Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
File: Bgit6Gocz3pIO0wpYgRduNDvgm0.mft (raw, json)
Hash identifier: Z1VhUr0JBmb5C+0dvxrffYQA7+GMA/TCTp2j48NwK6A=
Subject key identifier: E4:2F:40:65:08:BF:02:8D:DF:90:01:E0:26:59:9F:41:CE:78:FA:8E
Authority key identifier: 06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
Certificate issuer: /CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Certificate serial: 019A71B8C182F630468AEAB9336B85C6E104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:02:04 +0000
Manifest this update: Tue 11 Nov 2025 07:02:04 +0000
Manifest next update: Wed 12 Nov 2025 07:02:04 +0000
Files and hashes: 1: Bgit6Gocz3pIO0wpYgRduNDvgm0.crl (hash: tim40qwaQD+ydTsYjlkQhLc/peB8ai4t1HXHCexY1Hk=)
2: GqvJxk6cmO7Tb_I2mDvjscrokEE.roa (hash: yepd+YPVUD07Z1nRvo/cI6UMDSXFFH47vweszFDmLW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:c1:82:f6:30:46:8a:ea:b9:33:6b:85:c6:e1:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Validity
Not Before: Nov 11 07:02:04 2025 GMT
Not After : Nov 12 07:02:04 2025 GMT
Subject: CN=e42f406508bf028ddf9001e026599f41ce78fa8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3a:30:74:d0:df:8b:94:12:a3:1d:75:d6:6d:
4c:04:25:4a:fe:1d:6d:fa:d0:ab:f7:b2:2d:b7:9d:
0a:c3:f3:30:9e:c1:83:f3:9f:2f:12:6b:23:cc:48:
df:48:c3:32:9d:3e:4f:e0:29:0e:b5:68:cd:14:f6:
f8:4a:b9:09:17:d4:bb:04:83:95:01:29:02:ae:ea:
2e:d3:eb:69:ae:83:1d:44:ba:df:04:c6:54:2a:da:
e7:60:77:ab:99:48:5e:63:4c:29:b4:80:d2:fe:91:
98:f7:d8:0a:30:64:14:b0:3b:bd:56:f7:e1:e2:58:
89:f9:4f:88:7e:0f:04:ee:89:f5:11:0c:22:61:6a:
4b:99:91:a1:9a:a6:58:cd:7a:5d:ea:b0:cc:13:ae:
d0:eb:f0:df:99:af:bc:52:2f:60:2f:16:b9:ba:9b:
14:5f:06:8f:6e:49:e3:b9:c1:60:8b:a3:bf:0c:ff:
6e:b6:ee:88:21:30:74:03:ce:6f:0f:f9:d1:4f:66:
7d:90:64:1d:f2:02:14:3c:2c:c3:b5:de:64:d9:8f:
02:96:9b:93:b3:77:87:b6:50:20:78:6f:8f:d8:76:
c7:45:d9:26:ae:12:07:f4:90:d5:92:5a:2a:f7:37:
d8:0f:62:97:9d:52:a2:8d:5b:8c:77:29:b8:78:6f:
b4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2F:40:65:08:BF:02:8D:DF:90:01:E0:26:59:9F:41:CE:78:FA:8E
X509v3 Authority Key Identifier:
keyid:06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b2:d7:a4:ba:29:e1:4f:69:eb:28:01:d0:1e:12:54:26:89:
eb:03:0a:88:ff:ab:00:3c:0a:45:9c:e4:81:f0:38:72:f9:bb:
3f:c6:65:18:12:9a:7a:46:8f:10:e7:d0:a6:66:02:3c:32:90:
cc:7c:aa:44:8f:a5:81:55:fd:28:1c:cb:41:fc:29:77:ff:84:
05:8c:bf:d2:66:fd:fd:bd:68:56:47:a9:c4:55:a2:f7:44:7a:
a9:f8:d2:a1:e4:bc:36:e6:27:34:82:e7:d0:5c:72:80:83:de:
a3:40:26:5f:59:bf:be:99:bd:01:96:2d:6f:04:06:ba:11:4a:
b8:53:a7:4b:78:0c:2c:33:4a:03:be:2f:14:de:d7:4b:6b:48:
52:f4:6d:c8:74:69:dc:0d:e1:e7:44:3d:35:e4:b9:dd:7c:b4:
07:74:fc:3a:d4:ab:6d:4b:3f:d3:d0:31:c9:1b:52:26:10:7f:
18:b1:ae:1f:31:51:35:a4:e1:6a:03:49:a0:d7:9e:8e:e2:40:
00:61:32:3f:2d:81:41:81:d7:cf:f8:54:bf:7a:24:73:8d:7b:
19:7f:46:b7:f5:69:fb:be:75:4e:51:09:22:1d:bd:33:15:bb:
4a:e3:b9:9e:67:4e:f5:d9:ff:fc:ee:21:84:72:e2:d7:90:f1:
e9:d2:20:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:48 2025 by rpki-client