Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
File: BGyntgTsCPb1Sw50iQZUfdN1Z00.mft (raw, json)
Hash identifier: oD7wT5TWS4nz8DRUHx9Wj6m0j3/6VV67w+B60b/dPuc=
Subject key identifier: 3A:3E:3B:5A:2D:81:60:F6:EC:FA:38:8D:90:DF:D1:C3:EC:E8:68:CF
Authority key identifier: 04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D
Certificate issuer: /CN=046ca7b604ec08f6f54b0e748906547dd375674d
Certificate serial: 019A22F7840D77B8DD7E094342554B9C87D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
Manifest number: 13B9
Signing time: Mon 27 Oct 2025 00:00:37 +0000
Manifest this update: Mon 27 Oct 2025 00:00:37 +0000
Manifest next update: Tue 28 Oct 2025 00:00:37 +0000
Files and hashes: 1: BGyntgTsCPb1Sw50iQZUfdN1Z00.crl (hash: sFaH3Mf45dbRQ5bWJSRyNwwkS4C+kRqL50EBae8Zz1c=)
2: W_EWnDN7S-Lr4HAexwKFCibBunI.roa (hash: Hq7myDcvfhXQUDH03db33GGTXzn+mXDa35j7LIpyLJ4=)
3: _h-pD85oM-4QL5S4Ka5s8okAtQk.roa (hash: 0i71BBwnivmIgBhKogySa4VPmpxK93A6N2O06ABsBqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:84:0d:77:b8:dd:7e:09:43:42:55:4b:9c:87:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046ca7b604ec08f6f54b0e748906547dd375674d
Validity
Not Before: Oct 27 00:00:37 2025 GMT
Not After : Oct 28 00:00:37 2025 GMT
Subject: CN=3a3e3b5a2d8160f6ecfa388d90dfd1c3ece868cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:af:9f:ac:da:68:13:b0:a3:70:12:34:ee:86:
d5:6a:cc:30:98:f8:2f:b7:c9:77:8b:1e:06:61:4e:
fe:61:e9:e5:d6:13:c5:47:80:cf:5b:28:50:81:59:
20:68:42:b4:64:c4:6d:7d:e9:1f:70:fa:4f:1e:7a:
78:ae:32:a2:6c:25:25:ab:54:d2:4e:b0:17:38:93:
61:e4:ad:03:43:db:a8:05:8b:3d:be:ec:21:24:4a:
ad:67:d5:22:c9:87:00:8d:9f:6f:fe:e2:d7:cb:d4:
77:db:ac:3a:de:ab:b9:17:c2:1d:46:cb:09:c4:bd:
70:0a:96:ab:4c:25:7c:7a:d5:1d:71:60:65:9e:2b:
ad:66:0c:6a:fa:13:ae:e0:3f:8a:00:83:13:c3:fb:
16:65:4f:65:b1:42:ae:8a:c2:e3:d5:ed:5b:80:8f:
e1:5d:d9:50:19:e1:3a:9b:03:b2:b9:3b:18:98:10:
39:71:ce:fd:e7:aa:81:69:dc:b4:52:84:21:d5:2c:
8d:30:ee:75:bb:15:34:a6:81:2d:36:27:54:6e:5f:
62:17:b9:f8:2e:a8:f9:c8:6c:db:61:ea:41:20:d2:
11:48:8c:7f:a0:e8:8a:b7:63:3a:b7:df:a8:bd:d6:
d9:a6:e6:70:f1:27:80:90:0f:a9:2e:50:d2:79:4f:
d6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3E:3B:5A:2D:81:60:F6:EC:FA:38:8D:90:DF:D1:C3:EC:E8:68:CF
X509v3 Authority Key Identifier:
keyid:04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:db:90:26:05:57:ae:fe:22:8e:db:a3:30:b6:0c:c1:37:6c:
12:bb:37:1e:01:20:18:2e:7b:39:f3:1c:af:e0:f8:d9:39:8d:
f2:b9:9c:15:62:88:98:d8:7f:b8:1e:fa:7c:22:a0:b6:58:31:
0c:47:d6:da:85:99:7b:56:62:70:48:07:33:57:41:f1:4d:d2:
6b:d1:ce:d5:af:33:74:a3:b3:a6:63:4e:d2:3f:b9:5d:0b:67:
a1:62:30:48:74:ea:87:9d:75:e7:cd:57:40:95:dd:e8:b1:5f:
12:be:e8:10:56:8e:0b:21:a9:87:99:8c:f7:d9:84:57:9f:f7:
0d:61:0f:eb:80:1b:69:cb:92:a8:3b:24:5b:84:c6:5d:e1:b6:
cc:e1:63:d4:c1:0f:c4:66:e5:98:e8:62:e9:93:84:5f:2a:bb:
ae:af:f3:e3:f3:97:63:b0:36:5e:91:ea:82:bc:d0:81:21:1c:
7e:ef:e2:d6:fd:1f:13:92:71:bb:ab:69:f4:f5:9e:f9:a1:41:
59:20:3e:8d:df:6e:6d:23:8b:2b:a6:e2:bb:c0:7a:be:54:47:
0b:2e:20:fe:d5:bd:d3:0a:97:4c:0d:e8:a6:55:f6:41:bb:51:
73:f4:e5:9e:be:ff:4d:8f:c8:e4:2f:2d:30:4e:f3:4f:89:a0:
6c:91:dd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:05:56 2025 by rpki-client