Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
File: BGWHkB8TB5vtiYL2KendFUaM_vE.mft (raw, json)
Hash identifier: 8sddOf2hzVLGsVi2cD0/odt9XVt9B2SWzv3SE7nNlIs=
Subject key identifier: B5:1B:B5:3A:0C:B7:A8:B7:55:ED:03:D2:3A:CD:D9:4F:7A:BA:6B:79
Authority key identifier: 04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1
Certificate issuer: /CN=046587901f13079bed8982f629e9dd15468cfef1
Certificate serial: 019922FAD5D3DC7816A43722817757977D02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
Manifest number: 1067
Signing time: Sun 07 Sep 2025 07:01:27 +0000
Manifest this update: Sun 07 Sep 2025 07:01:27 +0000
Manifest next update: Mon 08 Sep 2025 07:01:27 +0000
Files and hashes: 1: BGWHkB8TB5vtiYL2KendFUaM_vE.crl (hash: NxRXi2iYOHUAPN2mCQ5SEk9XZ++9rfgzYWkgP7/pbHM=)
2: elV1APoKiSk_9XkOBJQhYkqxHiw.roa (hash: 8zT6bhkdxlFlI+FWNJggqU5g/ZNnR60ACpbk2nou4yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:d5:d3:dc:78:16:a4:37:22:81:77:57:97:7d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046587901f13079bed8982f629e9dd15468cfef1
Validity
Not Before: Sep 7 07:01:27 2025 GMT
Not After : Sep 8 07:01:27 2025 GMT
Subject: CN=b51bb53a0cb7a8b755ed03d23acdd94f7aba6b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3b:00:eb:85:7b:36:a1:10:c8:1f:4b:fd:28:
95:31:28:b9:9c:f9:a1:27:17:d4:d8:9a:71:c9:7d:
20:6c:55:88:da:83:81:f5:80:9f:76:6d:63:06:e1:
99:a1:40:e3:6d:d5:e0:97:5a:7c:6f:b3:7a:5d:1e:
cd:7f:d5:f8:73:62:37:31:14:de:81:9a:07:04:62:
da:c3:b3:45:c5:26:99:ff:13:3d:e3:94:7a:b2:df:
e6:6f:e6:4e:98:fa:bd:77:d8:b7:3a:b5:3f:1a:86:
16:ce:1d:73:5d:6f:8a:05:be:9e:cf:da:53:18:aa:
1e:76:6c:9f:a0:37:e9:b6:ac:51:1d:62:cc:39:65:
32:44:5f:a9:2b:1c:79:a7:0d:33:6e:0b:8b:cd:6c:
1a:a9:27:a4:24:43:1e:2c:40:24:db:c2:6c:d1:d2:
91:e6:2b:a7:e8:8a:7c:41:c2:fc:af:3b:f7:88:4b:
3d:9c:b7:af:3d:8d:f6:7f:61:83:b3:2b:c0:d8:11:
2b:a1:d9:6b:20:4a:cb:e5:3e:26:eb:1f:7f:b2:ed:
ae:ef:fc:cd:8a:a7:97:bd:4b:f9:bf:92:84:82:7b:
7d:32:6d:d0:98:04:b3:6e:8f:4e:41:da:be:b7:e2:
89:5d:f7:4f:c2:76:e2:77:d0:e3:b5:9c:74:a5:0d:
f5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1B:B5:3A:0C:B7:A8:B7:55:ED:03:D2:3A:CD:D9:4F:7A:BA:6B:79
X509v3 Authority Key Identifier:
keyid:04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:87:01:a0:85:16:0f:0b:37:72:36:50:3f:8e:ba:5e:5c:56:
2f:d5:40:d4:3b:e8:12:81:fc:9d:66:bd:08:10:54:05:1e:55:
