Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
File: Bgit6Gocz3pIO0wpYgRduNDvgm0.mft (raw, json)
Hash identifier: z9Xrd6Ci03C9pVkdSVN3j/5SMfWYloMT/x/WgNsVO6U=
Subject key identifier: 7F:32:1D:B4:63:C5:47:59:2F:4E:A4:2C:CD:2C:60:46:3A:AF:D9:49
Authority key identifier: 06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
Certificate issuer: /CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Certificate serial: 019873E3F979B65AACBA50FA5659AA4610FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 07:02:57 +0000
Manifest this update: Mon 04 Aug 2025 07:02:57 +0000
Manifest next update: Tue 05 Aug 2025 07:02:57 +0000
Files and hashes: 1: Bgit6Gocz3pIO0wpYgRduNDvgm0.crl (hash: 4f5sN/uqP8BEG+dcoU6KMEzuzeuqqS4TW+Ch4Wt2Sys=)
2: GqvJxk6cmO7Tb_I2mDvjscrokEE.roa (hash: yepd+YPVUD07Z1nRvo/cI6UMDSXFFH47vweszFDmLW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:f9:79:b6:5a:ac:ba:50:fa:56:59:aa:46:10:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Validity
Not Before: Aug 4 07:02:57 2025 GMT
Not After : Aug 5 07:02:57 2025 GMT
Subject: CN=7f321db463c547592f4ea42ccd2c60463aafd949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bd:d7:7c:12:fb:55:ca:5f:12:32:f7:e5:5f:
c1:68:a6:9f:ae:e7:36:d3:fd:ff:bc:85:f6:92:e2:
a4:65:c5:4b:34:c1:4c:13:d1:b5:ba:e8:93:bd:ad:
32:0b:ab:73:bd:d3:3c:1e:87:87:2d:cf:8e:1c:9c:
18:cc:54:7a:5e:ab:dc:fc:ba:ca:b8:5c:17:00:95:
e7:7d:50:fb:9c:59:cc:48:da:d5:9f:99:8e:af:da:
cd:7f:d3:11:0c:1f:1c:32:88:8a:16:b7:e7:fe:63:
c1:3a:1b:d4:b9:72:32:25:ec:b4:1d:4b:cc:42:3c:
d7:16:5c:ed:aa:35:3a:3e:98:71:a7:c1:7e:1b:48:
0d:61:7c:c7:ce:87:1c:2c:21:98:80:75:10:2c:9b:
67:e2:32:38:85:d2:45:cc:54:8f:f4:bd:b8:2b:69:
39:8d:dc:93:b1:3d:66:29:52:54:d9:36:86:10:0b:
98:c0:80:fe:92:2a:37:da:79:23:16:33:f2:92:00:
26:15:c0:7f:29:21:e9:58:52:72:cb:1a:b9:4e:7b:
e9:85:5c:4e:f4:75:50:90:01:3b:dd:10:52:37:7e:
f3:1b:d1:35:25:77:f2:3c:43:9d:89:d7:a7:9d:78:
49:ed:45:2b:62:09:1a:60:bc:26:38:6b:88:49:0c:
9a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:32:1D:B4:63:C5:47:59:2F:4E:A4:2C:CD:2C:60:46:3A:AF:D9:49
X509v3 Authority Key Identifier:
keyid:06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:70:17:21:78:b4:06:c6:54:7e:c6:66:71:c4:1a:f8:a2:e9:
c8:f6:2f:d4:d8:b3:d7:30:a6:79:07:e4:c0:1d:a7:9b:69:8b:
ca:07:0c:90:0f:42:ad:9c:db:74:c2:b6:1b:cd:a2:ae:9f:ac:
