Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
File: BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft (raw, json)
Hash identifier: OuMbh+iQR2V6hQiMovRjVvEWB9O1i+fsqFRmDCnUMO0=
Subject key identifier: B9:CF:C1:C2:8C:6B:96:4A:9B:28:61:CD:F1:C3:3E:6B:F2:FC:CB:B3
Authority key identifier: 04:62:B9:B5:8E:E0:8E:83:F1:A9:AD:4E:96:43:E8:0D:3B:40:CB:3E
Certificate issuer: /CN=0462b9b58ee08e83f1a9ad4e9643e80d3b40cb3e
Certificate serial: 0199FC2193DF123B0CFBF5F9279072731E11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
Manifest number: 09B3
Signing time: Sun 19 Oct 2025 11:01:22 +0000
Manifest this update: Sun 19 Oct 2025 11:01:22 +0000
Manifest next update: Mon 20 Oct 2025 11:01:22 +0000
Files and hashes: 1: BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl (hash: tVqc/TKHBkLSk8RiW8AX6poaM9p2Ti5ZE9Euu9lepCo=)
2: jV-3tArc8dsjcZ6kDNPRZe17c7E.roa (hash: N7hoaH3KyqZMDXhGvm+f+pqXc8cqz/H0JZUoSjuldtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:93:df:12:3b:0c:fb:f5:f9:27:90:72:73:1e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0462b9b58ee08e83f1a9ad4e9643e80d3b40cb3e
Validity
Not Before: Oct 19 11:01:22 2025 GMT
Not After : Oct 20 11:01:22 2025 GMT
Subject: CN=b9cfc1c28c6b964a9b2861cdf1c33e6bf2fccbb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0f:aa:cd:06:a6:8e:2e:72:21:46:aa:11:42:
d3:05:75:b2:9e:7a:a8:eb:8b:51:23:b0:16:60:df:
48:de:77:02:b1:47:07:4c:d9:5c:7a:94:cd:41:e5:
f6:c4:40:46:28:b2:be:8b:06:8b:79:1f:ca:9a:51:
6d:a8:03:2a:c9:1d:04:97:ed:a8:e1:db:98:fb:0d:
03:a7:23:b4:09:c5:26:a6:36:5a:06:99:52:ae:45:
d1:85:33:b8:0f:31:43:f9:2c:35:c4:37:99:dc:5d:
01:c5:92:d1:da:a0:06:83:04:b5:47:02:e6:d1:8e:
1e:6f:97:db:bf:93:bd:84:d8:91:33:ed:37:87:5a:
2d:ab:a8:2f:4f:4e:11:b3:da:ba:1e:86:a8:df:e3:
c4:01:15:7b:0b:5e:93:57:17:8a:ab:b5:c0:db:29:
ea:1f:27:81:4c:88:a0:7e:16:ab:b5:c3:a4:c0:8b:
17:85:e6:3d:39:21:54:34:bb:b4:22:7e:29:b6:72:
14:24:fd:3e:e8:81:85:e1:ac:4d:6c:e9:57:b0:b4:
06:ed:b4:93:a1:8c:6b:0b:a0:fd:de:b0:6d:60:70:
b3:9f:f4:54:1c:18:f4:0b:fc:5e:24:29:a3:bc:94:
ca:2d:be:ae:b1:57:08:bb:d0:bf:2c:0e:d5:e8:2a:
58:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CF:C1:C2:8C:6B:96:4A:9B:28:61:CD:F1:C3:3E:6B:F2:FC:CB:B3
X509v3 Authority Key Identifier:
keyid:04:62:B9:B5:8E:E0:8E:83:F1:A9:AD:4E:96:43:E8:0D:3B:40:CB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:08:16:c8:8c:9e:3c:62:af:90:b3:f4:ab:87:f9:b4:a6:42:
19:ad:0e:bb:41:3b:7c:a4:81:de:93:03:7a:92:e0:3d:6a:c6:
9b:2e:1c:b6:14:65:f9:d9:56:05:9a:53:e6:ba:36:7c:86:b7:
e9:68:56:1a:99:f1:9c:1a:e8:4f:e1:a4:b6:98:60:df:af:ef:
1a:dd:f1:ad:05:01:a5:32:11:d0:29:9d:cf:7f:f6:7d:7a:c2:
b9:49:24:12:f7:71:8e:f9:f3:12:40:8d:08:cb:e3:79:e1:02:
b3:e0:f4:61:8c:5a:49:34:5a:a8:48:68:0c:67:c6:ff:36:0b:
90:3d:0e:12:77:2e:fb:1d:50:ca:0d:fc:2c:3c:72:3c:fd:ce:
78:7b:57:7e:83:55:6f:ea:16:c0:1c:fe:5e:62:8b:f4:1f:ad:
62:5b:4e:1d:95:db:0b:4d:ae:63:7a:51:f2:b8:21:1e:7f:30:
91:11:cf:0e:83:52:28:b7:40:2a:2c:65:69:72:02:5f:86:eb:
75:97:f6:3b:48:b2:f0:4f:5a:57:3b:1e:f6:5c:9e:b4:76:46:
e3:95:c4:3b:67:07:c1:28:6c:31:56:e2:93:44:4e:94:cf:01:
a4:f7:3b:d5:3d:f7:e9:60:a2:5a:03:9d:45:33:a7:cb:cb:ad:
b9:93:75:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:55 2025 by rpki-client