Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
File: BUJK-kvO52VL3zq3kWVuREXC-Vo.mft (raw, json)
Hash identifier: jUWyMt2zije+6pgHWNjLyMeQc8XNZVkPb6bTORZ0PX0=
Subject key identifier: 5F:92:0F:A5:7F:A7:FC:C9:92:B8:97:A6:21:E5:50:5D:4C:92:B6:1B
Authority key identifier: 05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
Certificate issuer: /CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Certificate serial: 0198D515C33F81850D27103D388B99EDC4D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
Manifest number: 045B
Signing time: Sat 23 Aug 2025 04:00:29 +0000
Manifest this update: Sat 23 Aug 2025 04:00:29 +0000
Manifest next update: Sun 24 Aug 2025 04:00:29 +0000
Files and hashes: 1: BUJK-kvO52VL3zq3kWVuREXC-Vo.crl (hash: HG+zm0UhovGkYKEMqxlNf4GuUa4QDsYywM/Bw8XZSt4=)
2: IUMtGwo7cTFP42D9nrk7-OpkQvQ.roa (hash: c6c/rj/fNAeM/ZuHFO3HQMFeZ6ws+kGa19bAnjrXmhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:c3:3f:81:85:0d:27:10:3d:38:8b:99:ed:c4:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Validity
Not Before: Aug 23 04:00:29 2025 GMT
Not After : Aug 24 04:00:29 2025 GMT
Subject: CN=5f920fa57fa7fcc992b897a621e5505d4c92b61b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:75:f8:7b:88:69:fc:25:b9:35:da:ca:2f:ba:
c1:21:ff:d7:f0:1d:c5:2d:f2:93:eb:a7:a2:c2:c9:
02:c4:8b:67:8e:d3:f5:66:18:70:50:71:1a:2b:f3:
2d:1f:82:a3:83:06:1a:e7:7c:0d:0b:aa:bf:dc:0d:
1a:72:60:4a:21:b5:15:d4:ab:6a:5c:47:21:3e:86:
aa:33:37:da:fe:4d:43:3e:6e:49:67:f8:78:78:40:
cf:df:34:fd:00:1e:e4:3a:4a:4b:03:81:4f:57:5d:
9c:2a:4a:c3:e7:70:42:78:b7:ec:b4:e6:51:b0:cd:
dc:49:36:75:11:41:be:3c:a3:da:24:fd:c5:73:23:
ab:a5:3a:74:d5:45:8c:55:86:e4:1a:aa:96:e6:3e:
ae:5d:c5:e5:3a:62:96:74:ff:1d:b9:1d:8f:0e:c7:
b5:f7:05:3f:55:ea:81:01:3d:d5:f8:11:03:16:ae:
92:b2:5f:5d:4f:cc:6b:0d:f4:64:88:0c:a6:7b:d3:
67:ed:d6:61:94:57:52:48:e6:ee:02:70:e6:03:81:
a4:cc:86:c7:b4:03:bf:77:6a:ec:aa:51:a0:94:90:
74:b1:3d:bd:fd:23:a9:f8:62:3b:1a:f4:2e:d7:58:
47:20:cd:b4:37:4e:68:75:21:fa:89:c8:56:9c:e3:
d9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:92:0F:A5:7F:A7:FC:C9:92:B8:97:A6:21:E5:50:5D:4C:92:B6:1B
X509v3 Authority Key Identifier:
keyid:05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:b2:c1:c3:49:11:e4:20:e0:d8:23:ba:3f:1c:e3:6d:4b:98:
1a:6e:3b:40:e3:06:8a:e7:a6:71:bd:c0:63:d6:98:79:2f:50:
