Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
File: BGLgBWSpNA_0c505USFsRqjvxk8.mft (raw, json)
Hash identifier: Xk/ITfmuRoi1EEjjZtlmjw2q8yevRCGdh9HXkeSspsU=
Subject key identifier: B0:95:FC:A4:7C:54:66:24:EA:D6:E7:F0:F3:73:D6:A5:BF:8A:9A:20
Authority key identifier: 04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F
Certificate issuer: /CN=0462e00564a9340ff4739d3951216c46a8efc64f
Certificate serial: 01975C8102FC712F3DB7BF2D101EAFF7E997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
Manifest number: 158C
Signing time: Wed 11 Jun 2025 01:00:48 +0000
Manifest this update: Wed 11 Jun 2025 01:00:48 +0000
Manifest next update: Thu 12 Jun 2025 01:00:48 +0000
Files and hashes: 1: 73llHz_xwf_Kz0Ge7BqH9XmgDiA.roa (hash: FvCEfaxgWr3NTmhty3i7+MvXKehuHhI0xzvJoL1ljPo=)
2: BGLgBWSpNA_0c505USFsRqjvxk8.crl (hash: hHm9KuJHUJqt3Q8Wi9AbJPjarn/dIbAYGK+/CLImqys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:81:02:fc:71:2f:3d:b7:bf:2d:10:1e:af:f7:e9:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0462e00564a9340ff4739d3951216c46a8efc64f
Validity
Not Before: Jun 11 01:00:48 2025 GMT
Not After : Jun 12 01:00:48 2025 GMT
Subject: CN=b095fca47c546624ead6e7f0f373d6a5bf8a9a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:34:21:bd:51:a2:0a:c2:28:f0:67:55:3f:42:
21:73:a1:57:07:fd:07:6c:22:9e:c1:7b:16:db:79:
0c:ed:dd:f3:3e:30:71:70:8a:7e:42:70:59:69:54:
d5:2d:0c:c2:d4:d5:95:40:4e:1a:6d:0a:b6:6c:2d:
c5:1c:b7:d8:ea:f4:67:22:0b:7b:9b:d0:8c:2d:85:
bc:c8:f5:c5:bb:39:ce:94:97:d1:26:ea:36:b1:c7:
41:b3:50:dc:1d:ac:8f:5e:26:f7:17:33:2c:aa:d1:
0f:3e:c4:f2:c6:9e:63:13:d6:03:7b:8a:95:12:50:
00:0b:8d:de:06:39:f0:0a:01:10:3a:33:ea:5a:51:
24:df:8c:5c:bc:d2:8f:29:6c:b6:b4:cb:25:13:e2:
c6:5b:2d:3e:a2:f2:a9:a8:df:62:97:57:06:b8:70:
2b:69:d5:48:7d:c9:0f:a7:64:52:a0:5c:8c:99:fc:
e3:c1:f6:b9:14:fc:fc:04:3b:81:f3:44:af:74:fd:
c7:6c:56:34:01:fc:02:5b:5d:73:c6:97:e2:38:f8:
4a:f1:86:ff:f4:10:2b:39:32:95:70:5a:e9:75:b1:
72:ec:ea:14:cc:16:2e:47:41:5e:e4:02:e5:eb:8d:
da:12:d7:91:36:d2:fb:bc:78:4f:37:e9:6d:05:89:
66:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:95:FC:A4:7C:54:66:24:EA:D6:E7:F0:F3:73:D6:A5:BF:8A:9A:20
X509v3 Authority Key Identifier:
keyid:04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a3:88:73:ba:c3:2b:a9:45:03:c9:89:90:11:66:a5:37:5b:
ef:cb:f1:e6:86:93:b6:ed:02:fe:35:51:41:96:d3:e1:ca:0e:
