Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
File: BGK247pQCQLmPuFOXKyREoMqLCc.mft (raw, json)
Hash identifier: yIjLuXW8bO3DA2dsq62G28iLvyrFPUtPNusCZLNlVvA=
Subject key identifier: 4A:99:E4:72:51:BB:A5:23:6E:2F:C6:53:9E:5F:23:74:76:D0:DB:D2
Authority key identifier: 04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27
Certificate issuer: /CN=0462b6e3ba500902e63ee14e5cac9112832a2c27
Certificate serial: 019A003546DCFF213298CA4B3A4AEF8A1265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
Manifest number: 0269
Signing time: Mon 20 Oct 2025 06:01:22 +0000
Manifest this update: Mon 20 Oct 2025 06:01:22 +0000
Manifest next update: Tue 21 Oct 2025 06:01:22 +0000
Files and hashes: 1: BGK247pQCQLmPuFOXKyREoMqLCc.crl (hash: xLhFX4UdoummAKWfVgQbdvrSXMxLRPyU6AU7B5gaY3Y=)
2: zin7g8rz3XZKgyY-2CCTccUUZMI.roa (hash: FyDDLGXT5pU6Mg/1Kd+gQOcE2BEnBTlrNQt3oLOsDkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:46:dc:ff:21:32:98:ca:4b:3a:4a:ef:8a:12:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0462b6e3ba500902e63ee14e5cac9112832a2c27
Validity
Not Before: Oct 20 06:01:22 2025 GMT
Not After : Oct 21 06:01:22 2025 GMT
Subject: CN=4a99e47251bba5236e2fc6539e5f237476d0dbd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e0:90:66:9b:d0:09:49:6b:63:0a:36:ba:44:
6a:5e:e8:19:47:7b:e4:25:ed:a8:5d:b8:57:fd:2d:
cb:71:63:ad:ec:07:de:25:b0:e3:9d:0f:07:9d:b6:
2a:8b:17:6a:db:96:fc:30:2a:5e:6c:27:52:2b:53:
fb:f9:2c:cb:79:ed:a1:ce:53:a9:9d:39:1c:b7:6f:
8b:94:df:28:87:9e:34:a2:0b:14:f4:82:a5:10:12:
98:6e:b4:91:29:79:b0:3e:b3:29:c6:85:36:54:f4:
5a:5f:ef:41:c0:ac:98:32:07:ee:e4:f2:6f:ab:d5:
d8:17:51:5f:a5:a1:db:1d:2a:1f:9f:fe:ee:2f:80:
34:78:dd:e3:15:10:b9:f0:53:fe:09:92:25:72:2c:
ec:aa:4e:c1:27:b3:38:17:7b:bc:db:f5:40:93:05:
81:38:81:fe:76:05:8a:98:c9:ca:54:05:38:00:98:
52:5f:4f:c6:68:0b:3c:d2:31:da:3f:00:52:25:3d:
7b:e7:5f:9e:89:c9:ee:c3:10:20:b9:81:d1:11:bf:
0e:00:e7:88:ed:2f:de:a5:d0:af:f7:94:64:35:91:
85:dc:72:a7:8f:54:20:96:a7:5c:b9:f4:0a:3f:12:
87:17:8f:75:2f:ff:3d:56:7d:65:2f:57:25:73:a6:
f2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:99:E4:72:51:BB:A5:23:6E:2F:C6:53:9E:5F:23:74:76:D0:DB:D2
X509v3 Authority Key Identifier:
keyid:04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:ff:92:91:b0:93:e0:59:69:9e:da:d1:a9:61:7c:d1:2c:bb:
fe:23:6e:cd:56:f1:31:c8:96:35:a6:6b:69:f8:5d:f0:1c:e0:
c6:ee:4e:dd:1a:6b:b6:01:a4:13:68:3c:c8:67:56:ca:cb:cb:
5a:a9:f3:c5:d9:bf:54:ac:bf:1b:04:10:6e:e1:5b:2c:16:25:
e1:9e:3b:ca:8b:9f:30:8c:2f:7a:6e:04:49:a6:d3:95:9d:d4:
a6:9f:2c:20:0c:b3:6d:cc:cf:8c:57:f1:1b:f5:0e:0c:2f:dc:
45:e2:ca:b9:68:f2:c6:03:3c:64:a2:f7:56:67:6c:4e:e8:f0:
50:14:65:76:3d:d5:ed:b1:38:fe:37:f5:59:2d:00:5b:10:48:
63:26:0b:45:b2:00:5a:0d:d8:de:7b:94:46:01:43:ca:67:78:
9c:e6:ab:86:f9:ea:70:a1:7c:c7:e8:77:06:0a:c3:79:d1:07:
4b:9d:85:34:87:89:1a:d0:95:69:2e:f2:16:e6:34:29:c6:56:
8f:a9:99:53:9d:7e:8f:6d:d7:5e:a3:3e:ed:57:93:51:4e:4c:
50:46:c2:1c:a5:03:a1:01:1f:24:6c:07:0c:2a:e6:0e:a5:fc:
9b:83:ba:e0:5e:52:aa:93:74:4d:af:1f:06:7d:2b:79:94:32:
df:bb:95:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:46:11 2025 by rpki-client