Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
File: BGWHkB8TB5vtiYL2KendFUaM_vE.mft (raw, json)
Hash identifier: 1phJetwrrDIT+1EWDY1yMcP96oDd72ERMDKiRayMX5M=
Subject key identifier: 8A:AD:58:0D:1D:D4:AB:92:92:18:38:60:42:F3:B7:C7:34:71:08:10
Authority key identifier: 04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1
Certificate issuer: /CN=046587901f13079bed8982f629e9dd15468cfef1
Certificate serial: 019A73019600224A645C7091E08D1EEB6482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
Manifest number: 1115
Signing time: Tue 11 Nov 2025 13:01:15 +0000
Manifest this update: Tue 11 Nov 2025 13:01:15 +0000
Manifest next update: Wed 12 Nov 2025 13:01:15 +0000
Files and hashes: 1: BGWHkB8TB5vtiYL2KendFUaM_vE.crl (hash: 9IzdQDYhJyGGJnwJ5iRu7uMm2ueSH73kJovSeyC84DA=)
2: elV1APoKiSk_9XkOBJQhYkqxHiw.roa (hash: 8zT6bhkdxlFlI+FWNJggqU5g/ZNnR60ACpbk2nou4yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:96:00:22:4a:64:5c:70:91:e0:8d:1e:eb:64:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046587901f13079bed8982f629e9dd15468cfef1
Validity
Not Before: Nov 11 13:01:15 2025 GMT
Not After : Nov 12 13:01:15 2025 GMT
Subject: CN=8aad580d1dd4ab929218386042f3b7c734710810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1a:d5:08:a8:ba:07:de:bf:c9:20:67:67:51:
e2:82:25:4b:87:fe:30:0f:e2:c4:7e:7b:2d:60:f2:
39:42:61:20:9e:fa:26:d0:68:bc:f3:c9:10:be:9c:
27:ef:ad:3a:1e:f8:87:0b:ef:fa:95:3b:38:be:cb:
4c:ba:df:e9:88:7c:85:7e:b0:1a:6b:aa:81:b4:b9:
25:a8:a3:d6:eb:61:3a:ea:01:fd:eb:bb:b3:34:7a:
f9:f8:7a:e5:71:68:27:1d:00:dd:5a:ed:a2:32:5c:
68:df:ab:96:33:b7:90:ed:95:07:be:b5:f1:d1:62:
7f:62:49:b1:25:59:f2:9f:58:ff:35:0b:f4:b4:7d:
fe:c7:9e:cb:0e:e4:40:c1:76:05:16:8f:a3:b6:cd:
cd:a8:ed:aa:86:d7:cb:b3:67:6a:80:fe:e8:4b:d0:
96:27:0c:fe:ab:9d:3c:bb:e1:62:ec:80:73:a3:d2:
91:92:2e:7b:7e:88:78:80:c1:43:df:65:90:7c:86:
9d:a7:e2:1b:14:76:76:2f:3a:2e:32:38:b9:f4:41:
de:a1:a2:99:15:53:56:6c:7d:91:3f:bc:c0:e0:1d:
47:d7:5e:19:0e:cd:da:a6:4c:64:00:e3:29:27:a3:
ad:a5:fa:86:5a:88:dd:ff:ec:c1:fc:ec:e5:5b:97:
ab:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AD:58:0D:1D:D4:AB:92:92:18:38:60:42:F3:B7:C7:34:71:08:10
X509v3 Authority Key Identifier:
keyid:04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:39:75:7b:09:d7:d7:31:b0:c1:63:bf:b0:47:7e:12:09:ea:
8e:c2:bc:90:f6:21:37:f1:46:18:c9:91:6f:2a:46:0f:79:5b:
ba:f2:c0:11:75:f4:64:ec:7a:73:f7:3e:31:0a:dd:21:43:b2:
ef:4a:36:82:e3:9b:73:c6:b0:26:76:8d:03:de:84:62:9d:0a:
5b:aa:5d:2d:cb:4a:7c:70:a8:c2:d8:74:fb:93:67:28:b3:b6:
7f:ef:a6:95:43:bc:dc:17:11:4f:ce:b7:b2:f1:40:2b:3a:59:
3f:5e:de:9c:49:0f:28:3e:af:e6:72:67:94:b7:da:97:ae:90:
c7:b9:45:5c:42:13:59:17:4c:90:2a:c5:72:f6:ce:cb:87:2a:
d0:26:c2:24:2f:18:72:45:46:2d:8f:a9:7d:3f:a0:65:db:c0:
ec:6d:c3:69:ad:c2:55:3f:c3:41:25:a1:9d:68:2f:4c:8f:d4:
39:d2:ce:b9:42:22:62:26:37:20:a2:ab:02:65:63:59:f1:94:
2d:9e:e3:ca:67:cb:48:53:a0:49:a5:c1:f5:68:d5:86:c1:9d:
b3:1d:9a:14:6d:fb:eb:dc:45:86:2f:b7:01:6e:bb:32:db:94:
f1:af:9d:4e:6b:d7:3d:1c:f1:95:a4:22:4c:82:c3:99:0e:1f:
f7:45:94:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:02 2025 by rpki-client