bc:18:b4:e5:8f:37:40:84:21:94:05:78:33:24:b2:0e:f5:bd:
d5:9c:8f:26:4a:f4:6f:82:e1:d5:16:ec:f7:a1:22:b7:19:7d:
4d:92:8f:10:27:e7:4c:10:e3:06:31:65:b7:a2:28:39:97:8d:
8e:d3:ac:91:f6:69:f8:55:35:b7:8a:42:62:68:4d:03:12:cf:
38:d3:03:66:7e:1e:93:b4:50:fe:30:b6:e3:0e:f8:ad:89:cf:
c7:1e:df:fc:4a:48:55:b9:f9:6e:08:a2:6a:b7:0e:ed:be:a8:
95:d2:6d:5b:f8:24:ec:0a:b5:7a:5d:19:88:6f:0c:85:86:1d:
6e:47:18:ca:eb:c4:99:ed:21:e3:d6:88:b4:d3:7f:8a:52:d9:
94:40:8b:d4:e9:b1:70:55:f0:94:9d:eb:81:4a:d3:14:97:47:
72:e5:61:da:a3:ed:af:32:57:af:20:9c:7d:ec:c4:58:36:d2:
3c:18:ca:ba:c0:65:cb:fc:31:38:e5:d8:6f:29:82:ad:a0:83:
c3:1b:f5:d1:24:21:39:d9:1b:60:a8:83:05:04:83:34:be:17:
fe:8e:93:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdcgQL8cS89t78tEB6v9+mXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NjJlMDA1NjRhOTM0MGZmNDczOWQzOTUxMjE2YzQ2YThl
ZmM2NGYwHhcNMjUwNjExMDEwMDQ4WhcNMjUwNjEyMDEwMDQ4WjAzMTEwLwYDVQQD
EyhiMDk1ZmNhNDdjNTQ2NjI0ZWFkNmU3ZjBmMzczZDZhNWJmOGE5YTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzQhvVGiCsIo8GdVP0Ihc6FXB/0H
bCKewXsW23kM7d3zPjBxcIp+QnBZaVTVLQzC1NWVQE4abQq2bC3FHLfY6vRnIgt7
m9CMLYW8yPXFuznOlJfRJuo2scdBs1DcHayPXib3FzMsqtEPPsTyxp5jE9YDe4qV
ElAAC43eBjnwCgEQOjPqWlEk34xcvNKPKWy2tMslE+LGWy0+ovKpqN9il1cGuHAr
adVIfckPp2RSoFyMmfzjwfa5FPz8BDuB80SvdP3HbFY0AfwCW11zxpfiOPhK8Yb/
9BArOTKVcFrpdbFy7OoUzBYuR0Fe5ALl643aEteRNtL7vHhPN+ltBYlmfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCV/KR8VGYk6tbn8PNz1qW/ipogMB8GA1UdIwQY
MBaAFARi4AVkqTQP9HOdOVEhbEao78ZPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkdMZ0JXU3BOQV8wYzUwNVVTRnNScWp2eGs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC84YzlhYTgtYzEwYS00ZTJkLTliNjQt
MjI3MzAyZDU5NTcyLzEvQkdMZ0JXU3BOQV8wYzUwNVVTRnNScWp2eGs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC84YzlhYTgtYzEwYS00ZTJkLTliNjQtMjI3MzAyZDU5NTcy
LzEvQkdMZ0JXU3BOQV8wYzUwNVVTRnNScWp2eGs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6OIc7rD
K6lFA8mJkBFmpTdb78vx5oaTtu0C/jVRQZbT4coOvBi05Y83QIQhlAV4MySyDvW9
1ZyPJkr0b4Lh1Rbs96Eitxl9TZKPECfnTBDjBjFlt6IoOZeNjtOskfZp+FU1t4pC
YmhNAxLPONMDZn4ek7RQ/jC24w74rYnPxx7f/EpIVbn5bgiiarcO7b6oldJtW/gk
7Aq1el0ZiG8MhYYdbkcYyuvEme0h49aItNN/ilLZlECL1OmxcFXwlJ3rgUrTFJdH
cuVh2qPtrzJXryCcfezEWDbSPBjKusBly/wxOOXYbymCraCDwxv10SQhOdkbYKiD
BQSDNL4X/o6TNg==
-----END CERTIFICATE-----
Generated at Wed Jun 11 04:28:25 2025 by rpki-client