Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
File: BUQJodiwcvfbAkUouXIDOb27sQY.mft (raw, json)
Hash identifier: NqS0lwY7wSaUsd3ltDobQtcUJc7iCKvgBQVD+CY/A8k=
Subject key identifier: 8C:33:98:8C:C8:AA:8E:3B:72:FA:33:F3:1C:4A:7F:4A:8A:FC:EA:5C
Authority key identifier: 05:44:09:A1:D8:B0:72:F7:DB:02:45:28:B9:72:03:39:BD:BB:B1:06
Certificate issuer: /CN=054409a1d8b072f7db024528b9720339bdbbb106
Certificate serial: 0197B8FD5FC902CD8524050CF4E1927E3DEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
Manifest number: 15B8
Signing time: Sun 29 Jun 2025 00:01:42 +0000
Manifest this update: Sun 29 Jun 2025 00:01:42 +0000
Manifest next update: Mon 30 Jun 2025 00:01:42 +0000
Files and hashes: 1: BUQJodiwcvfbAkUouXIDOb27sQY.crl (hash: HGGmgNzMnlhvFj2rBupYNPpCQ1fRn1LWrM6FktA+nsI=)
2: UMjcguXzK8JJuV9OAn9YGkymPvA.roa (hash: 4DrO4r19O+5ROWEhi1+BcrHjdVH/qYD6Oqql5i/mVz8=)
3: VVkXzzLot1NoIJDj7qPW9t8KJeA.roa (hash: dj1ugJopxiv7wcnxLpO9LCCqzbXxSCBi0Qzt+qevjaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:5f:c9:02:cd:85:24:05:0c:f4:e1:92:7e:3d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054409a1d8b072f7db024528b9720339bdbbb106
Validity
Not Before: Jun 29 00:01:42 2025 GMT
Not After : Jun 30 00:01:42 2025 GMT
Subject: CN=8c33988cc8aa8e3b72fa33f31c4a7f4a8afcea5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8e:e6:fd:5b:f8:7e:22:26:9b:4d:14:4a:58:
a6:1d:d6:a6:b9:7d:c9:b7:a2:bd:2c:41:93:34:a9:
33:3f:62:2c:d7:2e:26:ba:12:fe:16:1d:c1:81:b7:
4b:ff:28:c5:09:d2:20:dc:18:e8:51:79:31:54:15:
45:93:77:62:6b:4e:64:62:f7:4d:22:01:5f:30:ef:
6d:bb:5c:69:38:8a:be:5e:37:d1:f6:cc:d0:d0:2a:
76:5f:b4:24:d1:0f:9b:37:8a:fd:e6:96:77:25:c9:
84:d7:e5:08:81:90:94:6d:aa:ae:b8:62:3c:32:80:
16:36:a5:e7:86:28:ce:b4:53:ad:1e:df:11:48:54:
6a:85:bd:f3:f2:9b:fc:8f:88:fc:30:5b:1b:56:f3:
c9:3b:47:a9:17:15:c5:51:2d:41:85:a0:74:36:f9:
4f:7b:ca:dd:38:11:8a:8e:33:11:70:5b:7a:35:26:
1e:81:92:c6:60:79:e4:65:cf:59:57:bb:ba:bb:9e:
5b:1e:2f:b2:d3:cc:2b:92:26:3d:8e:0b:c8:93:2d:
f6:7d:0b:5d:08:5a:69:ce:eb:de:75:5a:ef:92:5e:
4a:e4:8c:34:d5:3a:66:38:0d:49:54:67:c2:87:40:
67:03:af:f8:a3:ac:60:9d:5b:2d:78:32:24:16:d8:
6f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:33:98:8C:C8:AA:8E:3B:72:FA:33:F3:1C:4A:7F:4A:8A:FC:EA:5C
X509v3 Authority Key Identifier:
keyid:05:44:09:A1:D8:B0:72:F7:DB:02:45:28:B9:72:03:39:BD:BB:B1:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:75:7b:6a:f4:57:0a:ea:f4:34:ea:38:fe:2a:84:c1:00:de:
d1:4a:a7:e0:41:e3:d8:08:89:59:c1:b1:4a:c1:6a:d8:99:a5:
1f:c0:f8:01:d6:68:42:13:78:7d:90:92:fd:9c:bd:1e:55:31:
34:b4:d7:de:b2:6e:9b:a4:d7:4d:a2:73:f6:f7:98:24:ab:dc:
75:c7:f9:9f:94:b5:0b:3b:19:ec:93:5b:e2:0b:ed:d4:85:36:
29:3b:d7:c5:51:3c:6e:d8:05:79:f3:33:13:f9:a4:d2:85:dc:
4e:b5:35:88:cc:1e:06:f5:a0:17:36:3c:60:37:51:1b:c2:2a:
38:10:20:b5:d4:76:7f:c8:c4:0d:0d:12:de:cd:78:33:c4:91:
62:3a:c1:8e:77:05:16:4b:35:90:b7:c6:69:dc:03:aa:dd:4a:
57:e5:de:20:70:90:31:9f:43:4b:b6:b3:80:94:b1:52:e4:83:
0d:c9:00:ba:6e:15:f3:4a:f2:da:f7:16:be:6b:c0:28:39:d6:
70:51:0d:6f:0d:a4:2c:c0:84:20:2d:16:eb:e0:8e:8a:d2:bc:
ba:30:97:14:15:b6:8b:64:f1:3e:75:9a:b7:04:de:94:6a:3f:
53:2f:69:d3:50:61:9e:92:58:8e:f9:51:7e:02:0e:55:6f:87:
18:8f:6c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:32:10 2025 by rpki-client