Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
File: BcgcgJdDfNF58xkYPAKC6mzRylE.mft (raw, json)
Hash identifier: G9KoL7NTZM+x2qQAkLxyOpSo0iDJ2rpfYheaIrV5e1U=
Subject key identifier: A5:06:0C:E6:13:9E:6C:B8:4C:92:3D:15:E1:12:9C:DD:F2:EA:CF:23
Authority key identifier: 05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51
Certificate issuer: /CN=05c81c8097437cd179f319183c0282ea6cd1ca51
Certificate serial: 0198A1288675DDE1B759DC8CF9443BDD79B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
Manifest number: 05EC
Signing time: Wed 13 Aug 2025 02:00:44 +0000
Manifest this update: Wed 13 Aug 2025 02:00:44 +0000
Manifest next update: Thu 14 Aug 2025 02:00:44 +0000
Files and hashes: 1: 0eEbXaLT72xMShRX80ks6Q4d5oI.roa (hash: qA3gKPtC1PDR4pbDhy0QBVS9nz5AKV5Uc6LznPWBGvQ=)
2: BcgcgJdDfNF58xkYPAKC6mzRylE.crl (hash: bf4utp513+Wa31+7fFAQFZ0zEP1ETluFa6KTIud4XQ8=)
3: z0nJV6Vj9yWOU_8BIeua9e3I6JE.roa (hash: YIrDiztONnsPy57n2ZnC2YoDiFkPGBFAHQe2Pe5+Gi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:28:86:75:dd:e1:b7:59:dc:8c:f9:44:3b:dd:79:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05c81c8097437cd179f319183c0282ea6cd1ca51
Validity
Not Before: Aug 13 02:00:44 2025 GMT
Not After : Aug 14 02:00:44 2025 GMT
Subject: CN=a5060ce6139e6cb84c923d15e1129cddf2eacf23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c2:07:ab:bc:94:32:9f:8a:70:8d:64:b4:5c:
7a:6b:ab:ee:5a:0f:d6:11:cb:f6:d6:93:f1:60:e3:
f8:81:e8:53:73:44:de:e7:c4:0a:a1:31:07:fe:25:
90:5e:8e:5e:23:75:4c:53:52:1c:10:6a:a3:70:ac:
e5:1d:62:60:6a:d9:27:ca:36:ab:3e:60:ea:9e:a3:
a0:d8:e8:ed:53:b5:e4:9b:92:e8:0c:cc:5d:66:92:
56:91:a7:41:25:ab:02:98:4d:d1:1a:fa:0f:4c:f8:
ad:6e:d8:36:67:fc:64:32:ec:7c:09:30:28:b7:2b:
d9:07:09:3c:47:63:81:ec:13:d0:78:bb:41:f8:55:
f0:ab:43:bf:83:9d:fd:d7:f5:11:97:56:19:8e:d3:
30:ed:36:24:5b:b4:20:75:ff:a7:d8:4b:6f:15:61:
61:02:8f:db:76:6e:e6:36:5a:0e:9d:c6:a9:2c:69:
5e:4f:66:5a:47:65:5d:7c:1f:07:71:58:d1:ce:b9:
06:1d:16:9c:aa:68:4f:d8:3e:e6:09:40:53:b3:8e:
6a:d4:40:12:43:47:8d:ef:f9:4c:66:b1:ae:ad:27:
73:9b:e4:18:f0:61:b6:97:7e:f4:3e:ee:75:e3:50:
00:75:f9:85:4b:d8:4d:44:6e:9f:45:62:1b:3d:d7:
58:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:06:0C:E6:13:9E:6C:B8:4C:92:3D:15:E1:12:9C:DD:F2:EA:CF:23
X509v3 Authority Key Identifier:
keyid:05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f2:ac:5a:14:2a:e6:3b:c8:e9:02:20:ee:f7:9d:19:17:6f:
