Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft
File: BuLSfTDs_0J3HEq5d6gq6lina04.mft (raw, json)
Hash identifier: nL1WSRsnnxOg+MEIaKVn+LvPt2gyDxSTLbBBSTvtuvY=
Subject key identifier: AF:1C:07:33:A3:7E:58:E3:3D:5D:FA:04:EB:43:07:88:B7:69:EC:F0
Authority key identifier: 06:E2:D2:7D:30:EC:FF:42:77:1C:4A:B9:77:A8:2A:EA:58:A7:6B:4E
Certificate issuer: /CN=06e2d27d30ecff42771c4ab977a82aea58a76b4e
Certificate serial: 0199FC585E94BAF9780432DE6D396089FA52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuLSfTDs_0J3HEq5d6gq6lina04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft
Manifest number: 04B3
Signing time: Sun 19 Oct 2025 12:01:13 +0000
Manifest this update: Sun 19 Oct 2025 12:01:13 +0000
Manifest next update: Mon 20 Oct 2025 12:01:13 +0000
Files and hashes: 1: BuLSfTDs_0J3HEq5d6gq6lina04.crl (hash: nx2bTgAmry+F87+AOQ7zi/6vT3PeIMfFafwuAuzTi4c=)
2: F9NENsgLQplgyDxaKboJGp-ngV4.roa (hash: aqyInFH9uBhCwBTndxpchZMGLxp6pudfSp9X2MnmgCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft
rsync://rpki.ripe.net/repository/DEFAULT/BuLSfTDs_0J3HEq5d6gq6lina04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:5e:94:ba:f9:78:04:32:de:6d:39:60:89:fa:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e2d27d30ecff42771c4ab977a82aea58a76b4e
Validity
Not Before: Oct 19 12:01:13 2025 GMT
Not After : Oct 20 12:01:13 2025 GMT
Subject: CN=af1c0733a37e58e33d5dfa04eb430788b769ecf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c2:61:4a:de:99:f1:c3:30:ef:1d:52:cf:d1:
e9:2f:33:78:0c:2d:69:0f:cd:1f:31:12:67:aa:ad:
76:8b:cf:80:52:21:1f:57:0d:14:85:87:46:2f:d3:
ee:a2:50:d5:f1:b7:2e:c9:c1:74:40:aa:4a:3a:f9:
e3:95:1d:fb:fb:57:48:64:45:4b:cc:73:f6:22:9e:
8d:3c:85:ac:3d:02:fb:12:4a:db:a8:de:c5:e9:eb:
49:19:6c:e9:fd:41:86:ac:da:4f:d0:11:4d:72:61:
8c:5c:e0:9d:01:13:79:6a:01:88:97:14:bd:fe:71:
3a:1d:cd:68:d8:4a:51:f9:d2:5f:fb:e3:94:66:c3:
8a:cb:48:57:bd:a6:73:4f:f8:00:4a:ee:56:71:05:
2a:7f:f6:bf:16:f7:05:64:ac:b7:16:db:6b:a8:91:
7f:e1:ce:82:4d:6f:43:b2:33:54:cb:b9:e2:0f:3b:
25:55:ad:01:72:a4:89:8f:4f:9e:2b:9e:31:52:6c:
4a:25:1b:4f:a8:13:45:ef:57:f5:e4:12:06:bd:b5:
19:cc:b2:76:43:45:6a:87:fd:8b:5a:23:d2:af:32:
c8:2f:da:18:f3:3e:f3:51:8b:05:ff:5c:df:7f:27:
26:bf:9c:fa:c7:18:95:39:82:c3:b5:f8:c8:38:cd:
3a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1C:07:33:A3:7E:58:E3:3D:5D:FA:04:EB:43:07:88:B7:69:EC:F0
X509v3 Authority Key Identifier:
keyid:06:E2:D2:7D:30:EC:FF:42:77:1C:4A:B9:77:A8:2A:EA:58:A7:6B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuLSfTDs_0J3HEq5d6gq6lina04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:73:4f:c9:ce:dd:5c:4b:db:15:fa:f9:f4:58:c5:14:fc:70:
3f:f0:a3:6b:15:fb:dc:1c:ad:8a:52:d4:50:c3:9e:da:63:e3:
f2:47:dc:e0:b0:d8:8f:42:fb:61:12:ee:4d:53:dc:75:92:6e:
a7:bd:9a:6c:46:52:2b:cf:e8:8a:77:61:67:1c:6a:58:33:df:
e1:77:7b:09:b2:f9:59:42:43:17:ad:56:55:78:2e:68:03:ab:
03:19:1c:2d:73:31:36:03:12:e9:e7:8f:a7:9a:a3:f1:21:82:
d2:9a:11:50:bf:43:72:61:70:c3:7b:80:5b:d6:5e:9a:09:fa:
64:b4:ff:23:17:9b:44:9e:b3:86:2e:95:75:7b:f0:1b:a1:58:
a6:49:ce:d2:9c:a1:b7:50:e7:d7:34:1d:4d:a6:5c:92:09:6e:
46:0a:43:1d:24:26:e5:d4:b2:05:f8:fa:73:10:48:72:2f:90:
f7:98:ee:51:96:a3:31:5b:a4:33:ad:1d:4f:28:8c:7c:17:d2:
90:2f:8f:29:a0:2b:4d:7e:4f:1e:b0:f4:dc:5c:67:c3:a9:cc:
08:8b:65:82:f0:dc:ab:35:d7:a6:4b:b7:b9:3c:db:3d:b9:e9:
bb:43:af:f7:19:d1:2c:7e:0b:e0:0a:1e:8e:f8:24:9c:ac:60:
9c:c9:b1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:55 2025 by rpki-client