Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
File: BGyntgTsCPb1Sw50iQZUfdN1Z00.mft (raw, json)
Hash identifier: 0rkUZW8w/8oNh8h4NhIHfFGEgS5Nye6lnMW7ySNyBsc=
Subject key identifier: F8:6C:AB:8C:52:95:DA:D2:B5:22:63:39:BD:AC:FC:64:A5:50:A7:49
Authority key identifier: 04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D
Certificate issuer: /CN=046ca7b604ec08f6f54b0e748906547dd375674d
Certificate serial: 019A4F626A00F716D44FFE7E8064390F78DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
Manifest number: 13D0
Signing time: Tue 04 Nov 2025 15:00:40 +0000
Manifest this update: Tue 04 Nov 2025 15:00:40 +0000
Manifest next update: Wed 05 Nov 2025 15:00:40 +0000
Files and hashes: 1: BGyntgTsCPb1Sw50iQZUfdN1Z00.crl (hash: +BTDlI/C8GoROxyGKtZYK4XtGQLnlTLLEwTFSmS+CzU=)
2: W_EWnDN7S-Lr4HAexwKFCibBunI.roa (hash: Hq7myDcvfhXQUDH03db33GGTXzn+mXDa35j7LIpyLJ4=)
3: _h-pD85oM-4QL5S4Ka5s8okAtQk.roa (hash: 0i71BBwnivmIgBhKogySa4VPmpxK93A6N2O06ABsBqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:6a:00:f7:16:d4:4f:fe:7e:80:64:39:0f:78:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046ca7b604ec08f6f54b0e748906547dd375674d
Validity
Not Before: Nov 4 15:00:40 2025 GMT
Not After : Nov 5 15:00:40 2025 GMT
Subject: CN=f86cab8c5295dad2b5226339bdacfc64a550a749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ec:83:c8:53:1e:d1:ec:04:e6:56:91:4c:38:
d9:19:40:67:bc:7f:d8:42:1e:f3:a1:a1:83:1c:41:
c5:91:54:b3:a3:e9:b6:8f:65:23:fd:8a:fb:01:bf:
94:80:4a:07:23:42:a8:bf:fe:8d:78:e1:97:99:8f:
1f:3d:b4:a7:9b:b6:07:10:72:d6:a4:5a:4d:6f:c1:
02:db:41:25:53:a2:0d:85:9b:dd:89:5d:14:80:79:
fd:79:d8:30:e0:d0:fe:42:a1:75:a3:71:a9:32:c4:
31:88:96:36:7d:fd:5d:c3:94:42:ed:1f:1d:5b:d6:
de:85:e2:5f:9d:ef:fe:b9:ee:17:ea:f5:2e:b7:77:
33:5e:c8:a5:4b:b7:ca:52:2a:b0:6f:0e:e0:23:f2:
bc:7a:d6:d4:7a:7a:09:e3:b3:ee:74:ca:58:3f:3b:
0f:da:f3:1a:61:a9:84:ca:bf:be:69:b0:4b:44:05:
d4:5d:a7:9d:96:63:42:33:81:a7:07:e1:65:a7:59:
37:90:89:bf:70:78:a7:cd:9d:00:e3:af:eb:06:0c:
28:bf:de:c6:e4:79:9e:5d:2b:76:92:25:57:82:ee:
ab:bf:5d:af:e1:8a:86:df:fe:f9:1f:4c:e9:33:54:
cf:fb:4e:57:62:bd:95:93:40:ac:05:da:6b:ce:26:
d7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6C:AB:8C:52:95:DA:D2:B5:22:63:39:BD:AC:FC:64:A5:50:A7:49
X509v3 Authority Key Identifier:
keyid:04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:af:ce:cd:88:0a:e7:f2:5a:24:1f:d2:f3:14:0f:3a:71:1f:
75:bf:bb:b2:62:94:3c:39:70:7e:47:79:8c:f8:fa:df:41:fa:
5b:ad:ae:e2:91:7c:f0:78:0c:df:12:2c:90:06:bc:ea:ea:b2:
d6:f8:46:5e:15:fe:4b:ea:55:d3:5a:39:ff:86:a2:cc:12:0a:
01:4a:c2:82:d0:85:7e:e9:2f:c6:0d:98:67:cd:9e:52:88:ca:
90:2e:61:21:59:82:e4:a6:a4:f2:9d:0a:f6:b3:45:78:11:5c:
80:b1:68:64:f7:d8:4b:97:28:28:40:33:65:3d:72:52:02:5c:
ad:22:1d:3d:d1:5e:bb:94:ce:77:8b:c9:73:89:4c:22:61:c1:
cd:c2:fc:66:44:ff:a6:c0:0c:e1:ee:f3:f1:52:f9:83:81:ce:
6d:77:91:5d:01:5a:f1:7d:10:aa:66:bd:d9:2a:bd:0c:f6:f1:
3e:d2:ee:a2:38:3a:67:65:ac:e6:66:82:7a:29:a4:05:c6:0c:
86:a3:4a:d7:1c:b9:03:ae:10:78:1c:ce:10:26:c4:d1:9e:72:
fd:23:cf:ba:b4:5d:1f:78:fe:8d:95:da:02:16:54:69:8e:12:
49:45:42:5e:86:f1:b6:28:13:04:25:a4:a6:2e:61:0a:77:54:
2e:d7:f4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:15 2025 by rpki-client