Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
File: BGyntgTsCPb1Sw50iQZUfdN1Z00.mft (raw, json)
Hash identifier: qVb5uujEStZuA+9r9bOE+kxPmsFXNqAE93uFIKlvW3Y=
Subject key identifier: C8:6C:21:0F:34:9A:FA:38:C1:7F:E7:14:FA:85:B5:B6:B5:95:53:C6
Authority key identifier: 04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D
Certificate issuer: /CN=046ca7b604ec08f6f54b0e748906547dd375674d
Certificate serial: 01974AE858B3337F4CEAE56733512303C5B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
Manifest number: 1240
Signing time: Sat 07 Jun 2025 15:00:30 +0000
Manifest this update: Sat 07 Jun 2025 15:00:30 +0000
Manifest next update: Sun 08 Jun 2025 15:00:30 +0000
Files and hashes: 1: BGyntgTsCPb1Sw50iQZUfdN1Z00.crl (hash: WwREKPPz/P1PoKg2842Dfecmfg8jLhx40KjB2JpYLQA=)
2: W_EWnDN7S-Lr4HAexwKFCibBunI.roa (hash: Hq7myDcvfhXQUDH03db33GGTXzn+mXDa35j7LIpyLJ4=)
3: _h-pD85oM-4QL5S4Ka5s8okAtQk.roa (hash: 0i71BBwnivmIgBhKogySa4VPmpxK93A6N2O06ABsBqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:58:b3:33:7f:4c:ea:e5:67:33:51:23:03:c5:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046ca7b604ec08f6f54b0e748906547dd375674d
Validity
Not Before: Jun 7 15:00:30 2025 GMT
Not After : Jun 8 15:00:30 2025 GMT
Subject: CN=c86c210f349afa38c17fe714fa85b5b6b59553c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:31:19:76:df:7e:13:0a:4c:69:07:a1:e1:58:
e1:cf:ae:4a:e4:56:45:06:d0:f1:73:16:0a:0c:b3:
d4:93:b7:4e:df:21:07:87:70:b1:6b:e2:7d:26:60:
1f:1f:3d:97:cc:f8:a3:99:fa:59:e8:2c:3f:c6:ac:
fd:b6:91:e1:51:d0:82:d4:d5:0d:ae:f2:ad:e7:4b:
d1:d3:ff:ea:cd:2f:ba:35:b7:28:28:20:2f:64:ed:
9d:ee:6c:c3:4c:4c:42:f4:75:16:74:25:e0:28:de:
20:66:40:f9:f4:94:40:e5:22:40:c6:7d:f9:73:d3:
23:25:56:f0:87:c0:01:7f:22:2c:32:48:d1:78:ce:
69:5a:dd:fa:69:e6:7f:2b:9b:a1:f1:db:57:3e:98:
c4:f6:81:75:b2:26:72:1e:4a:6d:15:45:c0:29:03:
7e:96:4d:40:1b:77:be:84:6b:e7:71:46:1b:9e:95:
b2:4f:33:81:1a:9c:c2:80:3d:47:02:68:5c:53:57:
81:af:da:6e:e5:b0:21:d2:05:96:e0:3f:06:5e:64:
3f:66:8d:1a:c3:8b:f6:ba:82:e7:b5:63:69:c8:42:
50:cc:35:bc:35:53:a1:6f:e9:61:2d:03:bb:8f:64:
05:95:eb:cb:de:92:0d:23:1e:89:49:66:7e:ca:03:
2c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6C:21:0F:34:9A:FA:38:C1:7F:E7:14:FA:85:B5:B6:B5:95:53:C6
X509v3 Authority Key Identifier:
keyid:04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c4:6a:6d:3c:a5:33:7d:49:bb:2c:29:9d:e6:c0:8f:6b:46:
