Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
File: BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft (raw, json)
Hash identifier: I0b73ugBjGXlR2E9yNMjsOm10IhmtY3OhC5c3takHmU=
Subject key identifier: 37:96:EF:BB:AA:7E:D4:EA:40:75:41:13:03:DA:DA:1F:13:2C:49:40
Authority key identifier: 06:01:8E:7B:52:BD:32:68:AA:4D:5D:3A:A5:77:F4:7D:0F:18:75:04
Certificate issuer: /CN=06018e7b52bd3268aa4d5d3aa577f47d0f187504
Certificate serial: 0199FBEBBAFFD60A0F618A7DC8A0997AAC9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
Manifest number: 0BAA
Signing time: Sun 19 Oct 2025 10:02:33 +0000
Manifest this update: Sun 19 Oct 2025 10:02:33 +0000
Manifest next update: Mon 20 Oct 2025 10:02:33 +0000
Files and hashes: 1: BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl (hash: q8iAByVctrgQbuH0sDOEf1Im1czoXzySt06N6Cw8ot4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ba:ff:d6:0a:0f:61:8a:7d:c8:a0:99:7a:ac:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06018e7b52bd3268aa4d5d3aa577f47d0f187504
Validity
Not Before: Oct 19 10:02:33 2025 GMT
Not After : Oct 20 10:02:33 2025 GMT
Subject: CN=3796efbbaa7ed4ea4075411303dada1f132c4940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6a:be:df:0d:5c:dc:0a:b4:39:4b:f2:ff:3e:
74:df:a1:30:b2:ff:ed:4d:15:4e:31:4b:74:fa:fd:
88:e1:22:a3:39:b7:30:b0:80:ba:54:12:83:55:c1:
0e:3d:3b:d1:e2:3a:78:64:d1:72:f7:4f:2c:42:b6:
2f:d4:2f:d0:44:2f:07:16:e7:45:25:90:4c:fc:49:
8d:0b:27:c6:6d:c9:4b:fb:8c:ff:65:68:29:61:ec:
01:01:11:3e:ff:d8:99:aa:99:30:e4:fb:c6:e7:d9:
4f:82:e2:c7:43:aa:c0:0b:f3:1e:20:84:91:7c:69:
df:b6:40:66:04:a8:be:9c:ae:34:96:af:af:3e:25:
fe:b4:27:f5:45:c8:bd:9c:b2:56:19:f1:d8:8c:59:
41:8c:84:ec:b2:fa:f3:dc:f4:98:99:36:45:23:15:
98:1c:6c:5d:7f:19:ff:b8:37:22:ac:10:76:06:9a:
6f:65:53:79:d7:66:e5:27:39:50:b1:61:5b:18:a2:
90:c1:51:f3:f4:48:d5:a4:29:c8:3f:a1:2e:4e:a2:
db:f0:22:1b:7f:bc:d6:a5:e2:fc:58:7f:74:c5:37:
af:84:33:e6:f7:ca:b8:8c:66:a0:6c:23:a0:67:26:
07:dd:d3:81:35:f5:d5:61:8e:63:e0:fc:16:66:26:
d5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:96:EF:BB:AA:7E:D4:EA:40:75:41:13:03:DA:DA:1F:13:2C:49:40
X509v3 Authority Key Identifier:
keyid:06:01:8E:7B:52:BD:32:68:AA:4D:5D:3A:A5:77:F4:7D:0F:18:75:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:50:af:d6:e0:e0:35:57:96:74:bd:41:47:d6:65:4d:bb:09:
f8:5d:67:02:14:79:fd:dc:2d:f4:bd:04:7a:8e:97:f1:0f:8b:
7c:2b:de:49:5f:05:0c:2c:a8:e8:fe:af:19:6b:93:c6:6d:61:
d2:e8:a0:39:6c:cc:49:ad:b2:1d:68:8e:16:da:35:83:a2:03:
45:4c:9c:76:8a:02:bb:b4:e1:e8:69:be:3f:cd:b3:4f:92:fb:
29:37:d0:61:a5:34:91:f1:c9:f9:6d:1b:d1:e1:df:05:b4:b7:
b8:c4:7c:68:f2:53:4c:66:66:9c:8b:17:6f:58:a3:43:78:68:
f6:ca:c7:ff:d1:02:d9:58:fc:f5:ad:55:63:39:63:09:3f:58:
f1:a4:88:90:1d:03:4b:1c:16:1c:1c:77:78:93:9f:d3:20:fc:
d4:d6:00:8b:cb:9d:74:1e:90:ea:f2:b0:00:e8:4c:9d:5a:f5:
0c:fe:21:63:71:52:25:9c:3f:5d:7b:95:0c:ad:94:6a:1c:23:
e7:07:e6:8b:a2:8c:80:33:1b:8d:9e:fc:b1:08:78:d2:a7:c2:
d0:9a:99:96:ac:50:c4:95:7a:c9:36:56:e0:56:c0:2b:ce:ba:
1e:a8:5d:4d:7b:cd:03:d6:bb:31:c7:9e:51:79:c8:2f:80:2b:
fa:c1:f3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:25 2025 by rpki-client