Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
File: BUQJodiwcvfbAkUouXIDOb27sQY.mft (raw, json)
Hash identifier: sIR+zawzvJzCwQYm01kI5h/mokaCJj/9SIGJ/RUs6UM=
Subject key identifier: E2:20:AF:74:70:DF:AA:FF:7F:12:16:6B:EF:DB:37:75:C9:98:64:CB
Authority key identifier: 05:44:09:A1:D8:B0:72:F7:DB:02:45:28:B9:72:03:39:BD:BB:B1:06
Certificate issuer: /CN=054409a1d8b072f7db024528b9720339bdbbb106
Certificate serial: 0198D4E05162E192BFF397BE7F2A7D8A1B2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 03:02:07 +0000
Manifest this update: Sat 23 Aug 2025 03:02:07 +0000
Manifest next update: Sun 24 Aug 2025 03:02:07 +0000
Files and hashes: 1: BUQJodiwcvfbAkUouXIDOb27sQY.crl (hash: +e3OLsrfbcQPkY1SM80eiV8GZf8jHp+WbmIZEXvxe38=)
2: UMjcguXzK8JJuV9OAn9YGkymPvA.roa (hash: 4DrO4r19O+5ROWEhi1+BcrHjdVH/qYD6Oqql5i/mVz8=)
3: VVkXzzLot1NoIJDj7qPW9t8KJeA.roa (hash: dj1ugJopxiv7wcnxLpO9LCCqzbXxSCBi0Qzt+qevjaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:51:62:e1:92:bf:f3:97:be:7f:2a:7d:8a:1b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054409a1d8b072f7db024528b9720339bdbbb106
Validity
Not Before: Aug 23 03:02:07 2025 GMT
Not After : Aug 24 03:02:07 2025 GMT
Subject: CN=e220af7470dfaaff7f12166befdb3775c99864cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:52:c0:67:98:27:ab:49:37:cd:75:f4:44:41:
d0:1f:c0:34:6d:a0:01:75:2b:15:03:c5:46:c4:8e:
3c:ba:df:dd:d8:c4:7b:b1:f9:6f:ae:22:2c:5a:93:
d0:1a:c8:57:dd:66:d4:36:08:d3:4a:dd:b2:99:1c:
68:d3:cc:35:13:47:d9:50:76:b9:e9:44:27:7c:90:
f1:07:25:45:d3:94:1f:ca:a0:90:45:d5:f1:8b:36:
fb:b9:92:76:d6:21:56:2c:a3:28:e1:d8:84:a6:d7:
33:d5:bb:39:8d:9b:b4:61:b4:2a:71:78:d8:a9:53:
2c:59:a7:c4:81:37:f6:48:fe:fb:ff:5a:b9:5d:d3:
60:b5:15:33:fa:b0:a7:88:f3:27:3f:a6:c1:05:6a:
61:81:c9:79:72:9f:07:32:b6:bc:0d:66:41:9e:61:
50:05:e2:1d:6a:4e:6d:fc:b3:40:df:d7:db:89:c2:
61:09:25:21:97:38:1d:72:de:4e:2d:77:02:6b:b9:
f1:39:da:cc:6c:f3:70:1a:83:9e:af:27:f6:79:8a:
f7:ab:4e:fb:20:85:00:c7:98:19:6d:68:d1:cc:41:
c3:29:c6:9b:78:6f:fe:72:2a:1e:3b:ef:b4:d5:0e:
7a:8e:24:cf:d9:d5:4e:3b:ac:ce:df:30:9c:23:6e:
1c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:20:AF:74:70:DF:AA:FF:7F:12:16:6B:EF:DB:37:75:C9:98:64:CB
X509v3 Authority Key Identifier:
keyid:05:44:09:A1:D8:B0:72:F7:DB:02:45:28:B9:72:03:39:BD:BB:B1:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:35:8a:0e:91:68:b8:41:5e:e6:30:89:fb:df:fe:5b:9f:44:
ba:78:f5:27:b5:b0:8f:52:9b:bc:60:a0:ca:ba:0c:9f:a2:3c:
9d:b3:69:81:ba:af:fb:57:e5:2c:22:57:b9:cb:93:31:6c:f0:
57:4c:d7:7d:52:cd:0f:aa:3f:30:da:18:57:ed:a5:9a:63:2b:
ce:49:39:d0:de:cd:43:0a:ce:57:00:48:c5:15:7f:09:f8:6c:
84:eb:b8:f9:36:94:01:f0:9b:33:90:47:3e:84:b2:9f:3f:d6:
58:ab:99:e5:41:d2:b7:c1:f2:eb:d4:0e:86:72:c8:91:25:8d:
87:bf:27:ad:f4:b1:3d:c0:7c:b8:83:41:71:3c:2b:91:bf:f3:
86:ea:fb:e4:a5:e4:a0:09:df:35:d7:8d:b4:33:9f:ac:39:6b:
f7:ab:d3:3e:51:be:ec:af:79:48:39:9b:15:72:24:3d:92:57:
33:6c:7b:69:2b:6e:76:30:00:34:29:28:fb:c0:29:5a:54:31:
00:ab:08:d7:21:97:b6:d4:0f:f4:4f:2b:ad:50:ed:4f:d1:f6:
4f:30:29:8f:18:bc:76:8a:1f:12:05:6c:ff:88:bd:45:f3:81:
1d:34:93:a2:6b:e8:7e:47:bd:40:7a:59:70:53:96:22:0d:ac:
ec:c4:f2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:53 2025 by rpki-client