Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
File: BUJK-kvO52VL3zq3kWVuREXC-Vo.mft (raw, json)
Hash identifier: 2MOxH/yS1STG0WE4oWkYXNfYw1Ri8gknAEHA9fg0Clg=
Subject key identifier: D0:D3:34:7A:EB:87:11:EA:75:1C:44:40:0A:DB:FD:5B:40:E6:57:2D
Authority key identifier: 05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
Certificate issuer: /CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Certificate serial: 0196A31C1053A1DC69FD321B6BBE54363126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
Manifest number: 0338
Signing time: Tue 06 May 2025 01:00:47 +0000
Manifest this update: Tue 06 May 2025 01:00:47 +0000
Manifest next update: Wed 07 May 2025 01:00:47 +0000
Files and hashes: 1: BUJK-kvO52VL3zq3kWVuREXC-Vo.crl (hash: wzVdQzLYZG+3nwJwCenvU+eKNJ9plBs6Cfy2KSMwGcs=)
2: IUMtGwo7cTFP42D9nrk7-OpkQvQ.roa (hash: c6c/rj/fNAeM/ZuHFO3HQMFeZ6ws+kGa19bAnjrXmhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:1c:10:53:a1:dc:69:fd:32:1b:6b:be:54:36:31:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Validity
Not Before: May 6 01:00:47 2025 GMT
Not After : May 7 01:00:47 2025 GMT
Subject: CN=d0d3347aeb8711ea751c44400adbfd5b40e6572d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:52:d3:d0:02:71:0b:05:76:56:2d:58:e8:db:
1f:22:c8:27:d2:54:da:7e:20:cc:8e:50:10:60:9e:
38:ad:5b:30:b5:6c:d8:fb:17:2f:5e:c3:61:20:83:
34:df:99:dc:60:c4:00:60:e0:5f:19:fe:6d:8e:05:
29:75:4d:42:57:37:34:98:d5:7b:1f:76:bb:2b:17:
97:62:d7:b3:03:68:27:73:fb:e1:03:75:71:e8:60:
0f:7f:3f:b3:17:c5:4c:67:f4:8e:03:cc:fe:c9:10:
2c:08:08:e7:bb:e3:42:6c:c1:23:de:13:4e:03:3e:
92:55:48:89:e5:49:ac:c8:97:fb:ca:9a:ac:5a:93:
ff:ca:9f:4c:58:f9:67:10:a3:e7:77:0d:28:5c:5b:
1d:5d:79:0f:ee:f7:93:e8:24:57:9d:f5:cb:96:61:
26:56:ae:00:64:77:e6:ee:a3:81:93:20:d8:42:e4:
81:07:a7:f3:3e:41:90:19:9a:86:9c:94:31:7d:3a:
e8:e0:4d:b6:0f:df:53:7d:44:44:0f:d7:10:2c:46:
ad:ba:7c:7c:5e:c5:53:c3:4d:91:81:9d:63:97:84:
20:69:7d:f1:2a:c5:62:8a:40:80:a4:78:e2:2c:d1:
21:e4:52:8e:cb:0e:89:29:f1:f5:2f:4c:ed:cc:0a:
0a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D3:34:7A:EB:87:11:EA:75:1C:44:40:0A:DB:FD:5B:40:E6:57:2D
X509v3 Authority Key Identifier:
keyid:05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:95:b8:b3:c7:91:a7:35:16:9a:57:58:72:9a:0b:53:8f:0f:
29:43:7f:b1:a7:ba:e9:a7:c2:82:e7:0d:2f:b9:c2:6c:48:2b:
fe:41:4d:34:74:b2:e2:58:32:70:0f:49:ca:bd:0a:9f:6a:8c:
c7:ec:08:6d:04:ef:72:47:8c:72:e8:27:d0:16:fe:dc:e7:1a:
95:11:09:28:83:15:63:aa:89:87:0c:3c:5c:b9:ad:7d:bc:2f:
77:0d:cd:4c:55:c0:6c:07:21:d4:31:f5:c6:19:3a:88:2a:1e:
d0:8d:d1:46:5b:9f:9f:58:7b:5b:6e:28:08:b5:93:ff:ac:f0:
8e:07:d0:86:1a:5b:71:e7:d5:f0:c2:4a:12:52:2e:6c:86:0d:
cd:34:84:cd:aa:ea:05:56:d2:c6:bd:37:8d:55:cf:0c:ff:10:
87:be:0f:ce:09:30:a8:5f:35:1b:79:cd:54:2e:16:48:ff:e0:
79:ae:a5:b6:d6:5e:27:ef:46:0d:c2:52:7c:c5:de:01:13:0b:
97:11:49:03:2d:86:67:b2:85:79:e3:cc:41:31:d2:4f:26:2c:
7d:24:41:94:4f:25:64:3f:f2:42:ac:9d:82:01:ce:d2:af:6d:
c9:14:35:0c:7b:b2:ae:30:22:da:e7:6c:ff:24:bd:dd:14:73:
7c:e8:87:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 10:20:09 2025 by rpki-client