After : May 13 00:00:56 2025 GMT
Subject: CN=cf7aab3bbd82d5b0fa26542b727e74c6a32453b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:be:7a:85:76:51:28:c8:77:21:80:b7:0f:d7:
9d:f7:5a:b4:08:8a:fb:25:e8:18:1e:5b:d7:20:77:
72:67:7b:18:a1:79:04:27:a4:ff:af:ad:ea:29:67:
43:af:3e:8e:ae:47:80:fe:ab:b4:96:c9:eb:dc:e0:
06:22:f2:39:f7:32:f5:57:31:8f:95:83:d5:5c:64:
e8:fe:57:85:21:33:dc:db:81:3e:e5:d4:17:e5:51:
d4:be:7c:9a:96:7f:a0:45:97:b6:4a:26:8c:cc:3c:
cc:13:2e:79:85:ea:62:6f:06:9a:29:2c:5b:5d:6f:
cf:d6:f4:80:f8:17:4f:3f:48:34:56:4b:ac:a3:fe:
2c:96:e5:45:6d:19:fc:83:0a:b0:70:9c:30:3d:7c:
e2:60:35:4f:44:4e:1c:4f:2c:ce:35:21:1e:d3:27:
b7:76:04:15:20:80:b1:9f:6d:f3:e4:58:4d:9f:2c:
2e:c5:7c:49:a5:ac:a2:59:9e:bf:01:13:86:40:aa:
09:78:16:30:7d:09:04:f9:23:70:7a:ff:f1:15:2e:
ea:46:2b:b7:62:1b:d0:10:30:e0:aa:39:c0:21:d3:
23:93:14:39:0b:15:dc:7c:3d:c5:90:7f:d7:41:f0:
d3:2e:24:d5:07:97:54:11:f3:bc:cc:be:1e:20:6f:
be:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7A:AB:3B:BD:82:D5:B0:FA:26:54:2B:72:7E:74:C6:A3:24:53:B6
X509v3 Authority Key Identifier:
keyid:05:44:09:A1:D8:B0:72:F7:DB:02:45:28:B9:72:03:39:BD:BB:B1:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:06:84:e0:e6:df:a0:39:8c:ce:cc:1b:a9:47:7f:24:76:22:
5a:f9:3d:bb:27:84:c9:b8:a7:95:90:be:fe:be:be:70:bb:e5:
6f:de:aa:4a:f6:bd:88:04:3e:8f:ae:79:af:0b:ba:94:d3:01:
57:f6:c3:01:5e:e5:84:bf:3b:be:00:9c:35:8f:c3:78:6c:22:
48:b0:0a:e3:11:cb:1c:90:52:a6:e4:26:74:3e:d4:6d:e4:ca:
26:9c:13:1e:a7:fa:4e:91:04:1f:3c:5c:4f:40:35:21:23:de:
05:29:b0:ad:19:f5:98:5d:2e:28:9a:91:7a:0d:c6:88:0d:bb:
20:ef:ed:c3:e8:d4:59:dd:bb:c7:da:94:ad:67:78:31:76:81:
80:0b:d9:06:23:79:cf:ad:11:cb:79:e1:90:dd:aa:d0:a1:ff:
a3:1d:00:c3:e2:7b:55:6e:38:9b:ce:5b:43:23:f1:b1:87:9f:
02:7f:57:d8:93:ae:c5:ff:e0:52:b1:76:94:fe:49:57:d5:54:
80:d1:cb:98:ca:76:b2:45:5e:12:24:35:82:c0:18:04:83:a8:
5b:21:cd:6f:94:28:2a:2f:a0:47:de:06:a6:c3:70:09:24:fc:
af:8e:09:f6:45:bf:c0:3e:b6:29:c5:e7:94:31:00:b8:66:5c:
dc:a8:c8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:58:51 2025 by rpki-client