Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
File: BGaUC2ukf4zBCntHjkBWPLuKt_A.mft (raw, json)
Hash identifier: nHEoUzDU5m0bXnBnU5rsSEQxSAzfwZu4qPeOMJe0oNQ=
Subject key identifier: 04:58:7E:13:E3:84:C7:38:B0:70:EA:10:25:1F:6F:18:F9:D3:5C:7D
Authority key identifier: 04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0
Certificate issuer: /CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
Certificate serial: 019A72938BD2677AA22E23E14C8AFDDDBF95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
Manifest number: 0BD6
Signing time: Tue 11 Nov 2025 11:01:03 +0000
Manifest this update: Tue 11 Nov 2025 11:01:03 +0000
Manifest next update: Wed 12 Nov 2025 11:01:03 +0000
Files and hashes: 1: BGaUC2ukf4zBCntHjkBWPLuKt_A.crl (hash: IB0kuQnZcVF2F9cA/RwSZKhOun0jwQaOXen3N3xj2hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:8b:d2:67:7a:a2:2e:23:e1:4c:8a:fd:dd:bf:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
Validity
Not Before: Nov 11 11:01:03 2025 GMT
Not After : Nov 12 11:01:03 2025 GMT
Subject: CN=04587e13e384c738b070ea10251f6f18f9d35c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b6:f5:20:b9:af:a5:74:cf:da:86:df:30:62:
e2:c8:90:46:34:39:00:b3:78:db:9a:94:7e:41:36:
58:33:00:b8:38:f6:8d:97:0f:de:89:85:e1:b0:64:
de:cd:51:93:9b:ed:92:1c:fb:d6:a2:69:64:f1:b6:
1c:ca:7f:bf:70:56:c6:66:60:35:ea:00:8c:a7:3a:
67:a8:8b:a0:ad:d8:af:d6:b0:8b:84:aa:37:56:7f:
26:1f:b4:57:a5:a8:a1:7a:b5:60:ab:cc:17:e2:a8:
e6:ee:c4:6f:5c:71:9e:ce:e1:a9:2c:35:b3:2a:68:
03:8c:d9:aa:b6:85:3d:ec:2d:73:11:1d:55:ea:8c:
3f:7c:b5:05:64:95:8f:dd:d2:17:8d:21:08:2a:8b:
cf:5e:d5:19:43:e0:66:3a:7c:12:37:c3:85:0a:83:
4c:a0:c3:3f:a7:88:67:3f:ba:57:c2:f3:72:15:26:
a0:8c:11:10:df:e2:3c:09:9f:18:75:a7:f6:81:8f:
e4:ca:d8:c1:18:59:45:f0:b0:dd:9d:01:cc:38:98:
4d:03:8b:43:eb:62:57:f0:42:a1:17:02:78:42:59:
82:69:89:22:af:ea:34:08:5a:7c:e8:2f:d2:79:86:
a7:0e:f4:f5:29:2b:37:e3:a0:c0:ed:b1:73:e7:60:
f8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:58:7E:13:E3:84:C7:38:B0:70:EA:10:25:1F:6F:18:F9:D3:5C:7D
X509v3 Authority Key Identifier:
keyid:04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:de:7c:61:89:f8:77:aa:67:76:1b:88:54:92:7e:47:26:81:
87:7d:c2:bb:04:e1:e7:44:b7:59:96:73:e6:ec:a5:3b:fa:01:
4c:0c:67:e7:7b:30:e1:e7:6d:ed:29:a7:86:c5:29:bd:e6:d7:
96:d9:2d:ef:5c:27:fd:ed:d8:6a:20:1f:d2:17:15:30:d6:b2:
37:3e:1d:ef:1f:3a:72:8b:15:2d:ec:21:a9:6e:a6:f5:38:91:
91:52:95:b8:54:00:a3:84:65:5a:35:95:a7:d8:cf:3b:1e:e9:
d7:70:1b:ae:2d:76:9e:1c:7b:60:86:0d:ac:b8:5a:40:bc:b6:
bc:9a:96:19:72:55:4a:6a:18:29:5b:0d:40:66:1b:6b:dd:46:
86:c1:5e:c9:5b:d9:79:ee:de:38:32:aa:75:5b:eb:86:b0:64:
4d:7e:fb:1b:b7:da:59:6d:d6:ff:6b:1e:70:a4:2a:dd:7a:fc:
75:e5:78:8a:3a:4f:40:92:04:82:d4:d3:63:09:8a:9a:ce:b2:
a9:7b:9e:33:ca:ef:55:da:b2:d0:5d:95:c6:2d:91:f0:b5:81:
ab:bf:59:c8:d1:6d:6b:75:b4:1d:d3:a4:0f:d1:d7:c2:a2:fd:
a2:5d:b9:f9:e9:93:7c:ab:60:88:5f:ea:95:a9:57:dc:15:3d:
bf:e3:fb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:24 2025 by rpki-client