Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
File: BUHqG_Ktqt02piLrPqg13Ju2gZs.mft (raw, json)
Hash identifier: zODU9sYlMd2l4HrnKkrO1CPDOru7lc1R+LLV0iabmew=
Subject key identifier: 6D:02:E1:59:82:49:CA:80:83:31:1E:ED:B4:18:7C:F4:68:B1:08:4D
Authority key identifier: 05:41:EA:1B:F2:AD:AA:DD:36:A6:22:EB:3E:A8:35:DC:9B:B6:81:9B
Certificate issuer: /CN=0541ea1bf2adaadd36a622eb3ea835dc9bb6819b
Certificate serial: 01992255853B94767DCA0EA0A40A6AD30814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
Manifest number: 1526
Signing time: Sun 07 Sep 2025 04:00:53 +0000
Manifest this update: Sun 07 Sep 2025 04:00:53 +0000
Manifest next update: Mon 08 Sep 2025 04:00:53 +0000
Files and hashes: 1: BUHqG_Ktqt02piLrPqg13Ju2gZs.crl (hash: KEgxp+PoRlduvCAckFW7cu0Fe7H7ULma9o+SyHnQonY=)
2: GIPybF1nvDpVQajMG8DWoYzoWhc.roa (hash: o+zoF0xKL9l55iOY2y1WPp4gwlsjSDH8TktFrJp4Gm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:85:3b:94:76:7d:ca:0e:a0:a4:0a:6a:d3:08:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0541ea1bf2adaadd36a622eb3ea835dc9bb6819b
Validity
Not Before: Sep 7 04:00:53 2025 GMT
Not After : Sep 8 04:00:53 2025 GMT
Subject: CN=6d02e1598249ca8083311eedb4187cf468b1084d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:32:de:4f:99:a4:c5:ee:a2:07:09:a6:cf:f1:
74:d8:7f:ac:65:c1:0b:f6:78:71:d9:bb:23:d4:99:
d8:84:e8:49:09:85:07:b6:b7:a1:a4:23:65:82:c8:
06:12:6e:90:e4:a4:a1:24:c2:10:f6:5d:50:cf:21:
89:d4:49:38:0a:48:19:c0:5b:4b:49:48:3a:f9:5c:
ad:b3:49:50:08:1d:56:59:40:66:d7:7e:ea:53:82:
8b:c3:11:15:ba:81:7b:bf:03:48:6e:cd:c1:fe:b3:
74:4f:10:90:8f:9a:eb:b3:97:d8:6b:2e:93:21:ee:
05:b7:16:cd:7b:4c:c2:48:62:4c:dc:85:65:88:f2:
81:cf:62:9b:9a:3a:f9:8b:1c:80:05:98:3f:2a:ed:
6d:5e:39:43:f4:27:64:1a:73:d0:4e:6c:17:b8:df:
df:83:52:0b:d0:05:8b:6a:e8:b4:34:0b:60:80:d2:
4e:9a:75:a5:e1:aa:e9:9a:98:8f:2a:4d:34:e6:11:
45:4a:9f:aa:d6:a2:9f:f4:ce:c1:35:1e:e5:34:7a:
5a:aa:22:d7:26:fe:85:0c:2e:20:04:de:f9:77:c7:
66:26:e1:d5:e1:c2:4f:08:6f:9b:d2:77:74:2c:0c:
07:55:90:d7:c0:ea:ad:92:6c:4f:dd:17:89:75:6f:
cd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:02:E1:59:82:49:CA:80:83:31:1E:ED:B4:18:7C:F4:68:B1:08:4D
X509v3 Authority Key Identifier:
keyid:05:41:EA:1B:F2:AD:AA:DD:36:A6:22:EB:3E:A8:35:DC:9B:B6:81:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b7:83:c7:29:b0:99:e0:50:2f:52:52:aa:0a:6c:03:6b:40:
30:34:81:8b:f9:4b:e8:4d:5b:9a:95:67:11:f2:dc:39:26:09:
6e:b6:63:03:d6:7e:46:11:c8:7b:17:86:e6:2e:ad:50:d4:a1:
44:6d:3e:e8:08:ba:f5:69:34:af:99:6f:86:dc:a1:b3:e3:1e:
27:01:3e:80:fd:e4:7b:81:72:ad:cc:40:51:a1:f4:54:5e:a6:
c8:60:da:25:6a:a7:68:4c:5a:f3:6b:26:c7:3c:95:82:08:8b:
d7:34:be:40:23:30:ae:f6:b8:d3:3b:5b:1d:00:53:75:88:21:
17:e9:04:29:39:3e:76:df:00:6c:de:30:f2:aa:93:6a:a6:36:
96:ce:cd:60:33:b9:54:cd:6f:34:e0:b0:22:de:7a:cd:b9:53:
60:a8:72:20:9a:45:b4:91:e9:35:c1:e4:61:b0:f5:7e:46:a7:
eb:43:9a:cd:3f:5d:01:95:8d:76:05:a9:85:ee:85:0b:b6:50:
2f:54:cb:a7:53:4d:f0:36:a7:de:34:b5:e1:b4:03:65:18:2a:
91:31:75:75:33:1b:00:5f:04:87:c8:ae:06:14:06:fb:d3:fd:
58:7b:4f:4e:59:19:cf:27:22:74:f6:70:0b:39:cf:b1:79:43:
3f:f6:a5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:40:01 2025 by rpki-client