Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
File: BGLgBWSpNA_0c505USFsRqjvxk8.mft (raw, json)
Hash identifier: XOhmXI18U5cKlMuJFXYujBD+pjFNQ4646HALG6K99pY=
Subject key identifier: F4:70:3B:64:F8:1F:81:73:0E:0E:6E:65:02:D8:F6:AD:02:80:9F:F7
Authority key identifier: 04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F
Certificate issuer: /CN=0462e00564a9340ff4739d3951216c46a8efc64f
Certificate serial: 019874870B5ACD3B3E5BAA5E1B5EB91C12DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
Manifest number: 161D
Signing time: Mon 04 Aug 2025 10:01:03 +0000
Manifest this update: Mon 04 Aug 2025 10:01:03 +0000
Manifest next update: Tue 05 Aug 2025 10:01:03 +0000
Files and hashes: 1: 73llHz_xwf_Kz0Ge7BqH9XmgDiA.roa (hash: FvCEfaxgWr3NTmhty3i7+MvXKehuHhI0xzvJoL1ljPo=)
2: BGLgBWSpNA_0c505USFsRqjvxk8.crl (hash: iYTxukTLTNH83KQseEf1MKkJcBjqhmBNo8rFVAU7iZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:87:0b:5a:cd:3b:3e:5b:aa:5e:1b:5e:b9:1c:12:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0462e00564a9340ff4739d3951216c46a8efc64f
Validity
Not Before: Aug 4 10:01:03 2025 GMT
Not After : Aug 5 10:01:03 2025 GMT
Subject: CN=f4703b64f81f81730e0e6e6502d8f6ad02809ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d2:c0:ed:aa:21:f4:9f:6c:db:f7:64:20:2d:
60:21:2d:1f:09:c2:37:63:a0:64:60:ad:58:05:20:
c3:45:4d:96:aa:7b:c6:92:8d:02:e4:1f:c1:65:fa:
1d:4f:c3:f4:6d:a8:33:2b:be:ef:7c:56:d1:8c:1d:
4a:c4:69:3b:6f:45:80:e5:f5:00:74:7c:a2:42:74:
84:5b:6c:7d:71:2d:5c:29:7c:35:60:9f:da:9a:c4:
3d:41:5e:ad:d9:9a:97:7c:c5:ed:4d:f9:5d:33:1f:
95:da:44:d6:83:76:18:65:e9:45:7e:e1:e6:7a:34:
70:ab:6e:1a:98:1d:c6:18:5b:ea:4f:81:04:24:84:
83:ef:83:86:cf:db:30:18:73:64:b0:0f:56:d4:69:
9e:cc:24:e1:55:47:fc:cc:63:e9:46:06:86:83:f5:
b2:3d:33:ab:88:50:09:9e:13:16:9e:15:f6:dc:26:
0f:4e:72:d7:58:fa:c1:64:19:fc:db:34:91:70:80:
f0:94:b0:06:bb:a9:a7:9b:44:a7:92:8a:49:64:83:
b5:42:cb:d7:16:d1:88:1a:b6:d9:93:5b:8c:16:58:
fa:3c:bd:65:b5:08:e1:26:a5:46:61:5c:a7:f8:12:
f1:55:e0:18:ab:75:36:11:43:d2:d3:d9:d4:6c:0e:
37:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:70:3B:64:F8:1F:81:73:0E:0E:6E:65:02:D8:F6:AD:02:80:9F:F7
X509v3 Authority Key Identifier:
keyid:04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ad:89:c0:e7:12:01:01:0a:45:9a:5e:03:ff:ee:8a:58:d2:
30:1b:7f:00:11:6b:ae:1d:ee:79:79:b1:9d:df:1b:9d:a7:c8:
76:85:f2:e4:ea:d2:de:4c:80:60:bb:cd:ac:d9:d7:7d:86:be:
0d:b5:37:0c:11:c1:2e:2d:03:66:5c:59:19:83:10:50:05:6e:
78:05:f6:d1:32:87:bf:08:0c:4c:ca:ab:10:3b:32:26:ad:57:
84:ca:7e:15:4b:d4:8d:91:f2:d5:cc:af:1a:e5:5b:54:43:db:
dc:99:9d:49:ff:e7:fc:db:ce:25:bb:d1:1a:cf:1b:94:1c:5a:
97:55:7a:ac:cd:2c:c7:cf:a3:ab:7d:a5:23:aa:8d:71:e2:82:
02:57:64:a6:15:40:f6:71:8e:fa:ac:2a:a8:14:84:1f:a8:c3:
e5:e2:d4:05:77:1c:3a:f5:b5:f2:ae:7a:75:63:f2:5e:02:6b:
e4:fa:f3:05:38:ac:09:4f:ab:ba:a1:8f:b8:c4:3c:48:85:18:
5c:23:7b:bb:59:b2:53:64:3c:5b:6c:dc:d2:87:0e:99:7e:aa:
54:37:3d:7c:0d:04:25:d4:cb:e3:76:b6:df:02:4c:72:2f:98:
73:df:5a:f1:fb:5b:41:ed:46:3d:32:a7:46:04:63:d6:1d:4d:
42:10:75:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:59:32 2025 by rpki-client