
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
File: BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft (raw, json)
Hash identifier: 2jz9MD89SfW2mskXh5y+gwHux9XhpAg8EoheNmQ9hiQ=
Subject key identifier: F1:CB:57:44:4C:55:8F:68:65:4D:3B:5A:4E:0D:A0:70:BA:B1:8B:7E
Authority key identifier: 05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
Certificate issuer: /CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Certificate serial: 019A00A36C01CD67CE3B6208263CB2FFD559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
Manifest number: 0880
Signing time: Mon 20 Oct 2025 08:01:41 +0000
Manifest this update: Mon 20 Oct 2025 08:01:41 +0000
Manifest next update: Tue 21 Oct 2025 08:01:41 +0000
Files and hashes: 1: BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl (hash: pn376Yne22SiBX/yQ77+DcSn+BeKQybOjXrK9AM/R80=)
2: FU5ckiwSRF9khD7WupXiavmIPzs.roa (hash: 84Hh9Rd/Utxajq2oO+DHR2ECiOMAuLuEnM4faDd74uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:6c:01:cd:67:ce:3b:62:08:26:3c:b2:ff:d5:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Validity
Not Before: Oct 20 08:01:41 2025 GMT
Not After : Oct 21 08:01:41 2025 GMT
Subject: CN=f1cb57444c558f68654d3b5a4e0da070bab18b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bd:ac:ca:ac:81:a7:68:49:70:c2:cc:b7:91:
38:93:61:bc:7e:fd:e7:d0:52:db:22:94:f5:ec:74:
6d:c0:7c:3b:f8:bd:80:95:97:7c:82:07:4a:57:fc:
95:dd:85:9b:dc:31:8a:5a:60:d5:7e:a0:28:ae:95:
e9:9b:f7:9e:76:c4:90:a7:92:eb:1b:64:22:0a:ee:
46:86:e3:6f:b3:77:a7:94:ed:d6:ed:50:99:ed:82:
03:3b:4e:61:42:3e:94:1f:6c:0b:f9:85:fc:9a:10:
1b:f0:7b:87:45:28:44:68:e1:be:5d:5f:96:7d:a0:
06:d5:d3:af:83:3d:df:90:98:fd:33:bc:b9:1e:a5:
a6:5b:0d:d2:ea:d6:43:99:4c:35:29:6e:f0:2a:0a:
09:28:e0:35:37:d6:35:16:a1:88:79:17:05:4a:94:
c1:7d:a6:ff:bf:1a:b2:30:7a:4c:2d:ad:10:7c:68:
f5:0f:2c:38:d8:dd:b8:f5:3a:86:eb:0b:34:7a:c9:
6d:a1:df:b3:fa:99:2a:d1:80:75:b3:16:88:f4:0b:
0e:7f:d6:71:ac:33:c9:22:5a:a0:32:01:c6:f8:3c:
4d:88:06:6d:38:2f:33:3e:84:12:23:2d:9f:94:a0:
4d:0b:64:24:ab:dd:51:a7:1a:e6:b3:bf:bf:f4:32:
d6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CB:57:44:4C:55:8F:68:65:4D:3B:5A:4E:0D:A0:70:BA:B1:8B:7E
X509v3 Authority Key Identifier:
keyid:05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:8c:01:37:e0:1d:6c:31:06:20:e1:b9:a6:0a:d2:a4:b2:57:
e7:d3:7d:cf:be:41:f7:22:5c:e4:cf:9f:de:65:f1:18:73:05:
a4:65:33:18:5b:93:e6:06:48:0c:30:a9:0e:66:ea:af:ca:3a:
c3:ff:80:9f:54:84:68:28:4a:cb:3b:de:3e:fd:a5:04:76:c8:
ed:bf:f4:23:2c:15:09:bf:85:6b:b7:bb:14:d8:01:63:4a:1c:
df:aa:13:fa:9b:fb:30:09:72:d1:0a:52:37:5d:d6:64:84:50:
63:77:ab:74:ce:0b:7a:9d:05:b1:f0:59:11:5e:58:e8:71:90:
1c:d6:6d:93:eb:8e:fe:68:63:5c:3d:69:0c:33:d1:e1:ee:11:
82:76:ec:de:3a:9f:56:e2:46:dc:6c:5a:9c:41:01:a3:9f:85:
b4:52:7a:d4:82:c9:ed:82:74:13:4c:3a:a3:90:b1:53:0d:97:
26:56:cb:82:f5:8d:99:16:3c:4e:92:fe:9e:d9:e4:5f:c5:0e:
cc:2f:a9:6f:95:78:6a:72:fd:cd:a0:e7:e0:17:fa:7a:d5:c4:
8d:66:c1:f4:60:9d:41:2c:da:fe:8c:1b:8c:76:e0:3e:cf:9f:
87:f1:73:06:f8:f2:5e:f5:71:0e:ef:e6:ea:23:4e:77:39:9f:
bb:5c:62:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:11:28 2025 by rpki-client