4b:5e:56:f5:d1:85:3a:5b:be:43:ca:6c:dd:89:cb:ef:7c:d1:
28:0c:35:6c:63:41:12:c2:f7:8a:b8:c8:01:54:ac:31:53:da:
d5:42:a0:0b:d6:8e:38:f2:51:35:13:2d:65:d9:e4:5b:4f:80:
47:bf:2c:57:b6:2e:91:6f:92:af:2a:61:1b:32:7e:27:58:df:
73:8a:31:78:de:15:b5:b9:2e:20:e7:f1:d4:8e:eb:86:f3:38:
cf:b5:e3:c5:13:a5:4e:5b:03:41:2e:c9:d9:78:f9:66:64:08:
c0:ca:f2:61:2c:05:fa:18:14:e6:7e:18:06:07:43:73:08:6a:
a0:cc:dc:cf:bc:7c:1d:e0:8f:ce:05:49:c1:08:5c:fd:e8:3d:
a4:7d:33:87:71:04:c8:e9:4c:79:07:da:58:2f:85:63:b2:bb:
30:48:8f:1f:61:dc:31:4d:1b:7e:57:36:2e:8d:d2:5a:68:02:
81:b1:51:46:2b:aa:58:05:5e:60:b6:17:f3:a9:5e:91:9f:09:
95:f8:44:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4/l5tlqsulD6VlmqRhD9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MDhhZGU4NmExY2NmN2E0ODNiNGMyOTYyMDQ1ZGI4ZDBl
ZjgyNmQwHhcNMjUwODA0MDcwMjU3WhcNMjUwODA1MDcwMjU3WjAzMTEwLwYDVQQD
Eyg3ZjMyMWRiNDYzYzU0NzU5MmY0ZWE0MmNjZDJjNjA0NjNhYWZkOTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq73XfBL7VcpfEjL35V/BaKafruc2
0/3/vIX2kuKkZcVLNMFME9G1uuiTva0yC6tzvdM8HoeHLc+OHJwYzFR6Xqvc/LrK
uFwXAJXnfVD7nFnMSNrVn5mOr9rNf9MRDB8cMoiKFrfn/mPBOhvUuXIyJey0HUvM
QjzXFlztqjU6Pphxp8F+G0gNYXzHzoccLCGYgHUQLJtn4jI4hdJFzFSP9L24K2k5
jdyTsT1mKVJU2TaGEAuYwID+kio32nkjFjPykgAmFcB/KSHpWFJyyxq5TnvphVxO
9HVQkAE73RBSN37zG9E1JXfyPEOdidennXhJ7UUrYgkaYLwmOGuISQyaTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH8yHbRjxUdZL06kLM0sYEY6r9lJMB8GA1UdIwQY
MBaAFAYIrehqHM96SDtMKWIEXbjQ74JtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmdpdDZHb2N6M3BJTzB3cFlnUmR1TkR2Z20wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTk4ZmItZTY3MC00Y2Y0LTgxYTQt
NDIxOTAyMjM1MGZhLzEvQmdpdDZHb2N6M3BJTzB3cFlnUmR1TkR2Z20wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8yYTk4ZmItZTY3MC00Y2Y0LTgxYTQtNDIxOTAyMjM1MGZh
LzEvQmdpdDZHb2N6M3BJTzB3cFlnUmR1TkR2Z20wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUHAXIXi0
BsZUfsZmccQa+KLpyPYv1Niz1zCmeQfkwB2nm2mLygcMkA9CrZzbdMK2G82irp+s
S15W9dGFOlu+Q8ps3YnL73zRKAw1bGNBEsL3irjIAVSsMVPa1UKgC9aOOPJRNRMt
ZdnkW0+AR78sV7YukW+SryphGzJ+J1jfc4oxeN4VtbkuIOfx1I7rhvM4z7XjxROl
TlsDQS7J2Xj5ZmQIwMryYSwF+hgU5n4YBgdDcwhqoMzcz7x8HeCPzgVJwQhc/eg9
pH0zh3EEyOlMeQfaWC+FY7K7MEiPH2HcMU0bflc2Lo3SWmgCgbFRRiuqWAVeYLYX
86lekZ8JlfhEVA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:57 2025 by rpki-client