Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
File: BGLgBWSpNA_0c505USFsRqjvxk8.mft (raw, json)
Hash identifier: ZiDFS0dpehOd9HLP2TMmZgDOupjGVQMrV2HDkTYTypk=
Subject key identifier: 6F:E1:0A:33:02:93:B3:A2:FE:A8:76:17:C8:62:AE:72:52:94:27:A4
Authority key identifier: 04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F
Certificate issuer: /CN=0462e00564a9340ff4739d3951216c46a8efc64f
Certificate serial: 01992DEC7B3AF32AFEA21C2ED8F157C9C576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
Manifest number: 167D
Signing time: Tue 09 Sep 2025 10:01:36 +0000
Manifest this update: Tue 09 Sep 2025 10:01:36 +0000
Manifest next update: Wed 10 Sep 2025 10:01:36 +0000
Files and hashes: 1: 73llHz_xwf_Kz0Ge7BqH9XmgDiA.roa (hash: FvCEfaxgWr3NTmhty3i7+MvXKehuHhI0xzvJoL1ljPo=)
2: BGLgBWSpNA_0c505USFsRqjvxk8.crl (hash: emg6zRGiduWjck3WnlB96/0AXE+Gup+PgBFzTg4v5cA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:ec:7b:3a:f3:2a:fe:a2:1c:2e:d8:f1:57:c9:c5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0462e00564a9340ff4739d3951216c46a8efc64f
Validity
Not Before: Sep 9 10:01:36 2025 GMT
Not After : Sep 10 10:01:36 2025 GMT
Subject: CN=6fe10a330293b3a2fea87617c862ae72529427a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cf:aa:43:82:4f:a4:d1:6a:e1:23:28:89:9f:
4a:e7:71:6a:5e:52:4d:8e:2a:f2:ff:9a:b7:11:39:
d4:25:c1:08:72:00:d4:38:09:19:fa:fd:13:cb:31:
9e:e0:b3:1a:a8:63:6d:2b:d3:55:31:26:07:3f:4b:
7c:87:51:7f:69:02:6c:f0:3e:eb:fd:8f:a9:1b:99:
af:10:1e:8a:02:b9:b1:69:5e:d3:b5:8d:01:b6:1a:
16:bf:14:a0:4f:bb:33:0e:42:bb:32:44:b0:60:09:
27:92:69:4b:67:7a:6a:16:a7:24:0c:a8:9b:9c:85:
3c:cd:19:2a:1d:dd:39:ec:d1:81:7c:b0:d4:0a:e3:
f5:bb:e0:92:c3:ab:29:68:f1:e6:5f:4f:b4:b8:da:
9a:18:ad:be:b6:ef:fe:71:22:2e:96:4f:8e:32:21:
54:2b:22:16:13:0b:0b:75:55:c8:2a:75:a8:a2:06:
68:5a:f0:60:fc:af:9b:e7:59:03:aa:18:6f:72:8f:
89:21:6d:9f:c1:27:c6:61:b9:76:07:94:41:6c:e1:
fc:ab:60:80:93:82:0b:fa:66:b3:b8:6b:ac:71:b7:
4e:0b:9a:d8:ee:96:85:2e:e9:fc:a4:de:b7:06:17:
c5:0e:c4:74:4d:91:a4:8b:97:fc:34:21:0c:42:48:
d6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E1:0A:33:02:93:B3:A2:FE:A8:76:17:C8:62:AE:72:52:94:27:A4
X509v3 Authority Key Identifier:
keyid:04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:35:bb:23:95:45:5f:d9:a2:f1:40:1c:1e:c5:dc:d1:e4:25:
2b:54:76:da:f2:a0:fa:9a:cd:17:97:0d:db:a4:d7:e9:08:ea:
01:b5:8e:36:37:82:b0:f1:67:b1:87:b8:e3:86:3c:ae:72:5e:
a4:38:2f:84:ac:7e:b4:e9:b4:5f:a9:96:06:04:85:3d:a7:f9:
c4:64:e1:46:17:84:94:38:c3:9f:41:71:a1:65:7f:bb:a1:95:
7b:20:18:f1:05:18:2a:2c:2a:31:06:19:29:2b:ca:06:5d:5b:
2f:51:b4:2d:1f:0b:85:c1:57:da:d4:4b:98:5e:d4:2c:27:31:
6a:97:69:6c:e4:ab:34:16:6f:b7:fa:9e:a0:de:2f:7d:d7:f4:
e4:b2:92:b9:78:a0:74:66:80:af:b3:e7:6d:b7:5b:ab:2e:f5:
cb:37:d3:79:65:b0:82:c6:52:6d:cb:ff:06:50:57:b6:d2:08:
b5:b1:6a:b4:56:70:a4:0d:cc:c8:ae:35:84:80:fb:89:ef:35:
98:2d:70:ce:ec:80:53:94:b2:5f:71:8e:0e:2d:0b:d3:8e:1d:
68:19:b7:f5:47:44:ee:79:31:e3:e3:a5:c1:ee:8c:52:89:e4:
f6:d4:0d:05:8e:c6:bd:e3:7a:d3:b5:ef:fc:fe:73:a7:77:7d:
90:01:d9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 12:14:51 2025 by rpki-client