
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
File: BGLgBWSpNA_0c505USFsRqjvxk8.mft (raw, json)
Hash identifier: 0/2ll0s37XAGqxMBl1R1HedqXB7eVz801CpVK7YJnbs=
Subject key identifier: 9A:38:36:E7:5D:7C:1A:84:94:CE:19:0E:4F:6B:34:4D:9F:4F:0E:0D
Authority key identifier: 04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F
Certificate issuer: /CN=0462e00564a9340ff4739d3951216c46a8efc64f
Certificate serial: 01976BF47FF9E6AB432041A9C0576B5B3F77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
Manifest number: 1594
Signing time: Sat 14 Jun 2025 01:01:14 +0000
Manifest this update: Sat 14 Jun 2025 01:01:14 +0000
Manifest next update: Sun 15 Jun 2025 01:01:14 +0000
Files and hashes: 1: 73llHz_xwf_Kz0Ge7BqH9XmgDiA.roa (hash: FvCEfaxgWr3NTmhty3i7+MvXKehuHhI0xzvJoL1ljPo=)
2: BGLgBWSpNA_0c505USFsRqjvxk8.crl (hash: 0GSEEH7IGWMzO7m5skGBc9qXfy0ynJk6ADVDbqbCzjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:7f:f9:e6:ab:43:20:41:a9:c0:57:6b:5b:3f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0462e00564a9340ff4739d3951216c46a8efc64f
Validity
Not Before: Jun 14 01:01:14 2025 GMT
Not After : Jun 15 01:01:14 2025 GMT
Subject: CN=9a3836e75d7c1a8494ce190e4f6b344d9f4f0e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:64:a7:2c:90:69:c8:db:e0:7e:3e:18:e6:b5:
8c:42:43:2b:79:c9:8c:42:da:3a:8c:27:37:65:77:
af:11:13:c8:a1:dc:a1:61:04:df:f6:d2:71:b7:8c:
4a:b2:d9:8f:fc:5d:3e:54:e6:db:66:93:a7:1a:9f:
59:56:fa:b1:f9:c5:7b:57:06:7e:43:b2:a1:db:45:
2f:75:ef:28:91:67:55:f9:dc:dd:10:01:66:ae:92:
44:f0:dd:8c:90:42:51:7d:e3:9b:8b:48:f9:c6:2b:
6f:25:db:a4:01:c3:66:92:45:6c:65:de:91:ab:b3:
3d:91:db:6e:2a:f2:b0:8a:13:b6:46:65:8c:30:b8:
47:ea:ad:36:ad:2f:1e:43:d8:12:a6:da:b2:47:11:
bd:be:66:cb:a6:78:f8:3e:80:35:c3:bd:81:54:d7:
fe:4f:fc:8e:af:c0:a9:3d:78:3b:35:35:25:2f:e0:
33:50:79:a4:0c:1d:17:b5:5b:75:98:b2:07:f4:49:
c2:cb:d5:63:86:2b:00:a6:a7:6e:05:b0:81:98:70:
fd:b3:24:26:76:1b:8a:ca:68:d0:97:7c:c9:d0:9f:
e3:39:47:8e:9e:c1:03:d0:4d:c4:d1:49:90:cb:43:
0b:9d:0d:a2:b1:d9:7b:af:47:87:de:bc:c4:09:85:
73:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:38:36:E7:5D:7C:1A:84:94:CE:19:0E:4F:6B:34:4D:9F:4F:0E:0D
X509v3 Authority Key Identifier:
keyid:04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:55:b6:f7:30:7c:67:10:10:32:6e:5b:91:10:a9:d6:5b:0a:
f1:23:75:bd:16:fd:36:b8:91:23:70:01:74:ef:2d:ad:5f:a0:
a1:63:8c:8d:ff:73:46:55:a0:54:42:96:c2:38:53:84:ad:7e:
5f:7a:77:27:6d:8b:e3:4f:a6:6c:33:6c:46:ae:3c:43:f6:bc:
49:93:a7:5e:3d:2e:7b:37:8e:32:4e:96:23:bb:d1:3f:0e:af:
1a:c1:e0:dc:d6:9c:7d:a1:98:0f:a1:fd:70:79:ea:b3:13:6b:
dd:af:4b:84:92:80:8f:90:14:33:aa:b2:43:ea:2b:f4:4e:16:
b4:77:e8:c7:b6:c4:78:99:92:18:0e:71:0f:e2:9d:e2:bd:80:
41:75:43:6e:ea:65:8f:4e:f5:6b:31:be:64:77:10:f9:9b:71:
2d:08:ca:83:33:40:b1:d5:55:74:4d:a9:a9:c2:0e:55:6e:55:
d6:60:60:72:cb:f7:c8:8d:22:76:37:a2:66:8f:06:c9:a0:62:
39:ed:a1:fe:6d:a2:1b:08:59:2d:90:c3:f6:7d:96:de:1d:39:
c9:43:bc:62:11:3a:5b:8e:98:9f:c0:c8:98:b3:52:bc:a9:8f:
cc:eb:69:40:de:0c:f5:38:e0:f7:c7:46:36:c8:b9:36:93:19:
3b:62:89:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 04:39:12 2025 by rpki-client