Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
File: BuS72riW5mET81G02cgt9Q5mpxI.mft (raw, json)
Hash identifier: /806e2FLjR92/kRXCPVdF/FgJ/rB3ReJvRJKH4zvJeo=
Subject key identifier: 38:1A:98:7E:33:57:C3:A0:E7:DE:45:0C:A3:1B:1A:78:69:1A:E9:BC
Authority key identifier: 06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
Certificate issuer: /CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Certificate serial: 01984B8A6796AF644A37C137B49C3360FCD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
Manifest number: 05A0
Signing time: Sun 27 Jul 2025 11:00:18 +0000
Manifest this update: Sun 27 Jul 2025 11:00:18 +0000
Manifest next update: Mon 28 Jul 2025 11:00:18 +0000
Files and hashes: 1: BuS72riW5mET81G02cgt9Q5mpxI.crl (hash: 8lawHb1pYott2TiNOmdWgGJ1nBulq4YNM0EUXPGHELQ=)
2: KnO7E8tJ1abhGCx2wXuCqs1IO3U.roa (hash: BCSVnZM2aJUhjEMy986ORQcWilXP95wH0oKfNXEAgBs=)
3: Q3h6qAQg8Z7eTE0PbTbXQ8Re-9A.roa (hash: S28QHIVwCTs2cZmHNwDOnovD8sAEfmTgDloHmODDCO4=)
4: Tg5Eip16OiivA4_zKye1REwFA00.roa (hash: Gd1niBs91vG5rW4xFPormFpiCgQUUugy0jDW22UcbYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:67:96:af:64:4a:37:c1:37:b4:9c:33:60:fc:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Validity
Not Before: Jul 27 11:00:18 2025 GMT
Not After : Jul 28 11:00:18 2025 GMT
Subject: CN=381a987e3357c3a0e7de450ca31b1a78691ae9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dc:af:c3:a3:50:74:c9:fa:eb:be:81:15:68:
47:1a:e2:03:af:44:bc:ff:28:eb:5c:1a:f4:d3:58:
2e:ca:6b:8e:61:de:55:f4:9c:88:f7:30:96:7d:39:
93:33:c4:40:00:4b:7b:5d:64:45:9d:75:98:e0:fe:
67:cd:ba:83:a6:bf:b0:ee:9a:13:cc:1b:5d:67:71:
6d:8b:c3:55:5c:e3:64:c0:05:9e:d2:36:4f:7d:72:
8a:e2:cc:45:d6:00:66:60:5b:80:cf:b8:dc:5a:70:
92:e0:63:cd:96:d5:9b:dc:e3:25:72:dc:0b:db:0a:
fc:66:a8:05:f4:1b:5b:f2:a9:6d:ff:85:86:fb:45:
46:50:d1:c0:15:3c:fe:ed:82:dc:ca:bc:2c:df:22:
f9:dc:c0:c0:44:a6:e8:cf:b0:f7:fd:4e:a2:c3:18:
1a:22:d7:6a:12:ff:1f:85:97:9a:68:14:92:4b:d8:
14:6a:d1:89:9d:75:f1:36:6e:87:45:a8:99:e3:14:
10:b3:a3:b6:82:12:c6:1f:a4:19:20:14:d8:61:d2:
56:0a:9b:d9:02:91:2b:41:21:14:cc:8c:be:db:fc:
f3:b2:95:00:b3:c0:0f:ec:29:96:d7:94:55:0e:d4:
31:af:e8:5d:1f:5c:87:3a:28:73:82:90:ae:f0:73:
66:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1A:98:7E:33:57:C3:A0:E7:DE:45:0C:A3:1B:1A:78:69:1A:E9:BC
X509v3 Authority Key Identifier:
keyid:06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:4c:76:16:1b:bd:cf:7c:6f:b3:d0:bc:f0:67:9b:8a:3e:a3:
13:b1:e2:29:70:25:6d:ed:1c:f8:b9:ac:f2:27:21:d7:48:1e:
7b:f0:ef:8d:1d:dd:03:40:a8:5e:83:7e:ec:d8:13:37:c5:87:
3d:dc:21:2a:28:16:0a:53:42:5c:1a:d3:ad:6b:7a:70:7e:42:
e4:54:06:95:d5:0d:ed:35:f7:42:90:cc:ca:70:c3:5b:e9:76:
3e:82:61:eb:88:b5:27:d5:5a:0f:4d:e1:a7:bd:ec:76:54:ad:
c6:b4:49:c5:37:f5:2f:ad:db:a2:98:e2:70:6a:cc:2a:63:54:
29:a9:1d:26:9e:30:0b:da:eb:ba:6c:0f:a8:c2:0d:f5:5c:24:
4e:4a:a5:bc:94:d0:dc:e1:9e:db:2c:69:ba:1b:f6:78:75:c4:
ea:8d:fc:5e:a7:2c:25:55:c2:5d:0b:f2:2b:a1:d3:af:63:c3:
5b:8d:4a:36:57:b1:ac:b5:e6:7b:60:5d:6f:c6:fa:e3:c5:73:
11:cb:b6:59:e4:e4:0b:0a:79:db:93:00:62:46:08:bc:c2:ca:
cb:c5:dd:ee:5b:2b:8b:42:d8:0a:7d:b1:ef:40:52:fe:bb:e0:
34:cd:2e:f6:d9:ab:40:8c:8e:85:54:d1:e2:2f:d6:dc:19:d8:
0d:0a:41:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:40:46 2025 by rpki-client