Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
File: BGWHkB8TB5vtiYL2KendFUaM_vE.mft (raw, json)
Hash identifier: KGffOdiJPPm2oQ6Vy157saLR91Geof6V9PbkXT8R9Jw=
Subject key identifier: 90:32:11:3E:DD:27:38:AC:04:6D:76:6D:60:2A:2B:A1:9D:B0:85:6F
Authority key identifier: 04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1
Certificate issuer: /CN=046587901f13079bed8982f629e9dd15468cfef1
Certificate serial: 0199FF22920430F480A5DF2FA3B5DE5947AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
Manifest number: 10D9
Signing time: Mon 20 Oct 2025 01:01:19 +0000
Manifest this update: Mon 20 Oct 2025 01:01:19 +0000
Manifest next update: Tue 21 Oct 2025 01:01:19 +0000
Files and hashes: 1: BGWHkB8TB5vtiYL2KendFUaM_vE.crl (hash: p3AoVeVuHA3tTw2sWnpLqIAOAM3G9LGjErg0ISwATeY=)
2: elV1APoKiSk_9XkOBJQhYkqxHiw.roa (hash: 8zT6bhkdxlFlI+FWNJggqU5g/ZNnR60ACpbk2nou4yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:92:04:30:f4:80:a5:df:2f:a3:b5:de:59:47:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046587901f13079bed8982f629e9dd15468cfef1
Validity
Not Before: Oct 20 01:01:19 2025 GMT
Not After : Oct 21 01:01:19 2025 GMT
Subject: CN=9032113edd2738ac046d766d602a2ba19db0856f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:98:6d:81:d6:8a:ee:c0:e2:a5:73:df:31:2b:
c5:f6:dd:94:74:f2:53:8a:a6:0a:1d:5c:0e:fa:15:
6a:a1:a0:a6:41:d8:37:14:98:bb:34:13:ca:b6:2e:
d2:ee:0b:51:b7:cb:24:99:51:9d:51:65:42:7e:e1:
66:10:8f:7e:e4:fe:a6:cc:6e:90:6a:f9:1c:a5:fc:
e4:54:3f:11:33:fe:74:f8:c7:c4:02:1a:ec:c5:21:
5b:db:3f:b3:a9:60:56:5c:d0:a0:26:3e:f9:92:29:
47:70:1b:24:12:1c:3b:b4:84:67:ea:40:1f:43:49:
ce:f7:05:15:a9:95:a0:c4:e8:3f:7d:ca:0d:e8:93:
13:d3:04:3c:83:26:7a:a2:ac:da:56:d1:3c:a1:a6:
4c:5f:0b:ce:a4:99:58:34:ad:f1:1d:b9:9f:af:18:
ea:28:b4:49:9c:66:de:6f:82:45:c3:2b:e6:c4:ed:
ec:19:25:39:2a:99:3d:d3:d4:60:09:2e:da:92:fb:
cf:5b:59:e5:e1:b3:90:34:88:1c:96:2b:5c:49:70:
3a:70:47:cd:e3:19:80:0b:7d:ee:4b:a5:75:c2:4e:
15:39:09:7e:23:29:15:20:dd:37:89:93:55:97:12:
6d:2d:ed:6a:5b:aa:de:60:99:cd:d2:46:ba:bf:dc:
d4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:32:11:3E:DD:27:38:AC:04:6D:76:6D:60:2A:2B:A1:9D:B0:85:6F
X509v3 Authority Key Identifier:
keyid:04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:9e:b5:c7:cd:cf:68:65:2f:ef:b1:76:a4:0d:e2:28:e9:e0:
55:e3:a7:cf:ad:1f:cd:3e:63:c6:de:0f:23:29:cb:cc:5c:8d:
e8:1f:f5:a7:4b:c2:5a:dd:11:5a:a3:d6:f7:00:06:90:aa:7b:
76:9c:0e:15:00:79:59:a7:2a:6e:7a:b8:0b:01:5c:70:9d:a8:
a0:05:25:40:37:ea:d4:44:dc:a6:82:9f:68:04:81:ac:02:72:
21:34:79:55:61:45:3c:3c:bd:73:c0:6e:da:de:4b:d2:bc:91:
cd:77:5d:53:b3:63:eb:95:61:4f:a3:f1:90:b6:d3:b8:63:c1:
1b:45:97:0d:7a:70:e8:99:89:1a:87:56:4d:10:e5:9d:f6:e0:
2c:ab:07:f6:49:72:c3:4c:4a:05:6b:9c:3c:35:15:4e:a6:c5:
a8:ba:53:ef:ff:1f:ad:fe:ca:be:ab:ce:f5:96:6a:36:5a:cf:
d7:31:5b:21:60:39:e9:b4:12:0f:27:fb:07:2d:fd:1a:13:e2:
d1:34:af:d2:74:ca:bf:ac:34:59:ba:c5:c6:a1:3b:71:65:0e:
d1:ff:70:34:96:7a:cc:b4:c1:45:52:d4:9a:d5:17:21:ed:74:
a5:25:eb:b1:ba:29:a8:c3:28:04:86:3c:70:83:6e:a1:1e:5b:
9d:b8:be:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:28:10 2025 by rpki-client