Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
File: BGLgBWSpNA_0c505USFsRqjvxk8.mft (raw, json)
Hash identifier: ynrCumCXtmHEsfoHsfPwkA8LntuVhotgBi21WRa1NSo=
Subject key identifier: 94:4B:B7:61:78:A1:D4:31:D7:10:4B:CD:79:4F:73:9D:EC:62:83:C2
Authority key identifier: 04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F
Certificate issuer: /CN=0462e00564a9340ff4739d3951216c46a8efc64f
Certificate serial: 019758A476E2D242C9A36F89DC0EFDCE96C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
Manifest number: 158A
Signing time: Tue 10 Jun 2025 07:01:02 +0000
Manifest this update: Tue 10 Jun 2025 07:01:02 +0000
Manifest next update: Wed 11 Jun 2025 07:01:02 +0000
Files and hashes: 1: 73llHz_xwf_Kz0Ge7BqH9XmgDiA.roa (hash: FvCEfaxgWr3NTmhty3i7+MvXKehuHhI0xzvJoL1ljPo=)
2: BGLgBWSpNA_0c505USFsRqjvxk8.crl (hash: BCtL0qt3fCAQ04uxmDfwYwv0GigjHVmCQAafxxkrnSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:a4:76:e2:d2:42:c9:a3:6f:89:dc:0e:fd:ce:96:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0462e00564a9340ff4739d3951216c46a8efc64f
Validity
Not Before: Jun 10 07:01:02 2025 GMT
Not After : Jun 11 07:01:02 2025 GMT
Subject: CN=944bb76178a1d431d7104bcd794f739dec6283c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a7:56:ae:0c:0a:e9:de:d3:07:ef:d9:9d:b2:
35:a0:35:23:6e:25:56:78:b7:aa:e0:00:9f:cd:f9:
42:1a:87:86:bd:4b:d8:52:d4:65:1c:fe:12:34:fa:
d8:63:c7:52:61:01:d5:ab:1a:8a:fc:68:6e:0b:c5:
28:2e:b8:43:a7:06:64:b4:c6:e9:b6:22:82:98:4c:
2d:d0:f0:33:a4:3d:3b:60:15:6c:c1:0c:88:f6:80:
fb:fa:ed:2c:00:1f:e2:fa:ec:08:48:11:60:2c:6a:
cf:de:77:c3:65:38:15:16:ee:69:71:db:c9:a5:72:
26:fa:3e:ec:23:18:87:4f:6c:0e:b3:dd:1d:7b:b5:
19:58:af:93:5a:9d:d9:15:15:96:2c:4c:fd:18:3e:
20:39:5d:40:72:1c:d0:0a:f9:24:30:2a:c5:b3:3e:
f9:3e:fd:f5:9e:40:40:1b:f2:68:36:c6:44:e5:ab:
0b:a6:35:01:d8:a4:fc:ec:fd:42:ec:00:cc:7b:1b:
bf:b4:24:f9:48:98:6e:8d:23:7a:24:ad:3c:83:9a:
19:67:e1:c7:7b:0f:4b:a9:20:ac:98:2e:d2:65:65:
b7:9a:43:5e:46:89:56:51:c7:37:4a:7d:12:09:3c:
e3:97:d0:65:c8:cc:99:98:93:83:34:4c:76:94:db:
cc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4B:B7:61:78:A1:D4:31:D7:10:4B:CD:79:4F:73:9D:EC:62:83:C2
X509v3 Authority Key Identifier:
keyid:04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b6:66:23:60:cc:89:f8:1f:1a:66:b3:b8:ef:c3:f0:e4:22:
69:b3:74:9a:c3:bb:3f:cc:79:bf:ca:0f:c5:b7:63:53:4c:82:
