Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
File: BUJK-kvO52VL3zq3kWVuREXC-Vo.mft (raw, json)
Hash identifier: yrTf3ZXKv+wTevD8w3tt8B5E1iPDCRI7McEZ19eU+TQ=
Subject key identifier: 6B:40:DD:32:07:C4:47:5C:EB:49:63:3B:23:61:67:7B:89:BA:EC:34
Authority key identifier: 05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
Certificate issuer: /CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Certificate serial: 019840625930EE1E3F777AD9D33137B16E0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
Manifest number: 040E
Signing time: Fri 25 Jul 2025 07:00:43 +0000
Manifest this update: Fri 25 Jul 2025 07:00:43 +0000
Manifest next update: Sat 26 Jul 2025 07:00:43 +0000
Files and hashes: 1: BUJK-kvO52VL3zq3kWVuREXC-Vo.crl (hash: hMsU9xXbHqGTxBpLDp9FQFFiFnqYgkJ4PwAoJCMfMhw=)
2: IUMtGwo7cTFP42D9nrk7-OpkQvQ.roa (hash: c6c/rj/fNAeM/ZuHFO3HQMFeZ6ws+kGa19bAnjrXmhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:62:59:30:ee:1e:3f:77:7a:d9:d3:31:37:b1:6e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Validity
Not Before: Jul 25 07:00:43 2025 GMT
Not After : Jul 26 07:00:43 2025 GMT
Subject: CN=6b40dd3207c4475ceb49633b2361677b89baec34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2b:59:94:a4:e5:0d:23:9a:87:15:92:5f:fb:
9d:6b:e5:be:94:a5:07:24:35:20:04:c2:0e:dc:7a:
9a:8a:9c:93:89:57:3f:e4:39:fc:b7:08:e3:b2:7a:
4f:14:70:70:ba:07:4d:fc:bb:98:fb:f8:27:3b:45:
a9:78:d7:be:1d:c0:52:8e:ff:2c:c7:0c:fd:bd:5b:
9e:03:1a:36:db:ba:46:16:0e:71:61:ae:f9:93:0c:
2e:8c:13:59:3d:64:fa:bb:e5:f6:23:c0:04:cf:e0:
56:eb:ad:cf:f5:81:0b:d4:e4:cf:40:b0:dc:20:16:
6d:8d:5e:ba:34:a4:c9:70:68:de:00:ed:f1:45:c4:
79:92:8a:ba:de:6d:64:3a:a5:83:a4:2e:87:d0:a4:
10:d7:fd:17:29:23:da:b1:ee:33:64:05:9e:96:83:
c4:f0:56:e1:81:62:11:7e:6a:c4:02:c2:6a:11:65:
a1:a7:33:55:b2:6b:55:b1:37:83:71:38:b9:97:a0:
60:84:13:bc:f7:cd:78:69:fc:8b:9f:97:72:6b:17:
00:95:a4:31:b6:78:12:9b:e0:a6:c6:1f:43:28:dc:
69:01:33:9f:b1:8a:3f:b7:60:51:ab:de:eb:93:76:
bf:dc:20:be:fa:e9:7a:06:40:01:9b:22:29:4b:f8:
ea:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:40:DD:32:07:C4:47:5C:EB:49:63:3B:23:61:67:7B:89:BA:EC:34
X509v3 Authority Key Identifier:
keyid:05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:51:95:8a:b6:ad:a0:16:60:8b:1b:8b:d7:da:7b:b1:bf:8a:
1c:30:8c:99:cb:2d:83:07:7a:b9:7f:59:14:de:0c:7e:70:8e:
5c:ed:fe:b9:c7:c0:e5:cd:75:83:96:5c:3b:a3:d2:61:aa:ad:
f2:ab:2c:d2:c2:34:30:15:b7:a8:b6:c0:13:f2:d6:94:b1:0d:
39:15:70:a3:39:e8:0f:f6:7b:27:bf:e7:6f:cf:cb:e3:97:c9:
66:46:18:58:1d:98:7f:25:3d:58:d3:23:dd:41:42:f7:cb:1d:
4e:ce:f2:2e:d2:ba:3f:09:0e:99:8b:b2:e5:68:c4:5c:c1:a6:
44:a8:ec:9c:68:1f:bd:6d:96:f7:ec:c6:0b:7b:a0:c8:70:77:
2d:f9:df:42:3b:a1:32:3a:69:1d:9b:98:6a:d9:f3:cd:75:8d:
5d:5f:17:7c:fe:f7:07:73:bc:bf:cf:f2:64:e4:b2:45:bd:c0:
23:0f:51:58:03:16:28:45:96:5a:e5:c7:fc:35:00:f3:07:1b:
1e:64:8a:e8:52:46:83:20:fe:24:2e:24:ca:5e:e2:76:2f:08:
b3:5d:d2:d4:06:c0:98:02:44:64:3b:7b:f2:8b:96:d0:e7:86:
9f:f0:34:ff:3a:ff:05:90:fd:37:7a:02:8c:43:34:11:78:aa:
55:f0:37:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 15:49:42 2025 by rpki-client