Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
File: BUJK-kvO52VL3zq3kWVuREXC-Vo.mft (raw, json)
Hash identifier: 5wscVc9aq2+zJTBB4D+iZNUxbXpVw5vSf8VfWTo+Du8=
Subject key identifier: BB:0E:45:65:1A:66:14:46:14:59:F6:8C:D2:B3:A5:C5:5F:96:B7:55
Authority key identifier: 05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
Certificate issuer: /CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Certificate serial: 0199FC8F767F03C4AC46C28E2DCA424F6F59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
Manifest number: 04F4
Signing time: Sun 19 Oct 2025 13:01:24 +0000
Manifest this update: Sun 19 Oct 2025 13:01:24 +0000
Manifest next update: Mon 20 Oct 2025 13:01:24 +0000
Files and hashes: 1: BUJK-kvO52VL3zq3kWVuREXC-Vo.crl (hash: 9bHeNLnbD2yT/rLtCeEX+ckUFzc/7NsQ1O/pv3n2TE0=)
2: IUMtGwo7cTFP42D9nrk7-OpkQvQ.roa (hash: c6c/rj/fNAeM/ZuHFO3HQMFeZ6ws+kGa19bAnjrXmhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:76:7f:03:c4:ac:46:c2:8e:2d:ca:42:4f:6f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Validity
Not Before: Oct 19 13:01:24 2025 GMT
Not After : Oct 20 13:01:24 2025 GMT
Subject: CN=bb0e45651a6614461459f68cd2b3a5c55f96b755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e9:5e:71:67:08:22:42:e4:4d:16:f8:45:75:
2b:ec:ff:4c:9a:44:20:14:7c:ab:b6:03:b0:be:f1:
2f:0f:6b:80:78:eb:b7:8b:a9:ce:74:27:b3:0a:08:
01:2a:c0:48:c6:7b:11:5a:bc:b8:1a:35:aa:67:a6:
d2:a2:1f:32:53:58:a6:a7:40:8e:2e:e5:60:d9:e8:
e3:8c:36:96:60:ae:2e:35:d1:0a:61:2a:aa:55:0b:
62:15:87:ff:b7:26:59:8b:96:c7:82:31:ad:ab:67:
f2:8f:9d:1b:2c:e3:d7:58:98:2c:ea:62:91:93:de:
b7:8b:55:91:46:b8:6b:82:98:82:0a:24:f8:c0:fa:
e9:ee:58:a5:f7:82:58:a3:31:2b:15:b7:47:1c:cc:
37:8f:04:bb:e7:8a:d3:ec:08:f0:04:dc:a1:bf:65:
e2:a9:c9:1c:a9:02:36:7e:c6:68:a5:1d:06:7d:2a:
98:d7:6e:02:89:bb:40:00:b4:e4:18:c6:77:ac:2e:
0d:52:c8:7a:43:b3:ce:7a:7f:a3:90:4d:b8:50:19:
56:84:d0:af:57:2c:56:a3:f7:93:fe:a0:b8:b1:d0:
3a:ad:f7:fc:bb:35:8a:69:45:ab:1c:52:95:d2:bb:
3b:9a:76:61:e2:ec:92:aa:b8:a4:0a:49:3f:ab:40:
df:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0E:45:65:1A:66:14:46:14:59:F6:8C:D2:B3:A5:C5:5F:96:B7:55
X509v3 Authority Key Identifier:
keyid:05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:52:88:2e:33:64:ee:ab:e8:b1:45:ee:d5:04:9f:b8:e3:27:
b9:ce:60:c6:74:b7:1c:c9:27:4d:07:e7:eb:4e:97:9b:a3:2b:
cb:78:46:7b:7f:72:74:56:cd:2a:91:ba:6d:43:cf:b9:b4:43:
c4:4d:4b:cd:05:5b:b5:54:98:c8:9a:b9:4f:b7:55:c3:52:b0:
b5:51:d1:6b:cb:3c:93:0f:03:c8:ac:3c:cb:b4:9a:a8:9a:9c:
42:6b:65:6a:12:e6:9e:99:d7:be:a4:f8:d0:c7:0c:49:d4:f1:
0f:40:1f:0a:c0:b6:ce:fd:27:87:75:e2:38:b9:c8:48:fb:78:
7d:2c:06:ef:4d:9a:b9:9f:9c:bc:b8:e4:29:53:c5:bb:5f:87:
34:27:40:fa:e5:94:d9:5e:04:11:63:8b:3a:2c:7b:00:00:2f:
ed:1f:6d:37:8e:1a:c4:17:05:df:b8:32:82:47:f7:45:e5:cc:
6c:b8:98:f6:02:39:5d:90:16:5b:8e:2c:22:6b:61:57:98:87:
2a:ac:e7:66:67:43:78:b6:d0:dd:35:b9:f1:70:b6:d2:19:7d:
af:3f:d0:1e:f9:57:e4:8d:1e:c7:72:d9:e6:4a:98:cf:47:99:
a4:2c:2b:cf:06:43:11:13:ae:4f:82:9a:ed:0a:99:d7:29:6a:
b6:03:ee:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:21 2025 by rpki-client