Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
File: BUQJodiwcvfbAkUouXIDOb27sQY.mft (raw, json)
Hash identifier: RuM1kqYjiR/JcVZODPs6Y6aW3shJLcvKj0xP1HIHAyE=
Subject key identifier: DF:DC:CB:56:A8:75:30:63:98:39:C0:EA:4B:E5:22:1E:F2:20:49:B5
Authority key identifier: 05:44:09:A1:D8:B0:72:F7:DB:02:45:28:B9:72:03:39:BD:BB:B1:06
Certificate issuer: /CN=054409a1d8b072f7db024528b9720339bdbbb106
Certificate serial: 019849D36DF3E66D01B2FB6098D606135A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 03:00:49 +0000
Manifest this update: Sun 27 Jul 2025 03:00:49 +0000
Manifest next update: Mon 28 Jul 2025 03:00:49 +0000
Files and hashes: 1: BUQJodiwcvfbAkUouXIDOb27sQY.crl (hash: 1d8QXoTU8c9dtSgf+TmRB8DDxR1h2cKeR+I9PHdA+5Q=)
2: UMjcguXzK8JJuV9OAn9YGkymPvA.roa (hash: 4DrO4r19O+5ROWEhi1+BcrHjdVH/qYD6Oqql5i/mVz8=)
3: VVkXzzLot1NoIJDj7qPW9t8KJeA.roa (hash: dj1ugJopxiv7wcnxLpO9LCCqzbXxSCBi0Qzt+qevjaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:6d:f3:e6:6d:01:b2:fb:60:98:d6:06:13:5a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054409a1d8b072f7db024528b9720339bdbbb106
Validity
Not Before: Jul 27 03:00:49 2025 GMT
Not After : Jul 28 03:00:49 2025 GMT
Subject: CN=dfdccb56a87530639839c0ea4be5221ef22049b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:65:68:36:17:f2:7b:7b:6c:fc:67:35:b0:21:
76:e5:e2:03:61:14:98:4d:8d:64:a9:11:fb:50:9a:
3b:6b:70:80:ad:97:52:65:cd:94:b7:55:84:d9:2d:
06:35:9b:c4:2c:a8:e6:8f:e0:63:3a:1b:a3:db:25:
67:92:81:f9:6c:ad:e1:76:4e:eb:11:24:a0:58:99:
b6:bd:b6:2d:4c:53:36:d1:12:5e:30:cc:51:54:73:
b2:6f:56:ba:c8:55:b5:84:f1:a4:3a:e3:95:3f:7b:
1e:26:07:81:33:c9:83:b7:e0:20:94:eb:e3:c4:ec:
a7:ce:85:e1:fc:dc:9d:0d:bf:28:78:3f:8e:dd:b1:
31:02:03:a7:18:02:57:18:bf:f5:07:72:0c:fa:85:
6f:6f:c7:64:d2:4e:62:9e:67:3d:79:63:69:59:24:
53:18:f0:ac:e8:fa:22:63:59:9a:9e:ba:c4:c9:8b:
b6:a6:2c:e1:a5:b2:7e:ed:93:82:82:bd:36:86:a2:
58:a1:69:29:c1:c5:a2:21:ea:26:74:c3:67:e6:b4:
c4:8f:43:0e:31:6c:6f:4a:22:ed:ca:a7:05:ea:1f:
83:86:c1:49:b0:28:f3:93:4f:3e:23:44:db:65:ce:
b8:c9:39:b1:e3:97:c9:98:ef:38:7b:b1:97:eb:82:
b0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DC:CB:56:A8:75:30:63:98:39:C0:EA:4B:E5:22:1E:F2:20:49:B5
X509v3 Authority Key Identifier:
keyid:05:44:09:A1:D8:B0:72:F7:DB:02:45:28:B9:72:03:39:BD:BB:B1:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:1a:2c:8f:53:ab:30:bd:82:95:46:87:d2:ae:3b:91:20:03:
61:ad:a8:a2:fd:ca:96:7e:ce:3f:4e:00:9b:f8:a9:28:a2:4d:
c5:cf:27:24:2a:31:f3:01:36:8e:f8:39:cf:14:3a:5c:da:35:
71:8b:08:c7:e2:5f:d7:41:ff:05:d6:df:ab:df:4c:3a:e7:86:
51:5e:c3:d9:b4:e2:af:5a:19:65:08:3e:a3:2d:e6:88:6c:b5:
a5:39:52:71:7c:46:ba:a0:4a:4c:ec:85:96:92:63:90:54:79:
8b:e7:46:ef:b2:ec:dd:a8:27:32:ae:52:1f:1a:94:d1:c5:4d:
f8:98:cf:4a:e8:b7:de:61:13:f4:8c:5b:99:54:47:90:89:39:
ae:b3:ba:dd:2d:7c:fc:9c:27:61:34:04:64:be:bb:6a:01:f9:
c0:62:d5:aa:6f:f3:f6:7c:4f:26:66:14:82:d0:e9:38:05:70:
99:17:2f:20:92:05:a0:3d:23:fe:c8:36:a8:eb:a0:26:14:49:
e5:0c:41:53:01:a2:55:46:e8:ec:ec:1d:4b:39:42:3b:c0:9a:
fe:79:67:18:54:e2:60:79:7f:99:51:f6:c6:0d:7b:ec:25:40:
05:4f:e0:08:e4:8e:43:1f:cf:94:8c:4b:bf:79:0f:2f:d0:7d:
98:4f:11:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:24:08 2025 by rpki-client