Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
File: BGLgBWSpNA_0c505USFsRqjvxk8.mft (raw, json)
Hash identifier: N3XuKO6B8VUlCsKfznFInNiuFlQuXwxgakDNch2+I4k=
Subject key identifier: B5:DC:0E:72:F2:35:46:62:FD:CC:16:B3:4E:25:C1:F7:34:E4:93:58
Authority key identifier: 04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F
Certificate issuer: /CN=0462e00564a9340ff4739d3951216c46a8efc64f
Certificate serial: 019752D8AEB0ADD68445F1476E9DBB28BE22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
Manifest number: 1587
Signing time: Mon 09 Jun 2025 04:00:21 +0000
Manifest this update: Mon 09 Jun 2025 04:00:21 +0000
Manifest next update: Tue 10 Jun 2025 04:00:21 +0000
Files and hashes: 1: 73llHz_xwf_Kz0Ge7BqH9XmgDiA.roa (hash: FvCEfaxgWr3NTmhty3i7+MvXKehuHhI0xzvJoL1ljPo=)
2: BGLgBWSpNA_0c505USFsRqjvxk8.crl (hash: kMt0z21xZm8V5kUXudhAPazw/RUjGO3I6zO6MfOnuEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:d8:ae:b0:ad:d6:84:45:f1:47:6e:9d:bb:28:be:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0462e00564a9340ff4739d3951216c46a8efc64f
Validity
Not Before: Jun 9 04:00:21 2025 GMT
Not After : Jun 10 04:00:21 2025 GMT
Subject: CN=b5dc0e72f2354662fdcc16b34e25c1f734e49358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:33:fb:5d:03:6b:77:a4:ed:16:bf:c1:df:63:
8d:6f:dc:bd:f5:f0:58:4f:89:31:90:6c:9a:b0:b7:
17:ef:11:19:5a:08:1b:81:ba:84:02:18:99:d3:2a:
db:47:91:03:af:0d:ec:11:7f:99:7a:0d:92:5c:b7:
3d:8b:b6:00:6c:28:99:15:b9:e4:a1:33:a5:b4:20:
6c:5c:17:8a:7c:08:1c:dd:5f:f9:8f:f6:94:a3:72:
c2:d2:c9:98:e6:5b:67:92:d6:75:6c:bb:3c:03:98:
03:dd:6e:30:1f:15:48:a5:b0:b3:a5:e7:91:79:42:
55:7d:83:7e:40:34:82:f7:f9:f7:6a:43:4e:c6:58:
e6:34:ef:cc:48:2b:f7:15:59:ca:ac:ea:e0:b6:59:
c4:ed:91:33:8f:62:b4:bf:06:16:da:4a:79:cd:24:
bb:9e:92:40:5c:8d:af:8a:86:71:66:b4:c2:67:42:
ce:5d:f8:ad:35:c4:42:2e:75:78:24:fc:50:c3:45:
7b:95:bc:9b:80:16:8d:50:5f:b6:7c:15:0e:52:d1:
57:5d:88:e6:ad:0f:b7:98:11:40:6b:57:2d:7c:58:
07:ad:00:b0:12:68:b1:54:9b:15:f8:79:8d:23:e9:
9f:a2:96:2a:12:fe:dc:a9:a4:94:d5:5d:76:fa:0e:
01:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DC:0E:72:F2:35:46:62:FD:CC:16:B3:4E:25:C1:F7:34:E4:93:58
X509v3 Authority Key Identifier:
keyid:04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:28:9d:7a:1b:15:e1:42:48:9d:80:1d:0d:fe:11:ce:84:5c:
34:99:03:5e:b2:5f:2e:c9:b6:01:6d:6d:db:9b:2c:2b:aa:9d:
02:81:00:32:87:b3:47:e0:60:f0:d7:f9:f8:ae:9a:f7:0b:42:
58:a1:f7:2b:59:0d:e3:b3:2f:60:e8:ec:98:83:78:5a:bd:6c:
2e:23:ee:22:38:b9:fe:6e:15:d8:b4:53:bf:f7:a2:13:d6:f5:
a0:80:44:b3:1c:c8:58:f5:84:1a:ad:57:e5:6b:b2:71:63:85:
ae:e1:55:b6:f5:7e:1e:08:d3:b6:77:a1:55:50:76:bd:7c:ad:
1f:bb:6a:22:52:58:76:94:9f:f5:39:ef:6a:97:7b:8d:37:2b:
47:4d:64:c0:29:ed:9e:2d:d0:f9:6b:39:93:53:72:da:17:44:
27:db:e0:f6:6a:5c:97:67:d6:55:ce:67:73:40:07:94:f8:19:
55:7f:0e:f1:07:5c:34:84:9c:4c:d1:fb:40:3a:e6:54:98:ee:
d9:c8:5b:ea:b9:48:57:97:e9:63:bd:88:ee:c9:a0:93:c3:61:
17:e5:76:81:ef:6b:5a:9f:77:06:fb:1e:4a:2c:d2:f3:05:d4:
c4:7d:48:48:dc:1f:ae:46:1b:d5:c7:d6:bd:30:14:e7:7e:7f:
56:82:40:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:12:48 2025 by rpki-client