Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
File: Bgit6Gocz3pIO0wpYgRduNDvgm0.mft (raw, json)
Hash identifier: UgxF4ko/1p3e6rcWJ5KmMafQ2AhUk+7LQyEU0TKycU4=
Subject key identifier: 47:C7:4A:6B:3A:6B:F6:73:00:62:27:52:CC:F8:2E:F5:CA:50:78:04
Authority key identifier: 06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
Certificate issuer: /CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Certificate serial: 019A4EF4CBE94E6811084BD46B9E199793F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:00:57 +0000
Manifest this update: Tue 04 Nov 2025 13:00:57 +0000
Manifest next update: Wed 05 Nov 2025 13:00:57 +0000
Files and hashes: 1: Bgit6Gocz3pIO0wpYgRduNDvgm0.crl (hash: sAxXnz7t21dx9j6Gc2uoyBrOZVpKjRy4/KV9Yn7AIe8=)
2: GqvJxk6cmO7Tb_I2mDvjscrokEE.roa (hash: yepd+YPVUD07Z1nRvo/cI6UMDSXFFH47vweszFDmLW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:cb:e9:4e:68:11:08:4b:d4:6b:9e:19:97:93:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Validity
Not Before: Nov 4 13:00:57 2025 GMT
Not After : Nov 5 13:00:57 2025 GMT
Subject: CN=47c74a6b3a6bf67300622752ccf82ef5ca507804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:9a:34:70:44:6f:dc:aa:fe:6d:37:d5:1a:
95:71:aa:b1:b9:14:82:68:2a:37:5b:b9:49:20:6b:
b2:1e:ab:ec:49:81:3a:8a:03:9c:59:93:a8:4f:fe:
8e:1b:00:71:6d:df:e6:98:df:ca:80:6f:c0:bc:a9:
58:82:e1:ad:c1:14:d3:93:fb:3c:cf:54:76:d1:96:
76:0a:67:f3:5c:e3:90:96:6a:9b:72:fc:8f:b7:1f:
ad:67:1f:a0:33:3f:1c:56:be:a2:9f:b6:24:5a:b7:
17:db:b4:66:4e:d5:ad:51:75:d8:b0:b1:d1:d2:f0:
77:6c:f4:5b:61:78:6c:3c:bd:d0:41:a1:1f:d1:00:
69:61:1d:54:9c:a8:ca:7e:45:3a:e5:96:e7:dc:cb:
a9:f0:02:4e:15:87:e6:e4:f6:9d:93:7f:e4:52:f7:
9c:45:33:e5:bb:45:a3:b8:3d:cc:e3:2a:d0:93:9d:
f5:d7:4b:aa:fb:99:a5:8e:9e:14:c1:70:23:78:73:
1e:cc:95:7e:85:66:b7:bf:78:47:3d:20:22:42:76:
1a:91:2f:cc:49:42:1c:62:a8:ca:e4:56:e1:e6:b5:
f1:fb:0c:d9:35:88:40:0c:e0:6c:b2:c5:a2:75:f4:
6c:cf:2d:4f:11:9b:72:6d:c5:4c:b9:92:0a:5a:c8:
89:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C7:4A:6B:3A:6B:F6:73:00:62:27:52:CC:F8:2E:F5:CA:50:78:04
X509v3 Authority Key Identifier:
keyid:06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:0e:73:70:6b:71:c6:b4:99:6a:41:be:0f:ba:f0:cb:49:1b:
95:44:e8:7b:f9:5e:3d:dc:8e:63:88:96:55:e2:ac:97:e8:53:
59:33:d4:28:ac:57:94:25:51:3f:51:59:62:26:ed:68:7b:e1:
56:4c:dd:fc:9d:fd:7e:7b:b4:4a:c3:09:ec:d1:a6:68:ca:78:
c0:e6:6f:81:75:c4:db:1a:d6:4b:44:a4:0d:2b:6f:6a:5c:ee:
34:16:68:fd:3c:bf:78:42:02:3e:7c:c4:79:fc:de:1d:60:06:
0a:9e:3b:0f:7d:31:21:a1:f3:e9:83:9e:dd:44:ca:a5:18:74:
e7:40:14:2b:76:bf:ee:a5:4a:93:ce:e0:db:ab:df:bb:e5:d9:
28:9c:ff:7a:48:ca:40:db:59:46:31:18:61:32:78:38:68:55:
59:64:fc:08:23:ed:c2:50:e9:8f:a3:52:11:c2:cb:b9:39:ad:
41:86:bb:f4:ee:57:db:cc:55:96:8b:0b:50:f8:9b:0e:05:bc:
f8:3d:c0:ab:47:ad:21:c5:4e:4a:32:f6:65:13:b5:9c:74:a9:
63:c6:4e:6f:f4:64:d8:f4:43:77:fb:2c:2b:95:6e:ec:3c:d9:
c5:77:1d:b4:bc:3f:3b:f3:47:88:5e:3d:a1:7e:25:58:51:27:
78:e4:20:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:33 2025 by rpki-client