89:69:cb:c0:51:c6:00:45:07:ee:91:8e:23:b1:e9:c7:14:63:
c6:12:c7:97:ec:85:45:fb:2a:95:65:3a:55:2d:f6:66:12:76:
78:5c:88:6a:83:a7:a4:d3:f3:ae:ef:b6:dc:49:89:3c:15:78:
2f:c3:c4:7b:6c:63:df:f0:7a:13:00:53:ff:fa:55:12:14:74:
3c:11:7a:10:c4:d1:1f:4a:bd:6e:7b:58:89:f8:89:8a:f1:09:
d3:5f:03:a4:ff:fd:4e:90:b9:16:e2:e5:04:5f:45:88:b2:b9:
8d:bd:61:da:11:79:d6:20:2e:ce:dd:cc:24:9f:b5:1c:5c:80:
dd:a1:0a:ae:eb:01:b1:bd:d5:8e:54:f4:c4:53:e5:14:ec:1e:
85:d6:b8:15:22:65:dc:bd:12:b4:64:ff:10:7b:c5:59:c3:56:
46:8c:44:76:f2:c4:86:cd:69:01:71:25:39:fe:52:32:fd:3e:
ec:f1:eb:a9:3a:51:a7:24:82:0f:5c:ba:84:54:e6:9d:c2:00:
45:f8:f5:39:7b:b6:2e:f9:ad:42:b6:7c:33:bc:d7:6f:79:49:
bf:53:3f:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+tXT3HgWpDcigXdXl30CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NjU4NzkwMWYxMzA3OWJlZDg5ODJmNjI5ZTlkZDE1NDY4
Y2ZlZjEwHhcNMjUwOTA3MDcwMTI3WhcNMjUwOTA4MDcwMTI3WjAzMTEwLwYDVQQD
EyhiNTFiYjUzYTBjYjdhOGI3NTVlZDAzZDIzYWNkZDk0ZjdhYmE2Yjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjsA64V7NqEQyB9L/SiVMSi5nPmh
JxfU2JpxyX0gbFWI2oOB9YCfdm1jBuGZoUDjbdXgl1p8b7N6XR7Nf9X4c2I3MRTe
gZoHBGLaw7NFxSaZ/xM945R6st/mb+ZOmPq9d9i3OrU/GoYWzh1zXW+KBb6ez9pT
GKoedmyfoDfptqxRHWLMOWUyRF+pKxx5pw0zbguLzWwaqSekJEMeLEAk28Js0dKR
5iun6Ip8QcL8rzv3iEs9nLevPY32f2GDsyvA2BErodlrIErL5T4m6x9/su2u7/zN
iqeXvUv5v5KEgnt9Mm3QmASzbo9OQdq+t+KJXfdPwnbid9DjtZx0pQ313QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUbtToMt6i3Ve0D0jrN2U96umt5MB8GA1UdIwQY
MBaAFARlh5AfEweb7YmC9inp3RVGjP7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkdXSGtCOFRCNXZ0aVlMMktlbmRGVWFNX3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82M2QzOTQtNDJiZC00MGIxLWEyYTEt
NzRkNTkwMWE4YzU2LzEvQkdXSGtCOFRCNXZ0aVlMMktlbmRGVWFNX3ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82M2QzOTQtNDJiZC00MGIxLWEyYTEtNzRkNTkwMWE4YzU2
LzEvQkdXSGtCOFRCNXZ0aVlMMktlbmRGVWFNX3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkYcBoIUW
Dws3cjZQP466XlxWL9VA1DvoEoH8nWa9CBBUBR5ViWnLwFHGAEUH7pGOI7HpxxRj
xhLHl+yFRfsqlWU6VS32ZhJ2eFyIaoOnpNPzru+23EmJPBV4L8PEe2xj3/B6EwBT
//pVEhR0PBF6EMTRH0q9bntYifiJivEJ018DpP/9TpC5FuLlBF9FiLK5jb1h2hF5
1iAuzt3MJJ+1HFyA3aEKrusBsb3VjlT0xFPlFOwehda4FSJl3L0StGT/EHvFWcNW
RoxEdvLEhs1pAXElOf5SMv0+7PHrqTpRpySCD1y6hFTmncIARfj1OXu2LvmtQrZ8
M7zXb3lJv1M/Fw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:40 2025 by rpki-client