Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
File: BgOecctxUgSoPMJTgi3CmmLHmeY.mft (raw, json)
Hash identifier: rWPzYGnoDphjYfY5Y4FJJe/DL/Slzf85uEDHn2xePmM=
Subject key identifier: 9F:8D:ED:F4:D7:86:28:44:8E:09:15:B1:5F:14:0C:CF:34:88:28:FC
Authority key identifier: 06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6
Certificate issuer: /CN=06039e71cb715204a83cc253822dc29a62c799e6
Certificate serial: 019A4EF4855D4FEBB2F37033EBE7A8DE3A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
Manifest number: 081E
Signing time: Tue 04 Nov 2025 13:00:38 +0000
Manifest this update: Tue 04 Nov 2025 13:00:38 +0000
Manifest next update: Wed 05 Nov 2025 13:00:38 +0000
Files and hashes: 1: AzSimOOUCBaH0nGWbesdL3p-c-Y.roa (hash: tmnAHG5c86gcxksbrSaGyYNVU434mmJFa3fZgdZ+AZw=)
2: BgOecctxUgSoPMJTgi3CmmLHmeY.crl (hash: Xuz0S6ihGiLNkxsLkDYxm1Rzjn0eEibo/kpNsFHvC5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:85:5d:4f:eb:b2:f3:70:33:eb:e7:a8:de:3a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06039e71cb715204a83cc253822dc29a62c799e6
Validity
Not Before: Nov 4 13:00:38 2025 GMT
Not After : Nov 5 13:00:38 2025 GMT
Subject: CN=9f8dedf4d78628448e0915b15f140ccf348828fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1e:e9:9f:b1:a4:17:16:1f:82:07:25:31:8e:
7e:10:e8:24:27:fa:da:f4:6c:8a:41:ee:24:93:c4:
75:08:89:68:62:fc:2c:14:be:8a:c5:e4:eb:f0:a9:
14:47:4d:ef:44:0c:37:9d:d6:5a:97:26:21:23:00:
1f:90:cb:df:5a:5f:fd:11:47:e5:95:83:a8:65:ca:
df:e5:f2:e1:4f:04:72:55:db:7d:1d:24:ca:47:51:
15:98:30:8c:81:66:29:ae:58:f1:03:07:0b:e3:34:
17:65:9d:d7:71:2d:61:a9:4a:d5:88:92:2c:47:c8:
eb:f0:52:5d:7e:d5:c4:92:b7:e2:6d:0a:80:bc:a0:
b1:41:38:4d:45:13:02:08:0c:d7:5b:5e:85:24:d0:
a3:55:11:15:e9:38:f6:4c:e9:1b:90:da:fb:2f:a7:
42:18:c3:8b:8d:22:ae:f2:24:f7:c2:a2:fb:e0:6a:
02:64:02:33:45:75:8d:6c:37:99:76:f2:4c:b9:04:
5d:3e:e1:f8:f9:bc:97:bb:ce:7c:1b:aa:e3:5b:2b:
eb:00:32:e9:95:39:9b:f2:1f:43:17:89:fa:17:da:
df:25:d6:51:40:e4:4f:a0:7b:24:16:52:9c:05:2e:
76:de:00:76:fa:6d:0b:3c:a5:89:b3:fa:bf:73:da:
9d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8D:ED:F4:D7:86:28:44:8E:09:15:B1:5F:14:0C:CF:34:88:28:FC
X509v3 Authority Key Identifier:
keyid:06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:42:b6:f7:8b:ca:66:4a:af:94:ec:c4:d6:1b:75:32:cf:b4:
2c:ef:48:92:df:f5:7c:3e:90:f2:fb:8e:c1:33:f3:fa:b9:ec:
