Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
File: BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft (raw, json)
Hash identifier: w1G8r26/U8ga0V16SXjNG0g2yTuOIqnX8yi2tzle+Ew=
Subject key identifier: 45:14:CA:6B:1D:70:C4:DF:D8:55:23:61:C5:3A:52:E1:FD:AB:3E:D5
Authority key identifier: 06:E4:2D:89:7E:96:89:5C:70:F4:3C:A0:35:0D:0F:F4:4B:84:89:53
Certificate issuer: /CN=06e42d897e96895c70f43ca0350d0ff44b848953
Certificate serial: 019A2478887C9CF73360FC10ABE6BA71DC7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
Manifest number: 16F7
Signing time: Mon 27 Oct 2025 07:01:10 +0000
Manifest this update: Mon 27 Oct 2025 07:01:10 +0000
Manifest next update: Tue 28 Oct 2025 07:01:10 +0000
Files and hashes: 1: BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl (hash: HLeQOedUoj7CBxvJw9tdvXd0AymQkS9YHND38si7oIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:88:7c:9c:f7:33:60:fc:10:ab:e6:ba:71:dc:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e42d897e96895c70f43ca0350d0ff44b848953
Validity
Not Before: Oct 27 07:01:10 2025 GMT
Not After : Oct 28 07:01:10 2025 GMT
Subject: CN=4514ca6b1d70c4dfd8552361c53a52e1fdab3ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:26:f6:11:68:55:cd:fb:28:95:bc:f5:2f:39:
a4:b7:ab:f2:9b:91:84:c8:69:22:be:43:41:71:df:
2b:a3:69:27:43:88:c1:09:20:64:8a:d9:aa:34:ff:
47:9f:7e:4c:d8:ea:f2:85:9b:90:47:06:73:9c:06:
89:11:b4:e1:37:06:89:ed:ef:37:ce:0a:6b:f8:cb:
b8:a5:5e:0e:b9:dc:15:7a:68:8d:fe:0d:cd:56:dc:
a4:a2:71:b4:b1:88:07:6b:55:91:3a:21:c6:e6:73:
fa:35:47:33:17:f6:01:6d:89:ef:ee:e4:1a:d6:a9:
ab:87:02:53:c0:f0:61:a1:b7:90:3b:ce:a7:28:fe:
c0:25:3d:00:74:dc:ac:ba:60:95:e2:bc:8a:97:3c:
62:bd:6d:0a:16:c9:c0:c5:9b:15:cc:ba:fd:ce:c7:
61:90:25:89:59:85:bd:f4:03:72:71:1b:fc:70:43:
79:20:10:88:03:fc:cb:b3:dc:03:b9:f1:3d:35:95:
11:20:37:a3:31:8f:2f:28:be:4c:c1:11:aa:39:1b:
44:f9:78:5e:bc:a6:af:1d:e0:e7:17:0b:ed:4e:39:
1c:85:13:38:0a:28:fa:31:ac:e2:a6:96:96:f9:2d:
ba:87:f1:7c:cf:c6:6f:8d:77:a0:98:4f:d7:c5:74:
a5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:14:CA:6B:1D:70:C4:DF:D8:55:23:61:C5:3A:52:E1:FD:AB:3E:D5
X509v3 Authority Key Identifier:
keyid:06:E4:2D:89:7E:96:89:5C:70:F4:3C:A0:35:0D:0F:F4:4B:84:89:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:36:cc:c2:8d:48:95:ed:8d:c6:94:69:0e:f5:ff:0f:9a:06:
98:49:5f:94:4f:5a:2b:96:b6:59:2c:49:7c:53:60:cc:f3:f2:
29:9c:24:52:7e:a6:7c:2f:67:2f:87:a8:bc:cc:84:b0:a3:65:
54:33:b5:03:77:dd:b9:f9:6d:46:65:34:7b:26:35:bb:f1:dd:
52:b1:a5:27:d3:0c:9a:72:64:ce:cb:5b:a1:ac:db:84:9c:f4:
6a:6d:98:a6:cd:5a:2f:95:23:c2:e8:1c:8d:0a:44:68:8e:82:
35:b6:f8:8f:f9:dd:02:13:bc:af:0e:f4:ec:fd:72:46:cb:a8:
dd:74:84:d6:94:5c:4e:4b:d7:8f:5b:80:fc:81:00:73:8a:e2:
10:65:c0:36:29:0c:13:dd:c7:37:81:96:84:9a:f3:c6:e1:4d:
3a:3a:80:dc:a3:73:a3:d9:79:cd:b0:d1:13:40:33:2b:89:c5:
28:79:43:95:f5:38:f1:41:7e:fc:cc:36:29:00:2d:39:7f:47:
6e:f7:44:0f:89:a4:fb:2d:be:32:d7:7d:b2:01:7c:93:8f:db:
f5:45:c7:19:36:2e:18:54:85:d8:ea:fc:5b:2d:74:5a:71:a7:
92:46:70:e9:1b:f4:2f:af:33:27:5d:b9:27:6c:ea:44:04:b8:
42:b0:15:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 13:18:31 2025 by rpki-client