Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
File: BUdoDlOuWJdMtpQdCGldPA3swq4.mft (raw, json)
Hash identifier: RyX+wpz0Ru6PW4clrAtCh577wdfb4YIxip1NtuBb0Jg=
Subject key identifier: 41:5A:E1:2C:86:EF:F3:3E:48:0F:0C:5E:0F:47:C7:66:BE:42:69:51
Authority key identifier: 05:47:68:0E:53:AE:58:97:4C:B6:94:1D:08:69:5D:3C:0D:EC:C2:AE
Certificate issuer: /CN=0547680e53ae58974cb6941d08695d3c0decc2ae
Certificate serial: 019A003594354906F40D635EC8EFBFEA4667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
Manifest number: 01E1
Signing time: Mon 20 Oct 2025 06:01:42 +0000
Manifest this update: Mon 20 Oct 2025 06:01:42 +0000
Manifest next update: Tue 21 Oct 2025 06:01:42 +0000
Files and hashes: 1: BUdoDlOuWJdMtpQdCGldPA3swq4.crl (hash: VsqgDN3wFqs557cc+/LgVoy+cR35JIwpzvvlHqRal6A=)
2: zV2FqjFlGJe1sQ7mobIeiW5XHzk.roa (hash: qBKcaNstJOD1ItKIM/todQYRv+HqCOCgyFPfIIjpV2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:94:35:49:06:f4:0d:63:5e:c8:ef:bf:ea:46:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0547680e53ae58974cb6941d08695d3c0decc2ae
Validity
Not Before: Oct 20 06:01:42 2025 GMT
Not After : Oct 21 06:01:42 2025 GMT
Subject: CN=415ae12c86eff33e480f0c5e0f47c766be426951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:84:b9:19:78:c8:9b:25:57:ae:82:ec:fe:2a:
7e:fe:70:83:8f:0e:bc:c6:f5:90:d4:d6:4b:63:dd:
1c:7d:ea:56:6c:f2:6a:77:f1:88:f1:20:05:0d:13:
6f:e5:29:94:a1:d7:cc:5c:c2:7f:32:56:ea:76:ad:
d4:76:23:0d:00:e0:1a:01:07:f7:2f:e9:2f:f9:82:
03:5e:1a:36:f1:17:8f:e5:fe:18:f1:b4:23:89:ad:
3f:55:64:44:bf:47:bf:96:5a:ab:f6:f7:ac:98:5c:
76:89:c8:a5:ec:a4:73:f5:a2:a0:cf:22:fd:62:df:
14:53:75:62:6c:da:ba:40:de:55:1f:d6:82:e5:e4:
92:8c:d5:42:c5:dc:49:90:f3:76:d4:a4:fb:f9:be:
af:4c:fe:6f:06:e6:65:87:bf:23:7d:e7:32:86:3c:
92:75:b8:75:4d:cf:49:79:c9:1c:3d:5d:ec:7d:bb:
32:37:0b:e5:3e:d6:c9:e3:4f:11:cb:f5:60:b6:8f:
24:63:b2:63:17:8d:38:b2:cd:22:d5:56:77:2b:4d:
7e:e2:56:b7:09:0d:17:ac:72:e3:a4:2c:12:78:23:
9d:0a:f7:7f:6c:2b:96:ea:e5:6d:a1:7f:3a:54:7a:
69:4a:db:1b:1b:d8:4f:5e:7c:3e:ad:e8:4a:ce:3a:
ef:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5A:E1:2C:86:EF:F3:3E:48:0F:0C:5E:0F:47:C7:66:BE:42:69:51
X509v3 Authority Key Identifier:
keyid:05:47:68:0E:53:AE:58:97:4C:B6:94:1D:08:69:5D:3C:0D:EC:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:3e:60:bf:a0:80:44:5d:ec:2b:00:c5:49:19:86:00:2e:da:
fb:43:db:84:61:e3:06:1e:53:3c:9e:ef:ce:f9:61:8a:8f:27:
41:e7:9a:9d:2c:45:55:a9:d2:34:89:08:4f:32:ef:4c:44:dd:
67:dd:ae:fb:2f:0b:98:6f:0f:8e:f5:62:f6:04:e7:00:dd:a5:
de:24:1b:68:0d:a8:14:99:12:81:b6:93:ca:b4:11:9f:85:80:
4f:53:13:52:df:be:93:53:f0:15:99:c7:55:71:62:b1:4b:a8:
e0:0f:c2:39:ae:17:a3:bd:ef:8e:07:c8:3e:ac:dd:a8:e1:93:
20:6a:fe:83:75:41:04:f7:a2:a9:aa:0f:df:1e:82:18:14:54:
94:fe:f0:d9:e4:1b:fb:8b:c5:08:df:a9:b5:74:50:2f:a6:63:
f0:e1:a2:88:9b:14:12:ca:98:18:0f:b3:22:d4:7b:1b:da:74:
c6:c1:90:a5:4d:82:d2:f6:70:3f:7f:cd:54:aa:ba:97:9a:3e:
90:60:de:4f:14:3b:49:47:00:18:b7:53:a7:57:45:69:ed:1a:
25:16:a8:61:51:9e:ea:0c:53:32:f9:3c:62:7b:28:4b:a5:da:
90:5f:b7:03:1f:86:c2:37:85:4c:82:60:46:ee:6b:4b:59:52:
9e:99:0f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:04 2025 by rpki-client