d7:3b:e7:6f:1d:1d:3b:2d:3a:06:a0:9f:2f:40:3a:53:ab:29:
c7:a6:2f:23:fc:7a:f2:a1:0a:f2:b0:22:b0:60:41:63:77:d5:
d7:f6:54:bc:25:38:bc:ab:71:de:00:ca:30:75:75:3e:1b:ba:
7f:81:e4:c8:e7:8c:63:be:61:11:df:8b:0c:c3:77:17:91:59:
8c:57:4f:3d:14:bf:02:6b:48:9c:7e:1d:ed:32:0a:61:b5:19:
eb:be:e0:b4:a4:ad:5e:fa:82:7c:24:c1:e1:b9:e4:a0:ef:a3:
72:37:e7:cb:41:e0:b8:d7:ee:2a:2b:77:5b:3e:48:ca:4c:5c:
18:18:8b:83:61:39:c0:6c:8c:fd:1a:5c:31:b9:26:7c:ef:f4:
15:4f:ab:bb:b4:d1:60:a1:57:da:96:13:f2:da:23:f0:41:97:
37:71:6c:33:a9:97:d1:bc:76:51:96:6f:eb:10:5e:76:e5:fd:
52:69:f8:31:51:ef:62:78:3a:d0:bf:d8:57:e6:97:2b:0b:8b:
7a:5e:5d:24:f7:52:7c:40:c0:97:30:20:29:84:65:53:d4:0c:
ad:53:97:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9IVdT+uy83Az6+eo3jolMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MDM5ZTcxY2I3MTUyMDRhODNjYzI1MzgyMmRjMjlhNjJj
Nzk5ZTYwHhcNMjUxMTA0MTMwMDM4WhcNMjUxMTA1MTMwMDM4WjAzMTEwLwYDVQQD
Eyg5ZjhkZWRmNGQ3ODYyODQ0OGUwOTE1YjE1ZjE0MGNjZjM0ODgyOGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7h7pn7GkFxYfggclMY5+EOgkJ/ra
9GyKQe4kk8R1CIloYvwsFL6KxeTr8KkUR03vRAw3ndZalyYhIwAfkMvfWl/9EUfl
lYOoZcrf5fLhTwRyVdt9HSTKR1EVmDCMgWYprljxAwcL4zQXZZ3XcS1hqUrViJIs
R8jr8FJdftXEkrfibQqAvKCxQThNRRMCCAzXW16FJNCjVREV6Tj2TOkbkNr7L6dC
GMOLjSKu8iT3wqL74GoCZAIzRXWNbDeZdvJMuQRdPuH4+byXu858G6rjWyvrADLp
lTmb8h9DF4n6F9rfJdZRQORPoHskFlKcBS523gB2+m0LPKWJs/q/c9qdPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+N7fTXhihEjgkVsV8UDM80iCj8MB8GA1UdIwQY
MBaAFAYDnnHLcVIEqDzCU4Itwppix5nmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmdPZWNjdHhVZ1NvUE1KVGdpM0NtbUxIbWVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9lNjI4NzktMmM2OS00MGMzLWIxMTYt
MGU0Njg3NWQ0NWZkLzEvQmdPZWNjdHhVZ1NvUE1KVGdpM0NtbUxIbWVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9lNjI4NzktMmM2OS00MGMzLWIxMTYtMGU0Njg3NWQ0NWZk
LzEvQmdPZWNjdHhVZ1NvUE1KVGdpM0NtbUxIbWVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASkK294vK
ZkqvlOzE1ht1Ms+0LO9Ikt/1fD6Q8vuOwTPz+rns1zvnbx0dOy06BqCfL0A6U6sp
x6YvI/x68qEK8rAisGBBY3fV1/ZUvCU4vKtx3gDKMHV1Phu6f4HkyOeMY75hEd+L
DMN3F5FZjFdPPRS/AmtInH4d7TIKYbUZ677gtKStXvqCfCTB4bnkoO+jcjfny0Hg
uNfuKit3Wz5IykxcGBiLg2E5wGyM/RpcMbkmfO/0FU+ru7TRYKFX2pYT8toj8EGX
N3FsM6mX0bx2UZZv6xBeduX9Umn4MVHvYng60L/YV+aXKwuLel5dJPdSfEDAlzAg
KYRlU9QMrVOXAA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:44 2025 by rpki-client