Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
File: BGLgBWSpNA_0c505USFsRqjvxk8.mft (raw, json)
Hash identifier: iOabm4IYQi5xG8PEGP94kxlBAmFmC5qJ8jHQ6Nu5dRM=
Subject key identifier: 28:63:63:5C:07:91:AF:E1:09:36:65:94:5B:87:25:56:19:3B:A8:10
Authority key identifier: 04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F
Certificate issuer: /CN=0462e00564a9340ff4739d3951216c46a8efc64f
Certificate serial: 019A179856826FAEC98F124FD21C9455E5ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
Manifest number: 16F6
Signing time: Fri 24 Oct 2025 19:00:50 +0000
Manifest this update: Fri 24 Oct 2025 19:00:50 +0000
Manifest next update: Sat 25 Oct 2025 19:00:50 +0000
Files and hashes: 1: 73llHz_xwf_Kz0Ge7BqH9XmgDiA.roa (hash: FvCEfaxgWr3NTmhty3i7+MvXKehuHhI0xzvJoL1ljPo=)
2: BGLgBWSpNA_0c505USFsRqjvxk8.crl (hash: PX1OAY2IN6uKaxY7AyrBC3sM0+b1TuY2wyEziyMgF60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 17:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:17:98:56:82:6f:ae:c9:8f:12:4f:d2:1c:94:55:e5:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0462e00564a9340ff4739d3951216c46a8efc64f
Validity
Not Before: Oct 24 19:00:50 2025 GMT
Not After : Oct 25 19:00:50 2025 GMT
Subject: CN=2863635c0791afe1093665945b872556193ba810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5a:15:c7:d2:3f:0a:27:40:79:97:0b:a7:53:
f2:65:ab:86:71:ad:44:16:c7:79:64:cb:1f:71:26:
74:e6:aa:3e:12:ec:ba:67:ee:bb:4f:7e:e5:91:07:
b6:69:a8:41:8c:21:5a:19:d8:90:31:14:c1:8c:50:
a9:b9:89:2f:62:d8:e5:63:a7:6c:06:b6:a2:21:7c:
37:49:40:c2:fa:d5:35:af:d9:a0:10:10:48:26:ac:
2e:62:d7:2a:5b:fd:53:27:37:6d:65:af:2c:83:35:
41:08:e0:24:5b:11:ff:f6:a1:6c:b2:58:93:78:03:
7f:44:d0:6e:05:97:6f:9f:47:57:8b:f3:b7:03:ff:
f7:c1:05:ca:aa:5a:38:2f:ca:25:32:41:2d:21:50:
aa:90:4c:3f:91:98:41:7a:9f:2a:fc:11:cd:67:04:
c7:e7:e3:21:74:28:89:b8:63:b8:66:55:ed:eb:93:
de:32:1a:d2:ce:13:18:bb:b5:f3:46:03:4e:8b:ef:
49:ca:0c:97:46:34:0a:6e:a1:8f:64:db:d2:fd:3c:
22:02:f6:c0:14:a0:db:63:7b:2b:04:0c:a8:8f:94:
1d:88:2f:3c:8a:3c:ab:71:78:38:0b:93:3e:e1:92:
4a:11:b1:4b:8c:4b:ec:3d:7b:8c:51:8f:92:05:b9:
7a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:63:63:5C:07:91:AF:E1:09:36:65:94:5B:87:25:56:19:3B:A8:10
X509v3 Authority Key Identifier:
keyid:04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ca:a4:98:62:ee:ac:d0:71:c2:aa:11:1e:43:ee:1c:f8:66:
be:3b:89:2f:5c:27:d2:65:79:59:97:b7:69:e8:30:fb:56:c2:
f0:93:6e:48:b6:5f:e8:e9:eb:65:64:e6:02:75:fe:bd:7b:64:
13:47:7f:ea:66:a3:7e:b9:82:64:68:1b:56:ba:3a:bd:d6:50:
73:c4:8e:39:2c:ff:cc:f3:6f:21:3d:0d:93:8a:ca:d4:5b:4d:
bd:b2:04:30:0d:a0:97:3f:ea:49:13:f6:ac:a4:34:aa:66:62:
66:58:31:9e:f8:eb:24:63:71:4f:d6:61:4a:e3:29:6e:61:d9:
69:6d:ea:7e:8d:0f:5d:cc:ce:31:fb:97:a3:b4:5f:63:d3:fc:
eb:a7:9e:46:47:1f:60:55:fd:f0:7b:6e:90:76:07:6d:97:a5:
84:34:cb:f0:cc:36:7b:b5:f4:a6:7e:8c:82:43:d1:fb:dd:46:
8f:7e:35:fc:50:58:2a:6d:2c:90:84:e7:0a:27:fe:4d:42:4f:
3a:10:32:2d:f2:e7:8e:82:1b:43:a2:50:ff:8a:5c:77:3a:4a:
4a:41:b0:8d:a2:b2:87:50:28:4f:ad:8e:7d:c3:18:57:1f:9b:
c3:f0:a2:62:93:85:3d:2f:32:48:ab:4d:b8:33:36:70:52:5c:
32:a1:e9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 03:01:48 2025 by rpki-client