Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
File: BUJK-kvO52VL3zq3kWVuREXC-Vo.mft (raw, json)
Hash identifier: QgBJehQ+GJ9wkxkTBOVfZzvVc3KFqbB1IV0fVRROuog=
Subject key identifier: FC:4A:36:24:3F:CF:A7:75:47:7F:2B:5E:26:1E:D5:DE:8D:6E:07:C6
Authority key identifier: 05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
Certificate issuer: /CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Certificate serial: 01992BFD475B10F07F8B45035916B91B18E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
Manifest number: 0488
Signing time: Tue 09 Sep 2025 01:00:42 +0000
Manifest this update: Tue 09 Sep 2025 01:00:42 +0000
Manifest next update: Wed 10 Sep 2025 01:00:42 +0000
Files and hashes: 1: BUJK-kvO52VL3zq3kWVuREXC-Vo.crl (hash: 8M9gZiScoCLsbRZ3bE63DFMh6Y3O6trtzU1HebiVPt4=)
2: IUMtGwo7cTFP42D9nrk7-OpkQvQ.roa (hash: c6c/rj/fNAeM/ZuHFO3HQMFeZ6ws+kGa19bAnjrXmhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:fd:47:5b:10:f0:7f:8b:45:03:59:16:b9:1b:18:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Validity
Not Before: Sep 9 01:00:42 2025 GMT
Not After : Sep 10 01:00:42 2025 GMT
Subject: CN=fc4a36243fcfa775477f2b5e261ed5de8d6e07c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ca:71:61:14:0c:be:87:78:35:62:11:d6:0e:
1b:da:0e:50:19:5a:a9:77:6e:79:2f:31:cd:7a:d4:
1e:92:51:9f:51:2e:87:ef:99:42:4c:98:f9:68:66:
eb:28:c7:fb:1d:03:cd:09:23:3d:ce:ee:13:15:f2:
68:d4:39:48:68:d4:cc:6d:f9:11:76:49:03:f1:f0:
39:d7:a0:ff:8a:91:05:c2:8e:22:7f:db:14:4a:e8:
d9:a6:80:e7:57:8c:80:66:3c:04:4e:c6:f0:f2:f2:
c6:9e:ad:48:32:00:45:cc:db:14:b6:96:4a:57:36:
df:a9:f6:32:11:f5:28:0f:50:3b:58:5b:e6:ee:79:
3f:f6:84:93:6d:1e:c0:8f:08:f3:a5:f8:bd:6a:53:
47:fe:7b:1a:92:75:45:99:e9:a9:38:9c:80:eb:64:
71:1e:23:91:02:a1:97:2b:39:99:27:6c:b2:b9:cd:
bf:4f:f7:be:9c:fa:2a:8e:5a:b4:2a:7b:a7:ab:98:
ec:b0:54:22:54:5a:28:ad:ec:3b:ed:8e:8a:07:71:
52:ca:17:62:47:c2:f7:b3:48:6d:48:d6:a6:25:d8:
55:a1:9f:e2:2a:26:4e:ac:f1:86:98:89:12:cc:e5:
9b:87:5d:91:f7:51:2c:53:c4:ab:b5:31:57:2d:57:
3a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4A:36:24:3F:CF:A7:75:47:7F:2B:5E:26:1E:D5:DE:8D:6E:07:C6
X509v3 Authority Key Identifier:
keyid:05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:6e:fd:06:32:8f:78:ec:01:cb:c4:ad:cf:05:8f:9e:22:30:
4e:e0:32:f1:ed:03:e3:69:e8:43:df:12:d8:d8:08:18:65:19:
99:62:fd:df:a0:96:3b:a9:50:1b:b8:e4:e2:91:9a:e9:3d:ea:
8c:78:de:21:03:30:62:f8:71:e9:b0:1a:77:89:00:b8:4e:4e:
79:2c:d9:18:c2:5c:b5:00:5d:09:0d:80:00:a1:d8:f2:c2:16:
72:83:73:27:22:2d:60:82:27:d0:43:18:10:00:2a:07:5b:04:
15:a5:fa:e3:84:90:c8:88:6a:6a:c7:20:e6:b6:38:36:ec:fc:
0a:07:c7:97:10:5a:4a:b9:38:39:58:5d:52:73:8a:90:c6:8e:
0e:2e:6b:47:ec:ad:cf:44:43:06:e8:bf:2c:08:e1:09:ce:95:
47:ad:8f:0a:ad:ac:31:c5:4f:c5:97:58:aa:20:3a:2b:1e:97:
d2:b5:9e:10:20:6f:af:78:98:03:4c:1d:71:26:2e:77:75:56:
a1:b8:e7:e2:b8:58:b4:f1:12:29:53:e4:d4:14:31:5e:b6:34:
12:c5:ed:23:cf:5b:e3:a7:2e:fe:d5:c1:31:75:94:41:8f:d1:
d1:ae:7b:81:57:e8:f8:7b:d6:ba:c0:40:36:5a:95:57:96:c5:
2d:41:74:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 07:57:24 2025 by rpki-client