Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
File: BGWHkB8TB5vtiYL2KendFUaM_vE.mft (raw, json)
Hash identifier: p93pU7BdTzVl7Pu3N6Z9eu1zipKU/e4fpODmyiz2UuE=
Subject key identifier: A0:73:F2:AF:50:8F:C6:96:07:CB:F7:70:F7:7F:F6:1E:A1:25:35:60
Authority key identifier: 04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1
Certificate issuer: /CN=046587901f13079bed8982f629e9dd15468cfef1
Certificate serial: 01989600432F2AE91BB684409A45F381CFFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
Manifest number: 101E
Signing time: Sun 10 Aug 2025 22:00:56 +0000
Manifest this update: Sun 10 Aug 2025 22:00:56 +0000
Manifest next update: Mon 11 Aug 2025 22:00:56 +0000
Files and hashes: 1: BGWHkB8TB5vtiYL2KendFUaM_vE.crl (hash: fgx/wMalUW6Lu3BSa8my6+5zxa8XifD5n3ygIo24TEI=)
2: elV1APoKiSk_9XkOBJQhYkqxHiw.roa (hash: 8zT6bhkdxlFlI+FWNJggqU5g/ZNnR60ACpbk2nou4yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:00:43:2f:2a:e9:1b:b6:84:40:9a:45:f3:81:cf:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046587901f13079bed8982f629e9dd15468cfef1
Validity
Not Before: Aug 10 22:00:56 2025 GMT
Not After : Aug 11 22:00:56 2025 GMT
Subject: CN=a073f2af508fc69607cbf770f77ff61ea1253560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c8:f6:ac:b0:b8:be:85:83:30:4d:4b:f5:a6:
db:b9:cc:62:12:88:e4:64:78:2d:f0:15:f3:f2:4d:
05:fb:fb:86:dd:72:9f:c2:39:68:a3:12:36:46:ac:
4a:cd:d1:3e:b5:d5:95:fb:11:41:45:4c:f6:8c:dd:
c4:8a:9b:f7:10:71:8e:d0:6f:18:36:2d:a1:5c:d3:
10:65:45:12:e6:bc:1b:c3:b4:fe:fb:fe:41:93:98:
69:ef:f7:3b:c7:92:01:59:fd:04:35:b8:8d:5e:ec:
56:95:fb:f7:c8:b4:4f:cc:4a:0d:c8:32:c5:6e:b8:
2e:68:f0:db:76:fe:39:a0:84:cd:72:16:8a:b5:90:
80:76:bf:5e:e2:97:49:52:26:10:e3:b6:33:86:8d:
43:60:dd:eb:6d:40:34:dd:51:4f:fb:6a:2b:0e:a8:
99:d8:d7:9a:45:e5:bd:13:32:8c:a1:b7:2b:77:86:
05:1f:b0:85:29:a0:1d:2a:8b:69:bb:b8:e1:35:ad:
a3:14:30:d0:07:26:2b:73:81:f0:e9:fa:c5:56:cb:
72:a0:4f:fa:6b:1e:94:61:41:13:20:13:e7:f6:74:
9d:17:eb:06:a4:fb:55:0d:69:4a:51:93:20:b6:d6:
5f:f1:06:fd:4e:ca:97:2e:93:bc:74:86:57:99:9e:
50:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:73:F2:AF:50:8F:C6:96:07:CB:F7:70:F7:7F:F6:1E:A1:25:35:60
X509v3 Authority Key Identifier:
keyid:04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:01:3e:3e:4b:db:46:51:83:de:c2:ce:0c:fb:43:5f:ed:fb:
2c:90:43:e3:3c:20:ce:cc:65:fd:12:e4:42:b3:ff:da:59:f2:
ff:31:48:78:84:68:4d:17:c3:19:48:b5:79:24:dc:33:40:28:
d5:4f:3c:9b:f5:22:67:e1:6f:cf:67:62:eb:cc:70:98:fd:ef:
16:89:53:4d:bc:40:d6:1f:40:ad:6e:e3:9c:d6:c4:cd:e1:d3:
e6:b8:7e:22:0b:a1:27:07:31:cb:06:64:ed:58:3a:97:bc:03:
14:f5:79:0c:c9:a4:bc:be:56:90:ee:3a:4a:a1:ac:8e:fa:a7:
bc:10:49:cb:da:34:f0:c0:ce:59:90:97:f4:a2:76:3f:cf:64:
71:c8:d9:7a:e0:3a:15:03:5c:7d:65:12:4a:00:bf:3b:56:b5:
31:13:c4:b0:13:25:22:1c:be:76:5e:d5:de:0a:73:55:65:2d:
c2:d5:4a:86:88:93:c8:57:6c:17:b1:2b:b2:fb:8e:15:9f:71:
7a:78:de:8e:67:66:7c:1a:75:08:b6:49:41:54:c5:ed:50:ac:
f4:f4:6f:73:0c:d1:60:3d:fc:ef:55:36:46:bc:f1:d7:15:e4:
c2:0f:9c:c2:b3:5a:f4:5f:d6:d0:5d:9c:bc:c8:2d:6f:47:2c:
e5:f6:5f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:24:04 2025 by rpki-client