Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
File: BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft (raw, json)
Hash identifier: EiQndNYsumVpFXFPT0DG1U57Vm7gZOT7uNRzTgzh+BI=
Subject key identifier: DB:51:2B:BB:DB:43:94:2B:0A:DA:08:7A:10:B9:0C:E7:AB:C3:4E:FC
Authority key identifier: 05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
Certificate issuer: /CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Certificate serial: 019A1D9A235EF23E7E6EF70261785992C88F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
Manifest number: 088F
Signing time: Sat 25 Oct 2025 23:00:32 +0000
Manifest this update: Sat 25 Oct 2025 23:00:32 +0000
Manifest next update: Sun 26 Oct 2025 23:00:32 +0000
Files and hashes: 1: BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl (hash: g9s8PhLoiLRB7gdT5Ui0oz+DOXPajfDeKU22v7kN0xk=)
2: FU5ckiwSRF9khD7WupXiavmIPzs.roa (hash: 84Hh9Rd/Utxajq2oO+DHR2ECiOMAuLuEnM4faDd74uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 23:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:9a:23:5e:f2:3e:7e:6e:f7:02:61:78:59:92:c8:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Validity
Not Before: Oct 25 23:00:32 2025 GMT
Not After : Oct 26 23:00:32 2025 GMT
Subject: CN=db512bbbdb43942b0ada087a10b90ce7abc34efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c9:38:57:2a:01:bf:5a:27:de:96:74:83:81:
08:10:7f:31:7f:89:f9:f0:cd:b6:87:8f:04:e3:c5:
7b:60:e6:aa:04:a9:3d:00:3f:79:3f:a6:50:c8:04:
07:6a:79:78:3d:ce:49:7f:85:7b:63:8a:1b:a1:aa:
c0:6c:88:82:bb:ca:b1:a7:72:d6:85:49:c9:b4:57:
c9:34:cb:0b:c8:c5:34:5f:d1:45:8f:dc:d6:d5:b8:
5f:5e:43:80:1f:74:4f:28:fe:36:f4:32:7a:1f:61:
d5:4b:c0:85:91:d5:82:4e:63:f2:97:0c:06:58:3e:
da:6c:94:9d:a3:e2:cd:fd:7b:d9:4c:f2:3e:d3:65:
43:22:97:61:6a:a5:90:c3:72:93:8d:41:d4:24:86:
e5:e8:08:97:98:94:e2:77:2b:d9:08:4e:e0:83:ac:
41:11:21:9c:70:e6:f8:b7:2b:29:01:29:c6:25:a5:
17:5a:0f:e9:89:3b:65:ee:39:2a:11:dd:9b:b6:3a:
e8:48:37:0a:48:a1:9a:2f:75:a8:3c:58:e6:0a:9d:
ab:52:ff:24:e0:1f:f7:08:5c:e9:11:ad:a2:cf:05:
6b:fd:60:a6:e9:91:26:c4:5f:26:1e:52:e1:ff:41:
28:87:a0:dd:6a:da:44:34:ce:a5:f7:96:1e:fa:25:
7d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:51:2B:BB:DB:43:94:2B:0A:DA:08:7A:10:B9:0C:E7:AB:C3:4E:FC
X509v3 Authority Key Identifier:
keyid:05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a4:db:f7:a6:b5:65:70:fa:b9:ca:47:62:4a:c9:94:8f:8c:
