Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
File: BGyntgTsCPb1Sw50iQZUfdN1Z00.mft (raw, json)
Hash identifier: HnoIDi1rbVu16O+iU0Clfw2z+IUEHnUwfMud3KmZh7Q=
Subject key identifier: CD:8D:BE:67:8B:F2:89:2D:65:55:2F:1A:5B:9A:4E:0C:00:BB:76:DE
Authority key identifier: 04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D
Certificate issuer: /CN=046ca7b604ec08f6f54b0e748906547dd375674d
Certificate serial: 0199FC58C789F5D8D85162C1C310CAC6DC03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
Manifest number: 13A5
Signing time: Sun 19 Oct 2025 12:01:40 +0000
Manifest this update: Sun 19 Oct 2025 12:01:40 +0000
Manifest next update: Mon 20 Oct 2025 12:01:40 +0000
Files and hashes: 1: BGyntgTsCPb1Sw50iQZUfdN1Z00.crl (hash: /ODbr5SCk3DxWjqiAtyX6DlXjV05GdcviWIap/ua/jg=)
2: W_EWnDN7S-Lr4HAexwKFCibBunI.roa (hash: Hq7myDcvfhXQUDH03db33GGTXzn+mXDa35j7LIpyLJ4=)
3: _h-pD85oM-4QL5S4Ka5s8okAtQk.roa (hash: 0i71BBwnivmIgBhKogySa4VPmpxK93A6N2O06ABsBqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c7:89:f5:d8:d8:51:62:c1:c3:10:ca:c6:dc:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046ca7b604ec08f6f54b0e748906547dd375674d
Validity
Not Before: Oct 19 12:01:40 2025 GMT
Not After : Oct 20 12:01:40 2025 GMT
Subject: CN=cd8dbe678bf2892d65552f1a5b9a4e0c00bb76de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:75:2f:5c:3a:32:68:79:55:1b:67:de:52:dc:
b7:e1:0e:e0:26:f2:4f:2d:55:63:b3:28:f2:2a:5f:
af:48:74:59:90:f2:8b:00:1c:14:4b:d1:56:3e:23:
9f:dc:5b:f4:34:3b:11:23:2c:49:35:3f:60:51:04:
c1:08:f2:b9:10:4e:e9:8e:48:62:f2:19:40:8c:6a:
f6:76:cb:3f:a5:72:0f:63:3c:40:79:85:db:c4:90:
2c:c3:96:7b:ae:c0:ee:c4:84:4f:53:5a:da:0b:c8:
4b:3e:bf:6d:5d:d0:40:93:82:0c:f2:81:83:ea:d5:
97:6d:4a:86:fe:33:34:4d:fc:1f:af:bf:a5:9d:38:
8c:7e:de:79:10:70:a4:ef:37:dc:af:11:2b:c4:c7:
d9:f3:e8:69:dc:70:e7:fd:ed:0e:93:fd:b4:5c:cf:
f1:ee:46:be:3b:db:1a:13:50:44:96:41:1b:fa:f5:
e0:d2:30:7a:e4:15:57:8b:ca:f8:22:d6:c8:c0:72:
45:5f:f8:46:71:92:89:c8:22:53:bb:4d:28:d5:61:
4f:c0:88:5d:b7:eb:dc:25:f8:85:1d:14:48:07:8b:
2e:61:af:4f:34:e2:91:39:c6:52:df:21:58:19:ae:
d4:04:08:bf:4a:6c:09:33:51:e6:32:82:26:2d:62:
b3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8D:BE:67:8B:F2:89:2D:65:55:2F:1A:5B:9A:4E:0C:00:BB:76:DE
X509v3 Authority Key Identifier:
keyid:04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c2:5e:d2:dc:b4:a9:97:07:3e:1e:e5:df:ce:32:79:91:de:
c8:44:85:48:0f:84:e9:a3:83:41:c3:14:15:3c:80:89:d6:75:
83:7d:ea:71:29:e1:3e:66:29:d8:02:46:da:3c:71:27:c4:3d:
65:9f:5d:b3:1e:77:51:e4:7e:51:07:a0:05:86:d1:ad:10:25:
4c:0b:ec:65:c1:88:9e:f8:c1:b8:15:a7:9b:55:6e:6f:00:0f:
84:58:2c:c2:8d:45:a6:d5:ca:b6:c1:02:fe:3b:e0:88:33:31:
a4:43:4b:5b:73:9b:5e:2e:92:20:92:81:a4:83:b2:32:3e:7f:
8b:ed:3b:5a:c2:0a:ac:cd:ed:54:47:2e:05:97:dc:8d:77:48:
56:e2:ea:e3:42:93:7d:e1:36:6b:11:37:2e:e0:b0:f0:39:14:
fd:73:bd:c5:97:7d:75:78:63:ee:75:ec:f3:26:bf:fe:c7:23:
9d:63:76:aa:72:2b:75:86:ff:49:6d:8b:0d:90:41:6f:44:a8:
28:22:74:e6:d5:7f:1d:81:a0:da:e9:8d:52:d0:88:21:e2:e1:
c0:a4:9c:b4:fa:91:41:bf:3d:fc:5e:7e:19:a3:c7:2d:18:16:
bb:b9:93:80:9d:19:19:cb:b6:4a:53:b2:07:a4:77:08:14:60:
b7:c5:ba:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:01 2025 by rpki-client