Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
File: BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft (raw, json)
Hash identifier: iArCoL8FCm10GNhsmv4mH5fYick756KJqaESbNNAx3Y=
Subject key identifier: 6F:FF:22:7B:AF:D0:F8:F9:D9:83:3D:6D:5B:F3:2E:70:75:B4:0A:D8
Authority key identifier: 05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
Certificate issuer: /CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Certificate serial: 0198D54E4A8B0F330E9D0A85454643B488CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
Manifest number: 07E5
Signing time: Sat 23 Aug 2025 05:02:14 +0000
Manifest this update: Sat 23 Aug 2025 05:02:14 +0000
Manifest next update: Sun 24 Aug 2025 05:02:14 +0000
Files and hashes: 1: BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl (hash: TR/agpFBVp47b8us0ALydmJqupAF3Tq1CcTYN5/bPxA=)
2: FU5ckiwSRF9khD7WupXiavmIPzs.roa (hash: 84Hh9Rd/Utxajq2oO+DHR2ECiOMAuLuEnM4faDd74uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:4a:8b:0f:33:0e:9d:0a:85:45:46:43:b4:88:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Validity
Not Before: Aug 23 05:02:14 2025 GMT
Not After : Aug 24 05:02:14 2025 GMT
Subject: CN=6fff227bafd0f8f9d9833d6d5bf32e7075b40ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e0:a6:96:4f:f2:82:32:78:53:21:0b:cb:e4:
d3:79:07:a7:c0:d3:eb:a0:17:06:b5:95:bd:ee:f2:
06:38:7d:6f:0e:3c:c2:af:af:ec:eb:b0:07:fb:69:
48:1e:fc:66:61:55:88:e7:21:cf:aa:b2:cf:12:48:
10:43:f5:d8:75:16:5c:ef:e3:fb:5e:62:00:12:0f:
df:3e:65:03:a6:9f:f0:d4:36:e8:d8:a7:17:64:b9:
f2:8f:3c:f9:b5:25:4e:6d:77:aa:2a:51:2e:10:7e:
fc:dd:18:86:54:e3:14:b1:c6:b0:05:e3:7c:1f:fa:
d6:a1:0c:6a:cd:78:e7:80:6e:49:39:9e:8c:2a:03:
13:e1:fa:a9:af:0a:74:62:e0:eb:60:2d:2f:15:98:
1d:05:e5:d1:6a:1c:3a:7f:7e:6a:6d:5b:b6:5e:89:
b2:5b:9f:57:04:23:11:b6:19:44:8a:54:3d:8b:25:
b8:5d:b7:f7:3d:82:b0:55:5c:bb:59:c9:78:f3:d2:
9e:0b:42:af:8a:6b:de:0f:c6:2a:a0:77:80:d7:36:
c2:6c:d8:3e:55:59:a2:90:dd:d7:6e:56:26:34:54:
08:6a:82:35:d3:fc:e1:27:99:9b:75:ef:3a:3f:b2:
57:84:b6:8b:f5:f4:91:8a:8d:aa:85:c5:65:09:f4:
ac:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FF:22:7B:AF:D0:F8:F9:D9:83:3D:6D:5B:F3:2E:70:75:B4:0A:D8
X509v3 Authority Key Identifier:
keyid:05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:5b:06:1c:7b:d3:0e:0f:32:03:6f:00:ae:06:da:6e:75:e2:
2b:11:00:9e:1b:18:32:8f:9f:f2:d8:87:12:89:22:6a:12:f4:
91:df:22:65:8f:d5:27:51:18:d1:44:ed:41:8b:87:ae:f4:67:
2d:a4:7a:bf:bd:a1:2a:7b:af:01:6e:4f:e4:2d:54:aa:c1:1e:
52:d0:b7:3f:6e:7b:e3:dc:ea:86:26:05:d0:29:66:d3:30:9d:
06:cf:1e:0a:a3:c0:72:83:3d:eb:38:90:0b:7b:ac:c3:f5:6b:
fe:23:86:9c:5e:2c:7d:e5:fc:5c:f0:4c:99:d9:b3:d0:ef:b2:
65:57:63:1c:5f:6e:da:e8:61:5d:a5:d1:f0:9c:29:11:c5:f4:
32:d9:01:ed:ac:4c:cc:64:c2:35:22:e7:e6:28:74:6c:0a:13:
5c:0b:50:e8:76:11:07:27:48:02:2b:0a:bf:6d:9b:36:cf:f9:
18:33:4a:c1:e4:4c:8a:5f:a1:87:95:92:3c:ec:2b:95:b2:52:
49:e3:8e:5d:94:a6:86:ad:03:b6:ff:46:37:1b:d6:de:1f:15:
fb:71:5f:19:2a:e2:11:0a:d6:69:36:f3:9f:49:61:9d:80:a3:
3b:80:7c:06:8c:45:c3:5f:50:94:3a:3a:99:18:21:15:49:08:
a0:c0:7e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:08 2025 by rpki-client