1b:b3:49:d1:ad:1b:43:5f:82:d9:46:9e:07:62:9b:ba:1c:95:
a7:f4:b5:91:4a:15:99:de:76:f1:ab:00:65:94:c1:1f:85:fc:
0b:5a:5f:d0:f8:e1:cf:fa:42:42:bf:cb:23:75:98:35:9a:28:
38:e4:d6:03:a8:e5:7b:ec:c0:8a:0f:a7:b7:20:b7:73:2f:b0:
41:a3:be:d0:33:22:0b:19:44:ed:90:fa:3f:01:46:c7:a3:8a:
bf:82:95:78:b4:ae:c6:2c:3d:a1:cd:19:4a:7e:de:6b:89:08:
32:af:79:c8:b8:09:d2:0c:64:51:58:92:ce:9c:0f:91:22:05:
fc:56:29:a9:2c:00:f1:9c:9f:69:0a:6d:03:07:bc:27:be:2a:
9e:48:63:18:5d:58:b9:5b:a7:ef:29:b1:c8:72:88:10:e4:88:
3c:d3:03:97:e1:aa:d1:c2:1e:60:69:94:1a:08:67:ae:5c:f6:
13:ac:20:b8:8d:be:95:65:92:89:5f:1f:25:ae:62:25:98:3e:
85:51:01:77:90:58:e0:d9:1a:2d:3e:bb:a7:75:fe:5e:65:b5:
45:b0:08:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdYpHbi0kLJo2+J3A79zpbBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NjJlMDA1NjRhOTM0MGZmNDczOWQzOTUxMjE2YzQ2YThl
ZmM2NGYwHhcNMjUwNjEwMDcwMTAyWhcNMjUwNjExMDcwMTAyWjAzMTEwLwYDVQQD
Eyg5NDRiYjc2MTc4YTFkNDMxZDcxMDRiY2Q3OTRmNzM5ZGVjNjI4M2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qdWrgwK6d7TB+/ZnbI1oDUjbiVW
eLeq4ACfzflCGoeGvUvYUtRlHP4SNPrYY8dSYQHVqxqK/GhuC8UoLrhDpwZktMbp
tiKCmEwt0PAzpD07YBVswQyI9oD7+u0sAB/i+uwISBFgLGrP3nfDZTgVFu5pcdvJ
pXIm+j7sIxiHT2wOs90de7UZWK+TWp3ZFRWWLEz9GD4gOV1AchzQCvkkMCrFsz75
Pv31nkBAG/JoNsZE5asLpjUB2KT87P1C7ADMexu/tCT5SJhujSN6JK08g5oZZ+HH
ew9LqSCsmC7SZWW3mkNeRolWUcc3Sn0SCTzjl9BlyMyZmJODNEx2lNvMuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRLt2F4odQx1xBLzXlPc53sYoPCMB8GA1UdIwQY
MBaAFARi4AVkqTQP9HOdOVEhbEao78ZPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkdMZ0JXU3BOQV8wYzUwNVVTRnNScWp2eGs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC84YzlhYTgtYzEwYS00ZTJkLTliNjQt
MjI3MzAyZDU5NTcyLzEvQkdMZ0JXU3BOQV8wYzUwNVVTRnNScWp2eGs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC84YzlhYTgtYzEwYS00ZTJkLTliNjQtMjI3MzAyZDU5NTcy
LzEvQkdMZ0JXU3BOQV8wYzUwNVVTRnNScWp2eGs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb7ZmI2DM
ifgfGmazuO/D8OQiabN0msO7P8x5v8oPxbdjU0yCG7NJ0a0bQ1+C2UaeB2KbuhyV
p/S1kUoVmd528asAZZTBH4X8C1pf0Pjhz/pCQr/LI3WYNZooOOTWA6jle+zAig+n
tyC3cy+wQaO+0DMiCxlE7ZD6PwFGx6OKv4KVeLSuxiw9oc0ZSn7ea4kIMq95yLgJ
0gxkUViSzpwPkSIF/FYpqSwA8ZyfaQptAwe8J74qnkhjGF1YuVun7ymxyHKIEOSI
PNMDl+Gq0cIeYGmUGghnrlz2E6wguI2+lWWSiV8fJa5iJZg+hVEBd5BY4NkaLT67
p3X+XmW1RbAI9Q==
-----END CERTIFICATE-----
Generated at Tue Jun 10 11:31:49 2025 by rpki-client