
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
File: Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft (raw, json)
Hash identifier: CT3y0TAM7ydk9bOe+qT9Z1iVxFYy681Ssfz7YVsfc1g=
Subject key identifier: BC:D0:2F:59:E0:71:7C:C6:CF:4F:D6:15:F8:F6:A4:38:28:2B:4C:62
Authority key identifier: 06:09:7A:72:E4:AE:40:B6:B9:92:9B:72:F8:1E:FD:71:C5:17:DD:98
Certificate issuer: /CN=06097a72e4ae40b6b9929b72f81efd71c517dd98
Certificate serial: 01987ABFCE4E0A3E561E2EDA4D274DCF8ECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
Manifest number: 023D
Signing time: Tue 05 Aug 2025 15:00:47 +0000
Manifest this update: Tue 05 Aug 2025 15:00:47 +0000
Manifest next update: Wed 06 Aug 2025 15:00:47 +0000
Files and hashes: 1: Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl (hash: wEfSJR7JcWGOqDL4Y4yx7/0OjKB+9ck7jDHR+p0Tb0o=)
2: aTqNBiMtHyqY4sjo2vUby0yJMKk.roa (hash: 8tR80jRMgENDFDI+mB0B/a9/v+rAAXYdo53Fd7KchX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:bf:ce:4e:0a:3e:56:1e:2e:da:4d:27:4d:cf:8e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06097a72e4ae40b6b9929b72f81efd71c517dd98
Validity
Not Before: Aug 5 15:00:47 2025 GMT
Not After : Aug 6 15:00:47 2025 GMT
Subject: CN=bcd02f59e0717cc6cf4fd615f8f6a438282b4c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0a:d6:e2:88:ab:12:b3:bd:6d:bb:20:69:54:
0b:98:70:82:d1:76:bb:52:bf:4f:1e:c9:6b:39:bb:
91:52:60:19:14:60:af:64:12:80:f4:21:49:d5:1e:
6c:0f:83:fc:46:f5:94:d8:37:85:34:ad:e9:43:86:
39:b6:b4:84:cc:a7:69:89:07:c3:24:73:12:9a:fe:
b4:ae:aa:28:ab:c7:b7:c4:23:5b:f6:2c:8e:44:fb:
87:6c:e7:69:88:99:fc:58:a9:bc:33:01:95:be:e4:
52:58:40:12:9f:fd:40:a7:c4:db:63:87:cd:70:2b:
c6:8b:bb:bd:a6:77:ff:3a:e3:47:e5:2e:15:51:80:
32:b3:5e:84:2c:24:66:5c:2e:d4:4c:c2:e5:ff:98:
a1:1d:2f:e4:80:95:c8:db:19:c2:4a:e6:c0:46:7b:
8e:e8:83:6c:94:90:a4:33:5b:79:39:08:18:14:cd:
7a:6c:16:75:cf:3b:1f:b2:8a:17:e1:1c:f2:75:76:
6f:f8:68:1f:d9:4f:67:7b:b3:8a:31:3e:d8:b1:cc:
43:ca:a4:c4:46:47:98:aa:80:41:96:b6:36:a4:80:
5b:a3:10:dc:7c:a0:5c:cd:cc:57:19:d3:41:da:cb:
60:04:92:35:3b:c1:6c:e4:fd:2d:c5:6f:d0:7c:51:
3c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D0:2F:59:E0:71:7C:C6:CF:4F:D6:15:F8:F6:A4:38:28:2B:4C:62
X509v3 Authority Key Identifier:
keyid:06:09:7A:72:E4:AE:40:B6:B9:92:9B:72:F8:1E:FD:71:C5:17:DD:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:30:6d:fd:74:51:fa:9f:03:0b:1f:3b:c2:16:e4:f9:a2:de:
