Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
File: BGK247pQCQLmPuFOXKyREoMqLCc.mft (raw, json)
Hash identifier: y9GzMjRertX1KnMTxckFg5EtmFJdYuYwkFjJktUn8NU=
Subject key identifier: B2:0E:73:4C:E7:4D:85:C7:77:FF:7C:83:49:AB:85:B2:83:D5:1E:69
Authority key identifier: 04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27
Certificate issuer: /CN=0462b6e3ba500902e63ee14e5cac9112832a2c27
Certificate serial: 019A24E64E1D5A740D4C4CA9625B1618657D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
Manifest number: 027C
Signing time: Mon 27 Oct 2025 09:01:04 +0000
Manifest this update: Mon 27 Oct 2025 09:01:04 +0000
Manifest next update: Tue 28 Oct 2025 09:01:04 +0000
Files and hashes: 1: BGK247pQCQLmPuFOXKyREoMqLCc.crl (hash: Iq5MVsRO5mNqTGR2LJKGhJP7r4C5Y77+msMTkCaGlcg=)
2: zin7g8rz3XZKgyY-2CCTccUUZMI.roa (hash: FyDDLGXT5pU6Mg/1Kd+gQOcE2BEnBTlrNQt3oLOsDkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e6:4e:1d:5a:74:0d:4c:4c:a9:62:5b:16:18:65:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0462b6e3ba500902e63ee14e5cac9112832a2c27
Validity
Not Before: Oct 27 09:01:04 2025 GMT
Not After : Oct 28 09:01:04 2025 GMT
Subject: CN=b20e734ce74d85c777ff7c8349ab85b283d51e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f9:11:f0:bf:35:d1:91:1b:91:31:c1:0f:74:
3d:39:8b:16:be:56:5d:ad:98:bf:a4:b5:8b:80:2b:
9b:3c:61:3e:4f:5c:7e:dc:bc:dc:d1:4f:00:c7:cc:
ba:a6:ca:6f:a7:f2:b1:5b:42:bb:f7:74:75:b5:d6:
da:72:47:a0:ca:f7:2b:d0:b1:1e:b9:eb:c4:cb:26:
bb:22:cd:1b:2c:ed:6a:53:64:9b:22:9a:a3:90:af:
11:5b:b9:ac:c0:2b:dc:4b:fd:3c:80:e6:17:b7:7f:
8b:71:f8:50:93:1b:ed:e9:5d:d9:be:95:b5:fc:82:
79:03:93:ae:f8:dd:d3:f8:68:6a:26:9c:54:bd:0d:
56:4f:cc:63:33:46:c4:ec:66:f9:d5:2e:27:93:21:
20:aa:22:86:ad:4a:94:45:54:f7:d6:93:e0:63:28:
51:eb:f8:ca:11:83:4b:5f:db:ae:cf:fe:32:77:83:
08:84:14:dc:c1:7e:92:ca:57:f7:0f:f7:66:81:f7:
2b:4d:06:4e:0f:5a:e0:be:13:01:6d:c1:89:bd:6d:
72:a4:33:de:d4:31:96:06:3a:a7:e0:bc:57:8e:dc:
b7:0a:31:68:e4:65:4a:e1:53:18:fe:19:f6:66:e3:
88:3b:85:f1:41:46:d8:a1:dd:4d:cc:ae:9f:f2:3e:
16:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0E:73:4C:E7:4D:85:C7:77:FF:7C:83:49:AB:85:B2:83:D5:1E:69
X509v3 Authority Key Identifier:
keyid:04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:f1:db:fd:2d:1f:9b:d0:ed:44:aa:a8:32:2d:91:5a:7b:dd:
84:11:16:22:01:14:f1:80:d3:8d:50:5b:e6:42:72:a2:b1:46:
cd:ee:ec:04:ae:d1:d0:5f:5d:c6:2d:b4:de:00:16:35:c2:e2:
ac:b4:8d:4d:de:41:f7:f1:8e:32:12:88:7a:a8:72:06:e7:c6:
f0:f8:0f:0f:60:54:66:0c:3d:52:90:ee:b6:ba:6a:ed:35:e2:
7d:84:a1:73:b0:c4:c6:60:16:ce:6a:b7:ee:8d:0a:b4:f5:19:
d9:38:4b:70:d0:51:08:91:3c:74:19:2d:26:15:34:0d:f5:83:
29:e4:59:45:97:fa:cc:1a:3f:cb:21:48:40:a9:02:25:4a:46:
a1:8a:d1:8e:35:7d:fa:90:62:a5:a5:fb:54:50:de:39:dd:5c:
5d:b1:6a:6c:95:e8:dc:d0:1a:88:14:47:29:e3:73:11:e7:91:
09:da:8e:ca:94:36:b4:07:ff:ae:eb:1c:07:43:7b:ff:cc:5a:
44:d9:85:ad:2a:09:40:c7:41:06:47:cc:51:be:0a:36:e3:af:
5d:2d:90:47:c7:51:27:f4:98:94:bd:81:9b:0b:b3:9b:96:58:
b8:0d:4a:dd:19:b8:55:d1:f6:06:53:93:cd:f1:6c:3f:88:d3:
05:34:e8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:27:26 2025 by rpki-client