Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft
File: BuLSfTDs_0J3HEq5d6gq6lina04.mft (raw, json)
Hash identifier: VJWtbBScwTBHCr3yUc5dD3Mi8Ct3G4M5W1L9rNdMak8=
Subject key identifier: 9A:74:5A:E7:36:D0:39:CC:0D:E1:10:59:CF:2C:06:20:4D:DE:85:76
Authority key identifier: 06:E2:D2:7D:30:EC:FF:42:77:1C:4A:B9:77:A8:2A:EA:58:A7:6B:4E
Certificate issuer: /CN=06e2d27d30ecff42771c4ab977a82aea58a76b4e
Certificate serial: 019A7225DAEAE1E391F6E876D23C62E37429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuLSfTDs_0J3HEq5d6gq6lina04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft
Manifest number: 04F0
Signing time: Tue 11 Nov 2025 09:01:14 +0000
Manifest this update: Tue 11 Nov 2025 09:01:14 +0000
Manifest next update: Wed 12 Nov 2025 09:01:14 +0000
Files and hashes: 1: BuLSfTDs_0J3HEq5d6gq6lina04.crl (hash: inN9u2/G0HmdXjXjsmDtCnN7jURAGHwDITCvedpyMQQ=)
2: F9NENsgLQplgyDxaKboJGp-ngV4.roa (hash: aqyInFH9uBhCwBTndxpchZMGLxp6pudfSp9X2MnmgCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft
rsync://rpki.ripe.net/repository/DEFAULT/BuLSfTDs_0J3HEq5d6gq6lina04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:da:ea:e1:e3:91:f6:e8:76:d2:3c:62:e3:74:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e2d27d30ecff42771c4ab977a82aea58a76b4e
Validity
Not Before: Nov 11 09:01:14 2025 GMT
Not After : Nov 12 09:01:14 2025 GMT
Subject: CN=9a745ae736d039cc0de11059cf2c06204dde8576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f6:d4:7e:0a:1a:2c:d7:03:7c:91:ec:c9:ae:
25:a8:95:32:da:15:4d:3c:d9:95:2c:62:02:e5:60:
7c:f7:31:22:39:30:36:a7:9d:12:4b:59:a9:fc:bb:
54:f9:f3:20:42:2f:8a:07:1c:6b:eb:fc:1a:72:0d:
d0:0d:c1:8f:af:ae:62:52:ef:30:76:85:89:33:87:
1e:20:66:b1:0f:4e:70:43:90:b1:d6:4e:7b:39:bd:
0c:30:99:e4:79:5a:74:3b:9b:30:82:1b:df:33:89:
09:3b:17:83:b9:1c:e6:92:56:d4:ab:ad:60:be:e8:
9f:4c:30:d7:24:36:41:95:17:a3:a1:d7:a1:f3:5e:
1b:8b:91:9e:30:81:5e:cb:bc:63:cc:1b:bb:64:f9:
79:15:e9:09:df:a8:eb:3a:26:60:28:8b:2a:62:03:
3c:de:e4:08:8c:0d:a4:3b:62:f7:79:33:6b:b2:6a:
61:19:96:5c:80:1d:f5:f4:0f:f4:d8:37:1e:7c:6f:
08:c1:f6:ad:fb:b3:56:8d:e3:98:6f:86:76:85:bb:
68:64:07:37:21:ce:bb:e1:35:37:ae:db:71:ca:08:
3c:df:41:a7:85:91:b8:78:27:17:55:4f:45:8e:b4:
c2:2c:f5:fd:84:d5:20:f1:1d:d7:27:b9:4d:68:cd:
a1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:74:5A:E7:36:D0:39:CC:0D:E1:10:59:CF:2C:06:20:4D:DE:85:76
X509v3 Authority Key Identifier:
keyid:06:E2:D2:7D:30:EC:FF:42:77:1C:4A:B9:77:A8:2A:EA:58:A7:6B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuLSfTDs_0J3HEq5d6gq6lina04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:5c:b7:99:99:1a:c9:14:24:fa:c7:dd:28:a3:fd:cc:29:e0:
d6:23:61:27:8a:ae:e7:d0:45:07:14:fa:6b:9c:29:88:0d:60:
9d:16:9c:d4:df:01:88:fa:53:fe:9c:fe:bc:09:fe:40:12:8a:
e2:77:23:19:2d:c0:14:5c:c9:70:bf:2f:d2:36:ee:02:e8:f8:
67:19:ee:88:42:8a:21:2e:50:3e:51:3a:92:3f:f4:4b:4d:cb:
69:41:1c:bb:4b:d3:21:63:fa:41:90:80:cd:aa:e5:38:3b:00:
56:cf:48:98:8d:aa:2d:c9:d1:70:db:49:16:66:e6:cf:4c:4e:
cd:26:a8:a1:19:37:c9:2b:7c:6e:d7:80:c4:82:b0:00:f4:69:
1f:0f:48:ed:ec:fb:16:ac:7a:2d:bb:18:16:c0:6b:04:92:a5:
86:3b:61:77:b0:b1:3f:9b:09:57:f5:55:7f:06:53:3a:fb:f0:
ff:4c:b9:a2:0f:41:eb:d7:1d:5b:e5:64:b2:59:c7:06:bd:90:
3b:f4:89:7c:a5:b6:74:a2:e7:3f:46:97:1a:66:3a:18:06:ca:
c4:4f:23:0e:2b:99:d9:88:6c:b0:79:56:c9:71:46:b0:7f:0c:
47:d1:70:ee:bd:df:fd:fb:91:fc:10:fa:73:4e:3c:b7:c4:3a:
66:92:2b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:36:18 2025 by rpki-client