92:a0:a4:67:29:f0:5b:f5:e3:24:c9:ff:30:48:62:6b:18:de:
14:7a:f6:c4:88:0f:5f:2b:68:6c:78:27:c6:63:76:89:7c:8e:
c4:9b:a1:4f:dd:26:31:c7:88:39:79:9c:0d:ce:50:80:21:aa:
d0:32:fe:07:31:98:af:23:69:df:9f:aa:d6:31:9f:6c:4e:1e:
87:16:8b:37:35:29:46:31:5a:18:08:a5:b8:7e:66:ee:a2:84:
00:37:52:9e:d5:d8:53:ea:e4:53:81:5e:27:23:76:1d:06:ed:
27:d0:3d:2d:e2:ab:c6:e9:b4:28:a9:70:0e:28:49:82:27:df:
c4:3f:d3:0f:7e:56:8b:b4:be:0d:49:9c:ca:27:f5:ab:0f:4e:
cf:cc:67:0b:7c:91:c0:d9:7c:87:dd:5a:f3:cb:52:74:94:99:
95:6e:30:40:a0:3f:ce:42:9c:7e:7d:13:f3:ee:b1:83:aa:6f:
6c:c1:a0:3d:91:1c:04:ae:a1:13:79:7b:9f:cf:08:bb:98:d7:
33:ee:e4:83:4d:bb:f9:f9:a8:0b:20:18:1c:8c:da:58:86:37:
e9:6b:ef:5d:87:8d:12:46:a6:e1:fc:19:76:ad:f4:e1:44:36:
40:ca:67:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6v85OCj5WHi7aTSdNz47PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MDk3YTcyZTRhZTQwYjZiOTkyOWI3MmY4MWVmZDcxYzUx
N2RkOTgwHhcNMjUwODA1MTUwMDQ3WhcNMjUwODA2MTUwMDQ3WjAzMTEwLwYDVQQD
EyhiY2QwMmY1OWUwNzE3Y2M2Y2Y0ZmQ2MTVmOGY2YTQzODI4MmI0YzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwrW4oirErO9bbsgaVQLmHCC0Xa7
Ur9PHslrObuRUmAZFGCvZBKA9CFJ1R5sD4P8RvWU2DeFNK3pQ4Y5trSEzKdpiQfD
JHMSmv60rqooq8e3xCNb9iyORPuHbOdpiJn8WKm8MwGVvuRSWEASn/1Ap8TbY4fN
cCvGi7u9pnf/OuNH5S4VUYAys16ELCRmXC7UTMLl/5ihHS/kgJXI2xnCSubARnuO
6INslJCkM1t5OQgYFM16bBZ1zzsfsooX4RzydXZv+Ggf2U9ne7OKMT7YscxDyqTE
RkeYqoBBlrY2pIBboxDcfKBczcxXGdNB2stgBJI1O8Fs5P0txW/QfFE8qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLzQL1ngcXzGz0/WFfj2pDgoK0xiMB8GA1UdIwQY
MBaAFAYJenLkrkC2uZKbcvge/XHFF92YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmdsNmN1U3VRTGE1a3B0eS1CNzljY1VYM1pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zYTEwOWEtOWIzMi00NWE4LTliMGMt
N2EwMjUxN2ZkOWQyLzEvQmdsNmN1U3VRTGE1a3B0eS1CNzljY1VYM1pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zYTEwOWEtOWIzMi00NWE4LTliMGMtN2EwMjUxN2ZkOWQy
LzEvQmdsNmN1U3VRTGE1a3B0eS1CNzljY1VYM1pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbzBt/XRR
+p8DCx87whbk+aLekqCkZynwW/XjJMn/MEhiaxjeFHr2xIgPXytobHgnxmN2iXyO
xJuhT90mMceIOXmcDc5QgCGq0DL+BzGYryNp35+q1jGfbE4ehxaLNzUpRjFaGAil
uH5m7qKEADdSntXYU+rkU4FeJyN2HQbtJ9A9LeKrxum0KKlwDihJgiffxD/TD35W
i7S+DUmcyif1qw9Oz8xnC3yRwNl8h91a88tSdJSZlW4wQKA/zkKcfn0T8+6xg6pv
bMGgPZEcBK6hE3l7n88Iu5jXM+7kg027+fmoCyAYHIzaWIY36WvvXYeNEkam4fwZ
dq304UQ2QMpngQ==
-----END CERTIFICATE-----
Generated at Tue Aug 5 20:00:27 2025 by rpki-client