Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
File: BGK247pQCQLmPuFOXKyREoMqLCc.mft (raw, json)
Hash identifier: TWXWzy8Rl9VlimpMnusLkFPMRjoyaWWaRZzjGLpy9hw=
Subject key identifier: C8:81:31:09:55:68:AA:8E:31:C3:D0:B5:72:7B:07:93:0F:03:69:B5
Authority key identifier: 04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27
Certificate issuer: /CN=0462b6e3ba500902e63ee14e5cac9112832a2c27
Certificate serial: 019A552DF563AECE4E8477FACA59597E22A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
Manifest number: 0295
Signing time: Wed 05 Nov 2025 18:01:06 +0000
Manifest this update: Wed 05 Nov 2025 18:01:06 +0000
Manifest next update: Thu 06 Nov 2025 18:01:06 +0000
Files and hashes: 1: BGK247pQCQLmPuFOXKyREoMqLCc.crl (hash: 1gT5tqGI97cDtOuoWU6XoWEiZ9t437+vDOFy1Va4jj0=)
2: zin7g8rz3XZKgyY-2CCTccUUZMI.roa (hash: FyDDLGXT5pU6Mg/1Kd+gQOcE2BEnBTlrNQt3oLOsDkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 18:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:2d:f5:63:ae:ce:4e:84:77:fa:ca:59:59:7e:22:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0462b6e3ba500902e63ee14e5cac9112832a2c27
Validity
Not Before: Nov 5 18:01:06 2025 GMT
Not After : Nov 6 18:01:06 2025 GMT
Subject: CN=c88131095568aa8e31c3d0b5727b07930f0369b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8a:35:ba:a3:9e:86:47:f9:22:75:04:6a:f1:
5f:ef:dd:88:58:ba:84:28:69:df:06:3e:78:91:5d:
b9:5d:dd:58:c5:e1:0c:5e:c6:13:a0:f2:ce:5c:d4:
7c:89:7b:35:2f:aa:4a:89:8f:a7:06:97:69:92:1d:
74:de:94:4c:fe:48:56:57:34:34:de:91:7f:51:f9:
8e:8b:e3:f3:59:e9:b2:6c:76:f4:ea:99:03:75:d0:
19:0a:7c:b8:10:20:da:7d:20:32:8f:87:e1:0f:66:
2d:e7:b9:6f:33:d1:f3:e4:ac:b4:f9:84:17:cf:40:
3f:33:b3:9e:c8:51:d2:b4:49:62:ae:43:61:7c:17:
27:fe:b5:03:5c:df:dc:7d:ad:61:73:11:d2:ff:64:
a1:f1:7b:fd:dd:2e:01:18:b3:55:f2:6e:93:38:99:
c5:1d:8e:b1:5d:36:48:a2:80:e5:04:a3:4e:c0:3f:
32:61:8a:fd:3e:2e:5c:66:42:30:8b:cd:af:07:89:
88:69:93:bf:44:8e:ce:c0:d8:ab:3b:02:2f:8e:95:
f8:9d:b6:c4:c6:84:3b:6f:ba:1d:a3:50:72:fc:42:
f6:ba:2c:f1:b5:20:85:95:5a:ae:ea:71:f7:8e:94:
fa:24:7d:3e:54:09:54:fd:5a:a3:09:26:17:ee:f4:
19:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:81:31:09:55:68:AA:8E:31:C3:D0:B5:72:7B:07:93:0F:03:69:B5
X509v3 Authority Key Identifier:
keyid:04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:be:51:1e:58:32:14:40:ef:74:ad:69:83:69:17:e6:32:83:
61:32:42:00:d6:0b:9d:64:90:af:76:44:be:39:8c:18:6d:1b:
12:4e:90:3c:21:b8:57:07:50:2b:48:89:d7:ec:39:5d:e7:70:
d0:60:36:98:ec:80:2b:59:94:b1:69:ae:5c:92:64:6e:d0:eb:
ca:0e:67:e9:02:5c:02:ee:21:7c:85:ae:b9:ef:b6:08:5c:7a:
b4:e2:4c:8e:bf:4a:dd:13:4c:a8:2b:01:02:24:da:e4:4d:d8:
30:34:08:e4:c3:95:86:9f:da:59:aa:7e:66:7b:ed:44:2c:79:
36:53:00:05:f4:ab:5f:72:a3:e3:2b:e3:0e:f5:b6:cf:f5:c0:
e9:b4:15:50:4d:52:04:dd:2d:a8:b7:f7:51:41:e6:96:cf:25:
30:b3:66:df:1e:97:94:9d:59:f4:e5:b7:2f:0b:e6:5c:73:ac:
b2:92:11:f6:f3:6f:8b:2e:7f:b2:7f:0e:28:65:2e:5d:0a:9c:
31:7a:b4:4f:80:7b:68:03:c0:b8:15:a0:9d:f4:a1:96:98:88:
5b:1d:40:19:a6:df:88:40:04:51:d2:2b:bd:6c:85:1e:8e:d7:
fe:92:16:97:4f:e4:e8:6a:6a:fd:67:a5:3a:b5:64:4b:09:75:
70:bc:b5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:59:19 2025 by rpki-client