1b:c4:4a:d9:28:6f:da:f4:c1:08:d2:d4:37:fd:a1:78:c6:c9:
0c:49:77:6a:b3:c9:4c:3a:1a:77:a8:d0:e0:75:e9:4b:f9:48:
58:e0:98:ed:9d:92:a0:54:7f:ac:f8:58:3a:b5:5f:81:a6:55:
9c:1a:2d:7c:f8:80:2a:41:00:88:89:5e:a8:e9:54:9f:e2:f4:
4d:29:72:2a:12:a8:c5:2b:91:d0:be:72:b5:b9:c5:f1:45:ac:
c4:58:e3:a7:82:52:2d:bd:d6:a6:3d:bb:ae:f3:26:ad:b1:e9:
4c:dd:52:0c:3d:10:65:98:41:c9:3f:8f:9c:e0:27:64:93:fb:
25:0c:c6:41:93:ec:68:bb:1f:9c:61:b1:5b:24:46:ec:1d:1c:
17:48:33:6f:c2:51:d1:ea:f6:d1:4a:bc:45:54:26:b9:a2:75:
fd:fc:85:fe:94:3a:c4:a0:b8:bd:24:20:f5:0f:c9:4c:ad:40:
30:58:d8:f8:0c:5a:e2:67:48:95:84:8b:66:60:8a:74:5f:de:
f0:fd:95:bc:2d:39:ee:ad:2a:23:2e:d7:95:1f:a4:1d:9d:8b:
28:8e:b4:1c:97:d2:27:a6:a8:70:db:99:93:71:99:9c:07:95:
f9:ca:ad:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6FizM39M6uVnM1EjA8WyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NmNhN2I2MDRlYzA4ZjZmNTRiMGU3NDg5MDY1NDdkZDM3
NTY3NGQwHhcNMjUwNjA3MTUwMDMwWhcNMjUwNjA4MTUwMDMwWjAzMTEwLwYDVQQD
EyhjODZjMjEwZjM0OWFmYTM4YzE3ZmU3MTRmYTg1YjViNmI1OTU1M2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDEZdt9+EwpMaQeh4Vjhz65K5FZF
BtDxcxYKDLPUk7dO3yEHh3Cxa+J9JmAfHz2XzPijmfpZ6Cw/xqz9tpHhUdCC1NUN
rvKt50vR0//qzS+6NbcoKCAvZO2d7mzDTExC9HUWdCXgKN4gZkD59JRA5SJAxn35
c9MjJVbwh8ABfyIsMkjReM5pWt36aeZ/K5uh8dtXPpjE9oF1siZyHkptFUXAKQN+
lk1AG3e+hGvncUYbnpWyTzOBGpzCgD1HAmhcU1eBr9pu5bAh0gWW4D8GXmQ/Zo0a
w4v2uoLntWNpyEJQzDW8NVOhb+lhLQO7j2QFlevL3pINIx6JSWZ+ygMs8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhsIQ80mvo4wX/nFPqFtba1lVPGMB8GA1UdIwQY
MBaAFARsp7YE7Aj29UsOdIkGVH3TdWdNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkd5bnRnVHNDUGIxU3c1MGlRWlVmZE4xWjAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zOTJlYTUtOWNhOC00YjBmLTkzODgt
MDkzOTYxZDM4Yzg2LzEvQkd5bnRnVHNDUGIxU3c1MGlRWlVmZE4xWjAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zOTJlYTUtOWNhOC00YjBmLTkzODgtMDkzOTYxZDM4Yzg2
LzEvQkd5bnRnVHNDUGIxU3c1MGlRWlVmZE4xWjAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATsRqbTyl
M31JuywpnebAj2tGG8RK2Shv2vTBCNLUN/2heMbJDEl3arPJTDoad6jQ4HXpS/lI
WOCY7Z2SoFR/rPhYOrVfgaZVnBotfPiAKkEAiIleqOlUn+L0TSlyKhKoxSuR0L5y
tbnF8UWsxFjjp4JSLb3Wpj27rvMmrbHpTN1SDD0QZZhByT+PnOAnZJP7JQzGQZPs
aLsfnGGxWyRG7B0cF0gzb8JR0er20Uq8RVQmuaJ1/fyF/pQ6xKC4vSQg9Q/JTK1A
MFjY+Axa4mdIlYSLZmCKdF/e8P2VvC057q0qIy7XlR+kHZ2LKI60HJfSJ6aocNuZ
k3GZnAeV+cqt/w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:06:16 2025 by rpki-client