22:83:ee:fd:3b:6a:65:16:b9:ea:5e:c3:91:0c:19:fa:23:1d:
cb:7a:2d:05:38:d7:f7:74:c4:f9:36:5e:88:9b:0e:d5:4d:3d:
7e:a8:3e:15:87:20:76:97:98:55:cf:31:f0:9c:44:71:2b:c7:
75:a4:cd:31:5a:e7:5e:87:6e:b3:2e:23:a7:ea:ef:01:c0:df:
09:67:8b:c1:f5:af:47:98:33:44:8c:9c:2c:0f:92:d1:68:35:
28:1e:55:b8:64:70:51:54:2a:d3:29:9c:cf:0f:26:50:48:68:
9c:0f:6e:54:95:6b:eb:4d:22:66:32:c0:50:44:c3:aa:17:c6:
d4:15:36:77:ed:9b:a7:28:ab:b4:94:c1:e5:21:8f:88:73:14:
c1:62:f5:fb:27:df:62:74:cd:85:0d:85:f1:5d:64:62:8e:6b:
f0:f1:ac:9b:61:27:fb:f8:fe:d5:77:fa:0a:a8:5e:a4:ec:d0:
fa:39:32:6f:62:b1:a5:10:2b:8e:03:8b:57:58:6c:4f:a3:6c:
c3:11:99:ee:04:1c:d7:c0:82:51:a4:80:e1:ed:ee:f8:99:45:
96:e6:b3:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFcM/gYUNJxA9OIuZ7cTTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDI0YWZhNGJjZWU3NjU0YmRmM2FiNzkxNjU2ZTQ0NDVj
MmY5NWEwHhcNMjUwODIzMDQwMDI5WhcNMjUwODI0MDQwMDI5WjAzMTEwLwYDVQQD
Eyg1ZjkyMGZhNTdmYTdmY2M5OTJiODk3YTYyMWU1NTA1ZDRjOTJiNjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HX4e4hp/CW5NdrKL7rBIf/X8B3F
LfKT66eiwskCxItnjtP1ZhhwUHEaK/MtH4KjgwYa53wNC6q/3A0acmBKIbUV1Ktq
XEchPoaqMzfa/k1DPm5JZ/h4eEDP3zT9AB7kOkpLA4FPV12cKkrD53BCeLfstOZR
sM3cSTZ1EUG+PKPaJP3FcyOrpTp01UWMVYbkGqqW5j6uXcXlOmKWdP8duR2PDse1
9wU/VeqBAT3V+BEDFq6Ssl9dT8xrDfRkiAyme9Nn7dZhlFdSSObuAnDmA4GkzIbH
tAO/d2rsqlGglJB0sT29/SOp+GI7GvQu11hHIM20N05odSH6ichWnOPZwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+SD6V/p/zJkriXpiHlUF1MkrYbMB8GA1UdIwQY
MBaAFAVCSvpLzudlS986t5FlbkRFwvlaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVKSy1rdk81MlZMM3pxM2tXVnVSRVhDLVZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi81MTE2ZjMtZjQ1NC00ZDcwLWI5ZDQt
MDgxYjE3OTkzM2M0LzEvQlVKSy1rdk81MlZMM3pxM2tXVnVSRVhDLVZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi81MTE2ZjMtZjQ1NC00ZDcwLWI5ZDQtMDgxYjE3OTkzM2M0
LzEvQlVKSy1rdk81MlZMM3pxM2tXVnVSRVhDLVZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnLLBw0kR
5CDg2CO6PxzjbUuYGm47QOMGiuemcb3AY9aYeS9QIoPu/TtqZRa56l7DkQwZ+iMd
y3otBTjX93TE+TZeiJsO1U09fqg+FYcgdpeYVc8x8JxEcSvHdaTNMVrnXodusy4j
p+rvAcDfCWeLwfWvR5gzRIycLA+S0Wg1KB5VuGRwUVQq0ymczw8mUEhonA9uVJVr
600iZjLAUETDqhfG1BU2d+2bpyirtJTB5SGPiHMUwWL1+yffYnTNhQ2F8V1kYo5r
8PGsm2En+/j+1Xf6CqhepOzQ+jkyb2KxpRArjgOLV1hsT6NswxGZ7gQc18CCUaSA
4e3u+JlFluazLg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:17:56 2025 by rpki-client