65:63:89:40:79:95:46:4f:0e:9d:62:46:5c:9b:56:bf:02:03:
c1:13:d9:03:a4:80:b3:33:50:59:c2:ae:42:69:96:0d:55:e9:
5b:c6:a9:ad:fc:ad:e5:6e:dc:75:d8:af:f1:32:20:37:56:ec:
76:dd:ad:f4:26:c3:51:c7:b9:52:f1:84:74:2b:73:c4:c4:a1:
09:54:94:3d:b7:bb:90:ec:e1:1c:e0:80:79:1c:bd:55:a0:0c:
07:b0:0d:8f:6a:8d:b6:59:f7:a4:3d:de:97:a7:89:f8:e2:57:
94:1e:22:fc:e9:ca:27:2f:6b:43:5a:30:c8:c3:4d:bc:bf:10:
13:53:21:e8:8a:b6:7c:4b:d5:e6:d6:9c:01:1a:5a:d1:3c:6d:
63:d8:20:39:98:ca:48:0d:d3:79:fa:ce:db:89:e1:c4:d7:02:
3b:da:fe:9b:af:92:90:5f:53:39:12:27:69:3f:5f:06:45:db:
bb:7b:0a:e0:22:0b:52:33:36:6b:c8:3b:a1:51:e3:e6:b1:83:
2b:fc:6f:40:2b:a8:3d:e4:ed:b7:1c:cd:11:b5:71:20:cc:81:
62:1b:7d:34:31:e7:82:b8:f7:ef:54:14:af:89:0b:ed:78:36:
dc:96:bc:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZodmiNe8j5+bvcCYXhZksiPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDUyNzlkODdmOGMwZjM4YzM5MGEzM2NmMTY5OTU1MWRj
MzBmZTQwHhcNMjUxMDI1MjMwMDMyWhcNMjUxMDI2MjMwMDMyWjAzMTEwLwYDVQQD
EyhkYjUxMmJiYmRiNDM5NDJiMGFkYTA4N2ExMGI5MGNlN2FiYzM0ZWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58k4VyoBv1on3pZ0g4EIEH8xf4n5
8M22h48E48V7YOaqBKk9AD95P6ZQyAQHanl4Pc5Jf4V7Y4oboarAbIiCu8qxp3LW
hUnJtFfJNMsLyMU0X9FFj9zW1bhfXkOAH3RPKP429DJ6H2HVS8CFkdWCTmPylwwG
WD7abJSdo+LN/XvZTPI+02VDIpdhaqWQw3KTjUHUJIbl6AiXmJTidyvZCE7gg6xB
ESGccOb4tyspASnGJaUXWg/piTtl7jkqEd2btjroSDcKSKGaL3WoPFjmCp2rUv8k
4B/3CFzpEa2izwVr/WCm6ZEmxF8mHlLh/0Eoh6DdatpENM6l95Ye+iV9XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtRK7vbQ5QrCtoIehC5DOerw078MB8GA1UdIwQY
MBaAFAVFJ52H+MDzjDkKM88WmVUdww/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVVbm5ZZjR3UE9NT1Fvenp4YVpWUjNERC1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC83NjgzNzgtZDc5Yi00NWM3LWEyOTAt
OWQzODZkMDQ2ZmIwLzEvQlVVbm5ZZjR3UE9NT1Fvenp4YVpWUjNERC1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC83NjgzNzgtZDc5Yi00NWM3LWEyOTAtOWQzODZkMDQ2ZmIw
LzEvQlVVbm5ZZjR3UE9NT1Fvenp4YVpWUjNERC1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc6Tb96a1
ZXD6ucpHYkrJlI+MZWOJQHmVRk8OnWJGXJtWvwIDwRPZA6SAszNQWcKuQmmWDVXp
W8aprfyt5W7cddiv8TIgN1bsdt2t9CbDUce5UvGEdCtzxMShCVSUPbe7kOzhHOCA
eRy9VaAMB7ANj2qNtln3pD3el6eJ+OJXlB4i/OnKJy9rQ1owyMNNvL8QE1Mh6Iq2
fEvV5tacARpa0TxtY9ggOZjKSA3TefrO24nhxNcCO9r+m6+SkF9TORInaT9fBkXb
u3sK4CILUjM2a8g7oVHj5rGDK/xvQCuoPeTttxzNEbVxIMyBYht9NDHngrj371QU
r4kL7Xg23Ja8RA==
-----END CERTIFICATE-----
Generated at Sun Oct 26 08:06:36 2025 by rpki-client