Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
File: BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft (raw, json)
Hash identifier: pgJArZ3/yUfQqVo+V9Xy0Sg+ljQ0SXC+gFEIxPrYIGE=
Subject key identifier: 84:12:39:64:C6:AA:47:30:9A:7D:5B:18:99:65:26:7E:1C:77:99:58
Authority key identifier: 06:E4:2D:89:7E:96:89:5C:70:F4:3C:A0:35:0D:0F:F4:4B:84:89:53
Certificate issuer: /CN=06e42d897e96895c70f43ca0350d0ff44b848953
Certificate serial: 019921B1C24538B95141D1CE6D32373D6DAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 01:02:01 +0000
Manifest this update: Sun 07 Sep 2025 01:02:01 +0000
Manifest next update: Mon 08 Sep 2025 01:02:01 +0000
Files and hashes: 1: BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl (hash: l5JX2DW7pKPsfEdRuDexUdBOJua6IJ+UhWMrYjVrIxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:c2:45:38:b9:51:41:d1:ce:6d:32:37:3d:6d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e42d897e96895c70f43ca0350d0ff44b848953
Validity
Not Before: Sep 7 01:02:01 2025 GMT
Not After : Sep 8 01:02:01 2025 GMT
Subject: CN=84123964c6aa47309a7d5b189965267e1c779958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:de:8f:47:87:22:c4:52:62:0d:f1:4c:be:9d:
55:bb:89:2a:a7:73:ee:59:8f:82:e7:9a:7a:69:f6:
08:2b:ff:12:b5:53:37:b6:8d:53:06:7c:e8:48:dd:
8d:91:a4:44:94:5a:93:a7:c6:a9:a7:28:5c:62:49:
55:6a:c8:08:45:e0:38:f6:4d:d1:6a:2e:5d:54:eb:
4e:03:bd:be:a8:c2:1f:20:17:95:fe:2a:19:73:34:
a5:ba:f8:d4:bb:62:47:57:ca:d2:6d:06:eb:78:41:
d5:5a:ce:59:52:75:2a:d9:46:11:fa:f1:32:8d:62:
a0:4f:48:c4:8d:dc:07:d4:02:c9:58:06:16:30:5d:
00:33:67:29:70:27:2a:d0:da:1c:2e:1c:15:78:79:
ed:cb:e2:2a:1f:a2:d9:61:21:78:4d:40:11:11:26:
b4:8b:ef:23:ef:4b:8a:bb:d0:04:8c:c8:8d:96:0a:
05:e1:79:d3:3c:22:4e:ee:46:b1:9c:7c:5c:1d:13:
a8:3c:fb:12:b2:8a:34:7f:7a:64:09:4e:24:81:a6:
18:4c:4a:0d:b2:7b:6d:44:2e:de:59:9e:5b:40:3f:
64:57:e3:f7:cc:e3:4d:56:5f:3b:ae:8a:66:9b:69:
52:0e:fb:ed:84:0b:db:37:1f:60:82:54:57:7b:28:
14:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:12:39:64:C6:AA:47:30:9A:7D:5B:18:99:65:26:7E:1C:77:99:58
X509v3 Authority Key Identifier:
keyid:06:E4:2D:89:7E:96:89:5C:70:F4:3C:A0:35:0D:0F:F4:4B:84:89:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:61:69:d7:b0:f7:3b:5b:ec:f5:b6:32:cd:4e:75:1a:9c:c5:
46:3a:a5:8c:8a:72:23:61:f1:53:88:dd:30:c0:ac:1f:8a:d7:
38:fc:ec:0a:ff:7d:6a:ec:7c:24:e8:e6:15:0f:6a:b0:2e:de:
f3:f8:fb:d7:9d:7f:03:0b:b4:d4:f6:a9:ef:c1:b9:3e:d0:86:
02:40:bd:42:c1:41:1b:2f:1a:4d:52:41:b4:c3:ba:14:96:86:
43:98:63:ca:7b:1a:de:83:6b:0a:24:31:a6:ba:71:d0:df:e3:
01:32:da:2a:16:85:1a:d1:86:08:23:57:a3:12:ba:8a:5d:d2:
be:61:07:fc:b8:10:a1:2d:fc:ed:49:df:77:17:75:a8:02:74:
92:0a:0a:7d:b9:8f:a9:d9:91:d9:3f:cd:93:dc:5a:b1:d3:35:
94:ac:e2:c2:e3:4a:5b:20:a9:cd:87:fc:d0:7f:04:30:77:c3:
f6:8a:74:5c:da:d9:8c:fa:08:35:b7:82:38:b6:b1:df:99:3b:
8c:94:8e:86:a8:23:07:be:cc:a3:d3:61:29:bd:47:8a:44:e6:
21:af:ed:8b:bb:45:3a:b4:bc:61:55:db:d0:74:0a:fb:dd:44:
db:cc:39:15:e8:79:02:91:10:a0:52:49:6a:25:66:7c:fd:b2:
e2:d8:10:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:31 2025 by rpki-client