Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
File: BUHqG_Ktqt02piLrPqg13Ju2gZs.mft (raw, json)
Hash identifier: dBOB1FIW/4R4ybVAynRaNKTa/pD2Q257fnGGXgTf82Y=
Subject key identifier: AF:1B:44:C0:F0:31:7F:89:BB:DD:FD:07:00:71:7F:36:DF:0A:D8:05
Authority key identifier: 05:41:EA:1B:F2:AD:AA:DD:36:A6:22:EB:3E:A8:35:DC:9B:B6:81:9B
Certificate issuer: /CN=0541ea1bf2adaadd36a622eb3ea835dc9bb6819b
Certificate serial: 019A725CFB26946BADBB944DF978FF235279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
Manifest number: 15D4
Signing time: Tue 11 Nov 2025 10:01:27 +0000
Manifest this update: Tue 11 Nov 2025 10:01:27 +0000
Manifest next update: Wed 12 Nov 2025 10:01:27 +0000
Files and hashes: 1: BUHqG_Ktqt02piLrPqg13Ju2gZs.crl (hash: /UHuHbXtbvBz/fEdupcGLFLE5ms5D0/giLCJXOW77rk=)
2: GIPybF1nvDpVQajMG8DWoYzoWhc.roa (hash: o+zoF0xKL9l55iOY2y1WPp4gwlsjSDH8TktFrJp4Gm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:fb:26:94:6b:ad:bb:94:4d:f9:78:ff:23:52:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0541ea1bf2adaadd36a622eb3ea835dc9bb6819b
Validity
Not Before: Nov 11 10:01:27 2025 GMT
Not After : Nov 12 10:01:27 2025 GMT
Subject: CN=af1b44c0f0317f89bbddfd0700717f36df0ad805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:39:90:8a:79:40:d3:92:d9:a8:f1:b0:d9:13:
0b:aa:af:d3:32:64:1c:63:8c:f4:8c:45:d7:21:c8:
07:26:cc:91:a4:ab:e3:c7:1a:c5:89:68:21:52:81:
f0:f9:95:f6:e2:6f:ad:14:16:73:2e:c1:40:ab:b5:
eb:6f:5c:37:17:a9:6d:5c:47:dc:5c:97:2d:e0:e9:
ed:e6:13:a1:13:d2:06:ee:70:d2:37:89:88:66:3d:
8d:57:dc:06:52:04:2b:5c:fa:eb:1a:15:bc:b3:2f:
96:fd:46:25:12:c4:7c:33:06:fb:f7:71:09:ce:db:
59:60:4c:61:42:3e:b3:a7:e2:bc:5b:09:e5:dc:4c:
84:61:14:33:e3:d6:b7:f9:07:60:28:45:d4:f9:96:
d0:78:e5:40:fe:90:ec:82:4c:30:94:a3:6f:a8:e3:
9d:37:12:94:f9:78:58:58:0d:df:32:54:52:61:10:
5b:59:4f:05:ba:12:a3:70:27:39:07:31:b9:8f:37:
67:e5:a1:b9:04:f3:46:3f:c1:ed:75:97:bb:ab:e3:
b8:fc:91:25:bf:db:a6:f3:95:85:93:bc:d0:8d:e3:
f9:d7:3d:57:0f:09:9a:5e:ee:18:c7:3d:a3:69:d1:
d1:c1:82:18:84:1e:8a:ea:e0:96:be:31:2b:81:e0:
5d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1B:44:C0:F0:31:7F:89:BB:DD:FD:07:00:71:7F:36:DF:0A:D8:05
X509v3 Authority Key Identifier:
keyid:05:41:EA:1B:F2:AD:AA:DD:36:A6:22:EB:3E:A8:35:DC:9B:B6:81:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:9e:7e:ac:68:b8:89:47:8b:38:bd:73:a5:c0:3a:eb:d9:a6:
c7:27:c8:0f:ff:5f:9a:e1:85:7d:0e:44:d8:3a:fd:74:76:64:
f3:71:e0:e6:9a:32:11:9a:a2:ea:0d:0b:94:39:83:b9:ca:94:
9f:8e:a0:96:da:4a:bc:2f:20:fd:3c:f6:c5:69:f7:dc:22:11:
a3:9b:86:fa:e3:d0:60:aa:f4:0f:99:aa:ad:ff:13:66:f8:c3:
f2:f6:da:13:16:28:ed:42:90:0b:d8:d9:a8:24:73:1b:08:8d:
b0:ea:12:05:72:f4:fa:ba:35:14:99:07:c1:c1:01:f0:fb:cc:
d2:6b:8c:05:5f:25:45:f6:7d:47:ef:5f:43:3b:79:0d:c2:3c:
9c:a6:dc:aa:72:3f:7a:ac:dc:1d:06:69:24:1f:c9:ec:33:14:
13:47:e9:5e:3a:32:fb:3a:1a:d9:f8:9e:ce:85:ef:41:cf:9c:
f4:f2:ce:52:4e:cd:6c:29:96:dd:91:8e:b5:2a:48:92:a0:c3:
22:e3:43:2a:99:64:6e:37:50:db:34:d4:cc:8e:29:00:81:ce:
62:7d:8a:f1:45:b5:af:d9:03:e9:8e:41:b9:c0:c4:19:61:bf:
a4:0a:42:fe:26:fb:9b:26:7e:aa:22:5f:37:e7:e7:a6:9f:44:
63:4b:f1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:39:08 2025 by rpki-client