Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
File: BGyntgTsCPb1Sw50iQZUfdN1Z00.mft (raw, json)
Hash identifier: /wFf+aAaq3StcrnL2RUr/qidalD7t1/fM3YpHcQgDEM=
Subject key identifier: 48:8E:C8:F9:D3:AD:A9:B0:B5:B0:6A:AF:13:A7:5B:47:56:61:65:67
Authority key identifier: 04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D
Certificate issuer: /CN=046ca7b604ec08f6f54b0e748906547dd375674d
Certificate serial: 01987FE671BCD5155DFB4CDE1159FBC3BFA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
Manifest number: 12E0
Signing time: Wed 06 Aug 2025 15:01:05 +0000
Manifest this update: Wed 06 Aug 2025 15:01:05 +0000
Manifest next update: Thu 07 Aug 2025 15:01:05 +0000
Files and hashes: 1: BGyntgTsCPb1Sw50iQZUfdN1Z00.crl (hash: jqiRNu56Gu03SN9sDBqq2cETmn8LkBEeRYs6/6L3fEI=)
2: W_EWnDN7S-Lr4HAexwKFCibBunI.roa (hash: Hq7myDcvfhXQUDH03db33GGTXzn+mXDa35j7LIpyLJ4=)
3: _h-pD85oM-4QL5S4Ka5s8okAtQk.roa (hash: 0i71BBwnivmIgBhKogySa4VPmpxK93A6N2O06ABsBqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:e6:71:bc:d5:15:5d:fb:4c:de:11:59:fb:c3:bf:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046ca7b604ec08f6f54b0e748906547dd375674d
Validity
Not Before: Aug 6 15:01:05 2025 GMT
Not After : Aug 7 15:01:05 2025 GMT
Subject: CN=488ec8f9d3ada9b0b5b06aaf13a75b4756616567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7e:7c:fc:db:07:ed:c1:64:7a:1c:e1:01:13:
46:f8:a0:b0:1f:70:8c:76:c0:37:99:c2:ed:83:ba:
82:16:00:e6:9f:d2:b1:9d:07:00:0d:e0:27:60:89:
ae:f4:03:03:38:05:2a:37:da:5a:cc:8c:a9:90:1c:
1b:3b:4c:ba:f4:99:b7:54:9b:d0:f2:aa:3a:3b:19:
e1:13:a0:2c:26:16:61:26:f1:99:87:a8:6a:50:83:
63:80:ad:24:b3:cf:1a:80:0e:da:6d:b1:0d:94:fa:
a9:15:13:ab:db:2c:26:33:77:48:5f:ca:32:00:bd:
57:93:fc:44:31:8d:9d:bc:2c:0d:3d:36:ac:51:52:
c9:b6:90:4a:b0:33:ce:0f:77:9b:4e:56:5b:a1:8c:
46:27:d3:cf:8a:91:e3:19:95:fa:e1:1f:e0:fa:21:
7b:40:8c:c5:78:a1:d7:44:2c:95:b8:43:18:ca:bc:
8f:a3:73:88:a7:c8:5e:84:48:7d:df:56:85:3a:cc:
f6:76:09:7a:50:0b:d8:73:af:10:21:95:0e:00:07:
a6:f1:0c:8a:49:92:13:f8:ff:d1:5d:8a:ed:be:9d:
6e:02:a7:2c:aa:be:32:42:fd:dc:81:c3:f5:e0:71:
7f:7e:02:2d:62:79:d2:6d:29:cc:cd:56:8d:f6:88:
cd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8E:C8:F9:D3:AD:A9:B0:B5:B0:6A:AF:13:A7:5B:47:56:61:65:67
X509v3 Authority Key Identifier:
keyid:04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:7b:67:c6:e9:e4:3c:92:5f:c6:91:bc:c3:65:30:78:99:25:
21:94:f8:07:d7:0e:0e:8b:88:64:37:16:c5:91:ec:ab:e0:c9:
66:8d:46:37:f4:d2:f8:16:65:66:ef:8a:89:9c:de:4e:8b:0b:
76:48:5d:5f:fe:95:2f:8d:00:51:9c:44:c5:37:02:b4:42:9d:
d9:b1:b1:1f:ca:31:bd:7d:1e:cf:45:10:d8:ee:13:d8:c5:e4:
92:5a:15:3c:31:be:ad:f1:8e:2c:5d:76:d9:c6:d9:22:f0:11:
14:e1:3d:4e:5a:b5:76:8c:d3:a3:b7:77:8a:c8:ff:70:e5:af:
79:b7:07:bf:02:45:8d:0a:7b:20:3b:a6:46:44:91:49:f3:c2:
6d:1e:47:bf:14:4a:fb:2d:7b:5a:3d:5c:d0:85:f9:9e:dd:11:
35:95:d7:8b:0b:2e:91:df:cc:2f:40:6e:58:3d:06:63:9c:ab:
31:d5:65:aa:88:eb:05:eb:f1:61:58:8e:d2:14:de:7f:94:8e:
ba:1c:16:7e:b2:46:66:7b:e2:12:10:02:bc:d5:6f:c4:2f:22:
6b:37:8c:6e:1c:c4:ed:90:4d:cd:7b:3b:b5:c1:b1:46:ac:af:
fe:2c:33:a3:bb:fd:1e:3e:1f:33:a4:aa:c1:31:9a:09:56:5f:
6d:12:d9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:04:15 2025 by rpki-client