Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
File: BUJK-kvO52VL3zq3kWVuREXC-Vo.mft (raw, json)
Hash identifier: EqRE/QF6pniENjXNsFoIHL2UWd/9XwiNdSfuGw+PhKc=
Subject key identifier: 5A:84:FA:99:CF:C5:FE:45:6F:DE:38:2F:29:9B:7B:65:A2:B2:DB:CC
Authority key identifier: 05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
Certificate issuer: /CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Certificate serial: 0197B745B68C0F54E091CE3E9076931C3C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
Manifest number: 03C7
Signing time: Sat 28 Jun 2025 16:01:28 +0000
Manifest this update: Sat 28 Jun 2025 16:01:28 +0000
Manifest next update: Sun 29 Jun 2025 16:01:28 +0000
Files and hashes: 1: BUJK-kvO52VL3zq3kWVuREXC-Vo.crl (hash: i/xCHGwC2TAgoGWXJbUuxOCD7Lm40X4cxdm8r493Fwc=)
2: IUMtGwo7cTFP42D9nrk7-OpkQvQ.roa (hash: c6c/rj/fNAeM/ZuHFO3HQMFeZ6ws+kGa19bAnjrXmhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:b6:8c:0f:54:e0:91:ce:3e:90:76:93:1c:3c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Validity
Not Before: Jun 28 16:01:28 2025 GMT
Not After : Jun 29 16:01:28 2025 GMT
Subject: CN=5a84fa99cfc5fe456fde382f299b7b65a2b2dbcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:dd:c5:91:9b:94:09:1e:1e:02:61:8b:f7:dc:
be:45:82:ec:e2:73:42:da:14:2f:f7:69:15:bc:26:
04:1f:86:39:68:cc:ba:d3:89:32:56:69:17:63:9c:
61:d6:88:38:1e:89:db:d6:51:d0:df:6c:1f:8f:27:
cd:32:98:9f:79:95:18:05:02:23:6a:6a:48:39:8a:
3b:41:73:ba:c0:01:f2:80:dc:52:60:ee:80:eb:26:
bf:04:9c:d9:98:79:aa:10:a3:fa:b2:07:d5:8d:13:
bb:4f:12:8b:47:05:a4:b8:d9:b8:21:f3:15:ef:6b:
42:ad:03:fb:24:ff:35:88:03:aa:97:dc:8a:36:5b:
c0:82:60:be:7a:9c:69:57:91:18:55:28:5a:88:12:
db:0d:91:08:a8:6a:29:47:54:c6:bc:c2:d2:94:2f:
94:a5:27:92:2d:f1:f4:6d:99:54:fc:9a:cb:e7:5f:
d5:c1:2f:32:86:6d:99:5d:1c:09:61:d7:52:fe:de:
87:3f:44:14:53:ff:94:ca:e4:cd:06:70:61:fd:b1:
e9:b5:18:6b:08:23:9f:b9:a5:fc:02:b9:7f:0a:3b:
0c:46:1a:5f:05:28:ca:4b:c2:22:bc:56:b4:03:fe:
d4:8b:48:de:ea:a5:d1:c1:ce:b1:dd:d1:1b:c9:b0:
a3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:84:FA:99:CF:C5:FE:45:6F:DE:38:2F:29:9B:7B:65:A2:B2:DB:CC
X509v3 Authority Key Identifier:
keyid:05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:17:fc:70:29:d1:04:3c:34:4f:00:e1:93:23:9b:2c:e2:01:
16:2a:b6:e8:93:db:d8:18:60:af:d9:f6:05:19:c6:f8:73:db:
b8:1d:40:59:e0:61:ff:51:3c:f8:63:c3:d9:69:7f:40:a3:a1:
5f:74:3b:97:46:bb:32:47:5b:ce:f3:16:ef:56:c5:bc:c7:23:
8f:37:3f:ae:a0:41:92:d9:c5:4f:5e:b3:01:f5:bd:f1:64:d2:
3c:9a:60:01:d7:b8:d6:82:f0:8c:02:ce:b1:6a:c3:48:8e:d6:
0c:e5:1e:c7:17:6b:62:52:41:af:e1:82:27:36:e9:f8:93:53:
9f:0e:41:ed:9a:57:20:97:d8:25:30:be:72:01:7c:cc:f6:66:
00:82:dc:da:48:0b:cf:d0:8b:d0:95:43:64:23:0a:04:61:12:
b6:bc:48:84:5c:bd:88:1b:56:62:b5:6e:eb:88:1c:2d:0e:f6:
d6:db:da:86:91:0e:94:15:c2:26:c0:bc:07:9e:6c:4d:b0:3a:
e2:2b:6f:aa:1f:46:d7:56:54:b3:e6:85:b0:8d:f9:26:21:ca:
a4:97:94:7e:89:88:78:25:55:80:12:b0:01:b8:ea:84:b3:51:
cd:e9:3f:13:47:a3:2a:a1:36:31:90:b8:8e:7c:e4:a0:15:da:
73:1b:d9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:48 2025 by rpki-client