Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
File: BUJK-kvO52VL3zq3kWVuREXC-Vo.mft (raw, json)
Hash identifier: RAjLzigigJfyjeRR8QZ8gbjzL8MVgFSpc1EAzyfB7yQ=
Subject key identifier: 92:F4:38:A9:2E:91:BA:17:C7:47:A9:FE:5B:E3:55:0F:5B:CB:1F:2F
Authority key identifier: 05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
Certificate issuer: /CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Certificate serial: 019A725CD483EAF58D5A3D0FAED6411F3D96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
Manifest number: 0531
Signing time: Tue 11 Nov 2025 10:01:17 +0000
Manifest this update: Tue 11 Nov 2025 10:01:17 +0000
Manifest next update: Wed 12 Nov 2025 10:01:17 +0000
Files and hashes: 1: BUJK-kvO52VL3zq3kWVuREXC-Vo.crl (hash: zwXzaJaZnyzmJm1IEuFDOPZaCCnn6NTTEBRZOqTdtQs=)
2: IUMtGwo7cTFP42D9nrk7-OpkQvQ.roa (hash: c6c/rj/fNAeM/ZuHFO3HQMFeZ6ws+kGa19bAnjrXmhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:d4:83:ea:f5:8d:5a:3d:0f:ae:d6:41:1f:3d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Validity
Not Before: Nov 11 10:01:17 2025 GMT
Not After : Nov 12 10:01:17 2025 GMT
Subject: CN=92f438a92e91ba17c747a9fe5be3550f5bcb1f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:21:19:2f:dc:7e:21:28:ef:ec:0d:a2:c5:a6:
2e:ab:f2:4c:30:e8:62:63:9c:cc:48:e6:20:99:49:
99:4c:cf:83:ae:6f:8a:c4:d5:6f:64:dc:39:79:dd:
12:73:67:79:c8:3e:21:9c:23:df:49:c0:dc:bb:b2:
ad:3a:cc:ab:8a:28:de:db:43:9a:df:76:aa:a1:6a:
fd:f5:ea:b6:83:40:d6:73:9f:7f:50:5e:a9:db:fc:
87:58:a6:d6:bb:f9:c1:4c:2f:3c:de:73:bd:6e:22:
5f:d5:4c:b7:78:59:9b:88:ab:c7:99:d2:ed:64:2c:
01:62:9e:3c:fc:36:a4:72:09:2f:f2:0c:d6:27:7f:
53:27:49:bc:26:64:6e:7b:56:a8:6f:76:d1:d1:b7:
5d:17:8e:6f:21:e4:f6:46:78:42:e2:bc:f5:97:38:
fc:f0:0a:26:ad:b7:d1:88:68:37:15:3a:40:84:b7:
39:44:01:c5:0f:56:e0:86:58:d4:d3:92:8f:3c:65:
f7:93:97:54:1d:d1:61:d9:8a:8c:a2:5d:a0:0b:2d:
eb:cc:c5:d8:18:2b:3b:52:24:c6:94:38:9f:4d:50:
af:5c:29:8d:43:30:27:18:84:37:55:c2:4e:62:45:
df:7b:0f:c1:cd:0d:ca:7a:db:41:27:f2:4f:d5:21:
50:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F4:38:A9:2E:91:BA:17:C7:47:A9:FE:5B:E3:55:0F:5B:CB:1F:2F
X509v3 Authority Key Identifier:
keyid:05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:3c:b0:1a:b0:57:e6:fe:cc:49:6a:99:a6:7a:f3:f4:55:9e:
51:ef:13:1a:07:92:8d:fc:f6:8a:b1:08:95:8b:20:32:8a:a6:
6f:7c:8d:f1:03:d8:3d:ca:a7:82:79:3b:7e:7b:91:72:b3:c9:
45:2b:6c:a0:3d:b6:2c:f1:d0:fd:1e:a7:d2:0b:57:f7:dd:0c:
dd:5d:0a:b8:1e:85:c1:ae:8f:35:a1:f0:d3:af:6c:19:ba:52:
c4:ed:9b:ac:65:a0:50:eb:84:d1:eb:51:fa:ab:e5:df:45:3f:
6e:fb:7e:12:14:37:36:e6:56:84:66:f1:ce:46:62:53:83:b3:
2f:ef:c6:7c:d2:f4:a7:ab:5f:68:cf:53:e4:19:58:60:ba:44:
cd:d6:b9:7f:d2:20:25:34:e1:77:16:c6:e1:28:90:ed:c6:58:
a3:2c:5e:70:ca:f0:2d:6a:59:ff:37:52:79:c3:b6:96:76:b4:
9c:bb:36:86:cb:ee:c1:ac:c9:25:08:d8:f9:c2:8a:3c:67:7e:
e9:c9:fb:16:6a:1a:3d:09:10:c1:84:b0:77:5f:9e:0f:19:58:
74:c6:85:c3:fc:a0:f7:c2:2e:b0:06:c1:92:e5:2b:d3:ef:8f:
ce:1b:fd:a8:65:46:2f:d2:14:09:17:10:95:59:9f:9b:b5:a1:
36:32:db:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:08 2025 by rpki-client