7d:b1:9b:72:ae:a0:42:c0:a3:b5:bb:d8:7f:9f:2a:77:85:9f:
0b:6d:13:e9:16:7c:40:4c:9f:2e:37:16:e3:00:c8:80:9a:25:
05:79:d9:d6:2f:82:92:f6:7b:59:1c:3b:84:1b:c2:97:e7:45:
2d:50:5f:2c:19:a6:d1:4c:77:81:66:a9:b3:68:9c:ab:09:ed:
5e:0d:4b:21:f0:b4:57:ed:45:9a:f5:fa:b3:8e:58:32:e8:4b:
a3:74:88:ad:e6:53:5e:63:e4:41:da:cf:7a:f3:44:c7:d8:97:
fa:0f:02:19:ed:34:d1:9a:c3:8b:2f:e5:e5:c0:b4:e6:13:99:
4a:a1:8f:19:5a:52:c7:43:fb:e1:85:25:a1:5b:43:47:8f:98:
8e:94:35:0a:cc:fa:78:6f:b9:35:4b:85:8e:1a:36:28:c7:f5:
ce:23:f0:34:b3:51:04:3c:a9:a2:05:4a:a5:6f:7e:a8:8e:75:
71:77:62:34:88:f5:7a:b7:b4:1b:20:ca:f1:f9:ca:14:69:e9:
6c:f0:39:5f:1d:a9:38:1b:1f:c6:67:b1:a3:5a:27:99:af:c1:
83:2d:eb:a6:51:f2:f3:b0:a5:ad:ab:e2:74:f7:60:ef:71:24:
16:ab:c2:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZihKIZ13eG3WdyM+UQ73XmyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YzgxYzgwOTc0MzdjZDE3OWYzMTkxODNjMDI4MmVhNmNk
MWNhNTEwHhcNMjUwODEzMDIwMDQ0WhcNMjUwODE0MDIwMDQ0WjAzMTEwLwYDVQQD
EyhhNTA2MGNlNjEzOWU2Y2I4NGM5MjNkMTVlMTEyOWNkZGYyZWFjZjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocIHq7yUMp+KcI1ktFx6a6vuWg/W
Ecv21pPxYOP4gehTc0Te58QKoTEH/iWQXo5eI3VMU1IcEGqjcKzlHWJgatknyjar
PmDqnqOg2OjtU7Xkm5LoDMxdZpJWkadBJasCmE3RGvoPTPitbtg2Z/xkMux8CTAo
tyvZBwk8R2OB7BPQeLtB+FXwq0O/g5391/URl1YZjtMw7TYkW7Qgdf+n2EtvFWFh
Ao/bdm7mNloOncapLGleT2ZaR2VdfB8HcVjRzrkGHRacqmhP2D7mCUBTs45q1EAS
Q0eN7/lMZrGurSdzm+QY8GG2l370Pu5141AAdfmFS9hNRG6fRWIbPddYsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUGDOYTnmy4TJI9FeESnN3y6s8jMB8GA1UdIwQY
MBaAFAXIHICXQ3zRefMZGDwCgups0cpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmNnY2dKZERmTkY1OHhrWVBBS0M2bXpSeWxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9kOTMxNTMtNDYwOS00NjcyLTg1YjQt
OTc0ZmQyMzliMGVkLzEvQmNnY2dKZERmTkY1OHhrWVBBS0M2bXpSeWxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9kOTMxNTMtNDYwOS00NjcyLTg1YjQtOTc0ZmQyMzliMGVk
LzEvQmNnY2dKZERmTkY1OHhrWVBBS0M2bXpSeWxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUfKsWhQq
5jvI6QIg7vedGRdvfbGbcq6gQsCjtbvYf58qd4WfC20T6RZ8QEyfLjcW4wDIgJol
BXnZ1i+CkvZ7WRw7hBvCl+dFLVBfLBmm0Ux3gWaps2icqwntXg1LIfC0V+1FmvX6
s45YMuhLo3SIreZTXmPkQdrPevNEx9iX+g8CGe000ZrDiy/l5cC05hOZSqGPGVpS
x0P74YUloVtDR4+YjpQ1Csz6eG+5NUuFjho2KMf1ziPwNLNRBDypogVKpW9+qI51
cXdiNIj1ere0GyDK8fnKFGnpbPA5Xx2pOBsfxmexo1onma/Bgy3rplHy87Clravi
dPdg73EkFqvCKA==
-----END CERTIFICATE-----
Generated at Wed Aug 13 04:24:13 2025 by rpki-client