Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft
File: BuLSfTDs_0J3HEq5d6gq6lina04.mft (raw, json)
Hash identifier: YKsNsNu7GiuecHvr11CRcf+vPB1vCGJHraO0hNRwCvg=
Subject key identifier: F4:EF:9B:32:21:67:E0:77:BE:34:22:29:AF:46:71:9E:E7:4F:53:DA
Authority key identifier: 06:E2:D2:7D:30:EC:FF:42:77:1C:4A:B9:77:A8:2A:EA:58:A7:6B:4E
Certificate issuer: /CN=06e2d27d30ecff42771c4ab977a82aea58a76b4e
Certificate serial: 0199221F0176582C2B4CB4B500FB19A638E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuLSfTDs_0J3HEq5d6gq6lina04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft
Manifest number: 0442
Signing time: Sun 07 Sep 2025 03:01:21 +0000
Manifest this update: Sun 07 Sep 2025 03:01:21 +0000
Manifest next update: Mon 08 Sep 2025 03:01:21 +0000
Files and hashes: 1: BuLSfTDs_0J3HEq5d6gq6lina04.crl (hash: WW+QwxY62aGg9A8TFhmUd5w8d4RDCw+G4IE9nY+1/RQ=)
2: F9NENsgLQplgyDxaKboJGp-ngV4.roa (hash: aqyInFH9uBhCwBTndxpchZMGLxp6pudfSp9X2MnmgCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft
rsync://rpki.ripe.net/repository/DEFAULT/BuLSfTDs_0J3HEq5d6gq6lina04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:01:76:58:2c:2b:4c:b4:b5:00:fb:19:a6:38:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e2d27d30ecff42771c4ab977a82aea58a76b4e
Validity
Not Before: Sep 7 03:01:21 2025 GMT
Not After : Sep 8 03:01:21 2025 GMT
Subject: CN=f4ef9b322167e077be342229af46719ee74f53da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:86:03:5f:67:5a:1f:56:46:24:33:f1:fa:2f:
7f:04:bc:0d:46:71:8d:6f:95:5a:50:17:39:31:94:
97:0b:35:5c:15:36:1f:cc:5b:ad:86:d6:8f:dc:00:
1a:e9:b0:6d:f6:f8:3f:87:8b:33:f2:48:2d:cf:32:
4a:62:38:b8:05:72:69:77:cc:a6:4b:32:e0:4c:24:
6d:a1:20:79:94:d6:e4:dd:3b:05:a2:1d:c7:88:c5:
6a:b4:0e:3b:9e:f9:ce:5e:58:23:74:5c:37:bf:cb:
13:b6:2f:77:0a:a1:13:1e:2b:99:c7:dc:9e:cf:e2:
da:82:a4:04:ad:48:13:89:44:d8:57:80:73:63:f6:
99:55:fe:85:36:a9:33:a9:57:5f:bb:07:2e:50:80:
46:a7:fd:96:01:76:d9:6f:1d:e4:b1:ba:a2:ac:53:
a6:41:6f:66:24:38:f9:c0:cb:34:b8:1f:7d:d8:39:
27:d7:25:f2:7f:09:4a:5d:e1:4d:04:74:16:2e:be:
fc:44:76:50:3d:68:fd:83:06:98:0e:cf:df:62:1e:
18:76:b0:82:21:07:4b:23:bb:d8:39:39:b5:62:06:
90:d1:d2:64:e1:90:a9:bb:3f:ae:75:16:05:fe:a8:
50:3b:7c:93:4f:d2:74:dd:70:b6:aa:df:f9:67:fc:
c1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EF:9B:32:21:67:E0:77:BE:34:22:29:AF:46:71:9E:E7:4F:53:DA
X509v3 Authority Key Identifier:
keyid:06:E2:D2:7D:30:EC:FF:42:77:1C:4A:B9:77:A8:2A:EA:58:A7:6B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuLSfTDs_0J3HEq5d6gq6lina04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:87:15:05:0a:71:43:78:8b:bd:d2:89:62:49:3d:22:c1:68:
e7:69:9d:87:d6:f8:90:0f:18:d1:eb:77:75:15:08:71:0b:d9:
ff:36:8e:db:a2:3f:8d:81:73:68:3b:aa:7d:ad:96:6e:db:05:
5c:c6:96:06:13:a9:da:e7:c0:77:a0:36:67:9f:1e:76:8a:93:
ce:20:8e:91:b4:0e:3f:34:88:73:b5:58:c1:43:88:b3:ff:92:
7d:cc:7e:a8:c9:95:14:fd:9a:71:86:c8:1b:6f:a8:b5:2b:71:
56:8a:cf:02:2e:e4:c9:91:5c:0a:dd:60:68:95:ff:75:39:42:
0c:d7:b1:7c:ba:3f:9a:b3:03:b6:c3:1b:ef:60:f6:c1:9e:ee:
e5:38:43:fb:a1:60:cf:05:df:b2:ac:0a:d5:cc:73:9b:bb:e9:
e4:8b:29:a5:a2:1c:c8:e3:e2:53:8c:b6:f5:bd:8c:d6:ec:4f:
4b:25:e7:36:d7:9f:5d:ba:49:31:72:d4:04:b5:0f:93:4a:28:
23:6a:91:0c:ad:73:3b:66:11:75:31:67:0c:8c:f4:25:af:a9:
db:9d:98:ce:f3:67:bc:d9:a5:90:a4:db:e7:56:48:74:e3:ef:
f1:8c:f4:c8:70:17:12:3e:04:6b:52:d0:98:7c:c5:fa:31:b8:
49:23:84:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:49:41 2025 by rpki-client