Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
File: BUQJodiwcvfbAkUouXIDOb27sQY.mft (raw, json)
Hash identifier: lqwCRE0Hv3Kxm80K7Bd6pckjBue2HEks8O8d01pRI2g=
Subject key identifier: 2D:1F:B3:7B:75:10:43:CD:FE:94:D4:EA:6E:1A:DF:B2:25:8F:6F:D5
Authority key identifier: 05:44:09:A1:D8:B0:72:F7:DB:02:45:28:B9:72:03:39:BD:BB:B1:06
Certificate issuer: /CN=054409a1d8b072f7db024528b9720339bdbbb106
Certificate serial: 0199356EAC3BC8C0AA06AB60196A38FC7A69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
Manifest number: 167D
Signing time: Wed 10 Sep 2025 21:01:09 +0000
Manifest this update: Wed 10 Sep 2025 21:01:09 +0000
Manifest next update: Thu 11 Sep 2025 21:01:09 +0000
Files and hashes: 1: BUQJodiwcvfbAkUouXIDOb27sQY.crl (hash: LoVgyUMy+La+hIa48Q6UrhuK3X8SNjj9AWDEUSxrMUk=)
2: UMjcguXzK8JJuV9OAn9YGkymPvA.roa (hash: 4DrO4r19O+5ROWEhi1+BcrHjdVH/qYD6Oqql5i/mVz8=)
3: VVkXzzLot1NoIJDj7qPW9t8KJeA.roa (hash: dj1ugJopxiv7wcnxLpO9LCCqzbXxSCBi0Qzt+qevjaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:6e:ac:3b:c8:c0:aa:06:ab:60:19:6a:38:fc:7a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054409a1d8b072f7db024528b9720339bdbbb106
Validity
Not Before: Sep 10 21:01:09 2025 GMT
Not After : Sep 11 21:01:09 2025 GMT
Subject: CN=2d1fb37b751043cdfe94d4ea6e1adfb2258f6fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3a:8d:6c:f4:7d:4d:6b:14:f0:ad:e6:90:ce:
82:90:55:85:3a:c6:95:64:2c:b2:11:1b:2a:91:71:
75:d8:c9:11:a4:7f:a5:7a:f3:8f:f6:e8:76:cc:3a:
30:16:b2:d5:6b:27:42:b3:d5:b5:d8:7f:c1:7f:76:
6a:0d:56:eb:49:16:95:b1:7e:c1:ee:8a:fc:ae:d9:
bb:f7:2a:54:e9:ef:6d:7d:03:77:d8:87:bd:a5:77:
e6:54:cf:60:53:ce:bd:9e:c7:3c:ff:f2:17:dd:6f:
81:b3:bc:21:e5:58:d6:f6:3d:ec:58:16:de:e5:7a:
23:8e:3c:bc:f5:bd:f6:a5:15:90:7a:a7:06:8f:4b:
6f:17:d4:8e:ba:56:a9:5e:02:d4:93:55:db:0c:bc:
f9:6b:ff:e9:5c:17:27:51:07:38:ae:e7:7a:a0:9e:
23:e6:c5:57:6a:44:38:11:d5:62:b3:68:e9:72:7d:
7a:d3:bf:d8:5f:ea:84:37:eb:15:1b:ef:e9:ea:73:
a5:5b:44:09:12:f3:9d:13:1c:d3:8a:0d:91:46:35:
8e:2c:10:13:09:d1:ed:a3:b7:bd:62:27:10:20:5e:
08:fb:c2:c5:03:97:ca:70:32:b0:de:3e:99:55:be:
72:cd:ef:24:ac:33:ad:ab:7d:bc:ca:52:b4:ef:12:
43:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1F:B3:7B:75:10:43:CD:FE:94:D4:EA:6E:1A:DF:B2:25:8F:6F:D5
X509v3 Authority Key Identifier:
keyid:05:44:09:A1:D8:B0:72:F7:DB:02:45:28:B9:72:03:39:BD:BB:B1:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:82:42:85:b3:17:e4:2d:6f:6b:7f:1e:e4:11:50:40:29:d0:
3d:5b:39:25:f2:86:be:b6:55:82:2d:96:f0:2e:75:67:34:5d:
9a:52:75:34:62:15:e0:11:43:70:b9:e1:d0:5c:06:66:95:f6:
4c:2f:6b:7c:28:62:1d:2b:24:ae:10:87:95:38:c3:0f:c3:04:
c5:fb:3c:8e:be:95:12:85:03:c5:d6:d1:d6:43:74:fa:f1:b8:
8b:79:39:57:dd:b9:49:95:f2:39:69:af:30:4b:45:3c:89:4d:
e5:3c:0d:48:ae:87:a5:3f:ae:cd:5e:e4:ca:0b:81:ac:3a:3c:
8d:f0:67:5e:70:ef:69:80:af:bc:da:fa:8d:2b:78:5c:ff:78:
34:21:d9:05:4a:d2:15:73:5f:d3:2b:b3:74:48:69:1d:23:17:
0d:02:81:6a:3f:ee:78:dd:48:04:5f:62:7f:79:c3:04:c0:b0:
09:ad:4f:4d:ad:08:52:fa:da:dd:93:e1:4b:84:0c:b1:39:94:
ce:3c:2b:8d:93:e3:81:d7:b6:f7:2d:64:6e:f2:be:3d:9d:84:
73:91:fa:31:74:5c:15:e1:f6:2b:e0:da:fd:e6:61:88:be:bb:
f9:c7:a0:3d:1c:9d:f9:7d:d6:89:88:1b:72:9f:3d:e2:6e:b2:
d5:c0:a2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 03:23:42 2025 by rpki-client