Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
File: BGaUC2ukf4zBCntHjkBWPLuKt_A.mft (raw, json)
Hash identifier: UhAiXQVptzDoftnLaQTT1SbdEuqUSz8R1rvjLClExaE=
Subject key identifier: 52:16:DA:E6:67:04:56:49:18:7F:34:CC:3E:5B:EE:FA:73:B6:D7:75
Authority key identifier: 04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0
Certificate issuer: /CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
Certificate serial: 019A4DE1E84C708344460CED6183493C41B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
Manifest number: 0BC3
Signing time: Tue 04 Nov 2025 08:00:41 +0000
Manifest this update: Tue 04 Nov 2025 08:00:41 +0000
Manifest next update: Wed 05 Nov 2025 08:00:41 +0000
Files and hashes: 1: BGaUC2ukf4zBCntHjkBWPLuKt_A.crl (hash: ep/1kCPEosNrJu+DgYb7LPDWLVJq32gIwECefw7zR3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:e8:4c:70:83:44:46:0c:ed:61:83:49:3c:41:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
Validity
Not Before: Nov 4 08:00:41 2025 GMT
Not After : Nov 5 08:00:41 2025 GMT
Subject: CN=5216dae667045649187f34cc3e5beefa73b6d775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ca:22:00:51:b6:37:b2:4f:43:37:61:63:c5:
e8:f8:0d:cc:96:74:0f:87:1d:70:58:07:ac:97:5f:
6c:91:8c:ac:f8:01:15:86:6b:00:60:56:c3:ab:62:
f5:47:50:17:8d:c1:2b:76:2d:9b:f6:cd:2d:55:c6:
14:ee:c8:d8:4f:79:9f:08:37:4a:75:ce:d3:cb:cc:
0a:1f:ab:1c:d7:75:16:1a:63:34:c7:11:3c:9e:5f:
31:39:e0:56:aa:15:71:66:fd:2a:33:ab:ac:19:9f:
68:52:1c:a9:e7:6c:ac:78:44:45:ea:b0:eb:63:12:
76:74:f2:de:a8:f3:d8:e8:59:c7:51:4c:64:e5:26:
2a:9b:41:61:dc:e1:53:ad:59:70:30:e4:cc:1e:03:
57:81:72:1b:4d:36:0f:c0:21:f5:f5:be:ee:a8:56:
9e:37:c6:2b:a7:aa:9e:c3:7f:66:ba:82:e9:98:db:
63:87:3b:0c:81:3b:16:58:28:67:35:05:f5:69:d2:
b6:21:35:f6:51:e3:bf:11:df:de:bb:35:55:d5:78:
2c:12:16:d6:5e:f6:a8:a2:ba:5d:00:cf:3c:f3:f5:
04:18:41:75:ca:a7:0b:e2:63:9b:d9:57:84:42:e9:
b1:91:62:94:3f:d4:ab:c5:34:b8:f9:a0:a9:81:23:
66:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:16:DA:E6:67:04:56:49:18:7F:34:CC:3E:5B:EE:FA:73:B6:D7:75
X509v3 Authority Key Identifier:
keyid:04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:05:ce:c3:ac:88:2f:ef:55:02:bc:48:9d:b8:ff:b8:2e:37:
47:08:68:3e:b5:80:13:06:5e:0e:c8:82:55:79:aa:91:3c:3b:
77:c6:dd:b1:c5:1b:0d:8e:3c:d7:60:1c:7a:11:42:f8:44:d4:
35:61:4e:16:d5:2c:a4:2b:41:0e:66:97:6a:cb:68:00:c0:a0:
0a:34:72:ec:72:3a:d7:ae:87:87:b6:2c:b0:c0:ab:2a:cd:18:
5d:65:1e:b8:6f:ee:61:90:c5:f3:d8:fa:05:93:c9:4d:e0:02:
c5:f5:d6:f1:ce:c9:e7:82:63:d7:6f:e9:d7:88:12:0b:0a:97:
a6:c5:eb:b6:d6:6e:e6:41:8a:64:5c:df:33:71:c2:16:fb:14:
70:9b:8c:85:5a:68:a9:f0:c7:28:ec:a8:89:37:f2:81:26:08:
72:f4:e5:e7:ff:ce:7d:0c:61:15:cb:96:bc:3e:b5:cc:d1:d6:
4b:e8:20:8c:dd:0f:6b:74:f6:aa:01:70:f5:7c:75:3e:0c:e2:
a3:94:91:2e:f0:24:8d:2e:68:e0:f1:e4:04:1e:c3:5e:22:8e:
eb:4d:01:a3:ec:6d:98:b8:1a:87:d3:03:f0:3a:02:b0:35:89:
d0:60:68:6f:95:bf:5d:39:77:00:79:45:5c:c5:9f:ce:e3:b9:
03:93:5b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:45 2025 by rpki-client