Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
File: BGK247pQCQLmPuFOXKyREoMqLCc.mft (raw, json)
Hash identifier: gVAo7q4qSXMEqfbg/MvJqRwvOop53GUDz6RfipR0ybo=
Subject key identifier: 18:0E:43:BB:D6:1F:13:D3:99:19:D6:3B:B3:47:74:60:D3:7F:96:02
Authority key identifier: 04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27
Certificate issuer: /CN=0462b6e3ba500902e63ee14e5cac9112832a2c27
Certificate serial: 01987DF7BE8320707DCDCA45289AB185D42C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
Manifest number: 01A1
Signing time: Wed 06 Aug 2025 06:00:44 +0000
Manifest this update: Wed 06 Aug 2025 06:00:44 +0000
Manifest next update: Thu 07 Aug 2025 06:00:44 +0000
Files and hashes: 1: BGK247pQCQLmPuFOXKyREoMqLCc.crl (hash: WB8e+Mq47HUG+k1gbmLiFZVLH4Di+zqhUWjugY3/47c=)
2: zin7g8rz3XZKgyY-2CCTccUUZMI.roa (hash: FyDDLGXT5pU6Mg/1Kd+gQOcE2BEnBTlrNQt3oLOsDkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f7:be:83:20:70:7d:cd:ca:45:28:9a:b1:85:d4:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0462b6e3ba500902e63ee14e5cac9112832a2c27
Validity
Not Before: Aug 6 06:00:44 2025 GMT
Not After : Aug 7 06:00:44 2025 GMT
Subject: CN=180e43bbd61f13d39919d63bb3477460d37f9602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1d:48:36:74:37:18:b6:88:12:7a:56:09:88:
3d:ca:4c:5d:ef:bf:a9:a0:cf:b6:2b:37:e7:86:13:
83:23:28:15:92:1d:2a:78:d0:8d:6f:29:e7:4b:5e:
8c:fd:0b:de:c9:fd:66:09:30:45:a7:4a:bd:30:6f:
f6:d4:31:7d:4e:a4:67:0b:94:f8:8c:88:f1:b8:a5:
c6:3e:83:fb:30:8c:7f:cf:b4:7a:6b:8d:60:57:db:
13:4e:16:e0:ae:67:0d:ea:0c:6c:f2:2a:87:bf:44:
2f:86:8a:81:f7:d2:b7:49:f4:5e:bb:ba:57:9e:fb:
41:f8:5d:e7:10:5f:f5:0c:3b:de:72:f3:81:a1:e1:
be:60:c4:cc:e2:1c:31:15:4a:d0:23:01:36:9c:5b:
05:05:23:65:55:99:ea:c4:3b:f0:47:e7:4e:45:dd:
d2:15:3b:e0:5c:6f:59:60:3a:d8:52:78:58:02:3f:
3d:94:fe:89:3e:6b:83:2b:54:26:3c:43:7f:ca:17:
1b:2f:f2:c1:b2:39:39:3c:a4:03:ea:0d:72:9f:30:
2d:b5:f8:a0:a9:2b:a8:04:5a:cf:31:33:8a:0e:19:
0e:d0:22:b6:a2:e4:b7:0b:ce:86:8e:c3:b4:67:e0:
ff:38:f2:b0:24:b7:6f:49:5a:28:48:56:36:1a:fc:
ff:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0E:43:BB:D6:1F:13:D3:99:19:D6:3B:B3:47:74:60:D3:7F:96:02
X509v3 Authority Key Identifier:
keyid:04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:4b:a5:c1:a0:cd:b3:32:52:aa:5d:0e:a5:61:36:98:3b:68:
be:59:d3:78:6d:53:6e:95:38:12:ef:c5:8d:63:64:00:5e:8b:
d2:23:cb:3e:25:16:83:52:a1:c7:05:41:d2:ce:c2:ff:ef:fb:
56:1e:3d:1c:d2:68:9a:d8:c0:b1:e0:e8:f1:89:5b:88:b2:84:
f9:45:76:11:8c:7a:bc:01:36:d0:68:37:dd:51:a1:14:fb:d0:
8d:98:07:a2:8e:9d:8c:2d:c3:08:45:2a:b7:65:6f:b3:84:40:
3e:88:ed:55:47:45:6b:e4:33:d6:bc:55:5e:50:69:1e:e4:9e:
c0:cd:4e:56:5e:c1:27:c5:3a:24:26:a2:69:fa:98:dc:83:71:
fa:a9:39:ef:07:6f:d6:4a:46:3d:6e:7d:c3:8e:f1:4d:29:72:
43:f5:79:19:bc:79:e0:c5:35:77:6c:cf:a0:8b:d2:e4:3d:7b:
72:d7:19:87:e0:75:d0:1a:62:9b:38:0d:48:b9:48:52:33:fa:
73:1d:d9:85:97:e0:00:71:ec:5d:95:02:b2:1e:6c:f6:3d:89:
68:1b:15:9c:e4:60:0a:bd:af:4e:5e:ba:f5:37:60:0a:c7:4d:
7c:ad:de:ce:8a:a3:6e:25:eb:3b:a5:68:7b:3f:ff:44:44:d4:
d1:2a:4d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:08:14 2025 by rpki-client