Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
File: Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft (raw, json)
Hash identifier: eX68HLrcj6KFwuvH9BWHqjFALUpb8rdmdzi/XPQz7cs=
Subject key identifier: 35:3D:4E:D4:87:20:08:51:DC:79:F0:70:F5:9A:B7:0E:3B:8D:88:07
Authority key identifier: 06:09:7A:72:E4:AE:40:B6:B9:92:9B:72:F8:1E:FD:71:C5:17:DD:98
Certificate issuer: /CN=06097a72e4ae40b6b9929b72f81efd71c517dd98
Certificate serial: 0198D7738F7E1C7067E469E0C3EF9072EEB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
Manifest number: 026D
Signing time: Sat 23 Aug 2025 15:02:11 +0000
Manifest this update: Sat 23 Aug 2025 15:02:11 +0000
Manifest next update: Sun 24 Aug 2025 15:02:11 +0000
Files and hashes: 1: Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl (hash: hg9DThsrTLoBOrEnoZc+wony4tkZqtuJshy+wtT6OzQ=)
2: aTqNBiMtHyqY4sjo2vUby0yJMKk.roa (hash: 8tR80jRMgENDFDI+mB0B/a9/v+rAAXYdo53Fd7KchX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:8f:7e:1c:70:67:e4:69:e0:c3:ef:90:72:ee:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06097a72e4ae40b6b9929b72f81efd71c517dd98
Validity
Not Before: Aug 23 15:02:11 2025 GMT
Not After : Aug 24 15:02:11 2025 GMT
Subject: CN=353d4ed487200851dc79f070f59ab70e3b8d8807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:84:a6:85:3d:5e:82:8e:7f:30:61:ac:b6:ce:
98:f0:fa:f5:80:4a:95:93:ec:6e:90:3a:83:68:03:
1f:60:33:d2:cf:2d:4b:c0:1c:ee:bf:96:ed:78:bc:
56:d4:1b:ff:00:37:e2:3c:cb:e7:ff:73:b8:3d:e5:
41:4c:de:74:9b:71:eb:3a:39:e2:34:8a:5c:fa:6c:
bc:d8:a3:d4:3f:07:87:fc:a8:c4:35:a7:b8:f1:c7:
98:79:21:c2:ec:c3:cb:89:18:f7:92:02:49:66:22:
ca:5f:bc:cb:0e:58:87:b2:06:c7:a7:fa:a8:55:e5:
db:ae:42:f8:4a:b2:8f:4d:c9:c6:5b:51:06:b0:06:
04:a5:f5:9c:d1:dc:68:ab:ed:80:85:15:61:ce:51:
9e:08:f6:5c:26:c9:2c:02:35:b1:50:11:dd:74:0f:
1e:83:6e:c3:91:77:17:3d:cc:e3:c8:87:fc:4b:54:
01:97:ec:58:5b:b7:e2:07:14:63:7e:53:d7:b6:40:
ac:03:29:68:f2:ba:4d:9a:da:00:41:8b:36:94:c8:
15:2c:6f:f9:74:60:5c:82:4b:13:2b:99:dc:ac:4c:
48:11:33:f8:d6:05:a2:ce:26:86:fa:0f:90:d6:85:
1e:97:6c:dd:88:80:8e:8d:d3:ed:c6:a3:dd:ee:d0:
c7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3D:4E:D4:87:20:08:51:DC:79:F0:70:F5:9A:B7:0E:3B:8D:88:07
X509v3 Authority Key Identifier:
keyid:06:09:7A:72:E4:AE:40:B6:B9:92:9B:72:F8:1E:FD:71:C5:17:DD:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:36:84:98:fa:84:b4:17:94:fe:ba:a3:77:ee:84:60:79:3b:
b3:3b:bb:2e:1e:5f:ff:67:70:9a:10:ce:29:20:ec:c0:5a:50:
1f:24:ab:3c:29:e4:14:50:f5:24:37:6a:eb:85:5b:43:5b:b9:
f9:09:18:68:5b:e9:9a:ff:a3:db:35:6b:de:1b:02:1d:95:6b:
60:4b:3d:4d:6f:dd:06:b7:5f:6f:07:05:d7:c9:5e:f2:1f:9c:
29:2c:2d:78:6d:e5:c8:fb:a4:4d:9a:a4:b4:56:26:df:6d:f9:
3e:80:69:83:35:13:0b:92:13:12:56:ed:7a:a2:a1:56:d0:4f:
c8:11:fa:30:81:34:67:5d:1e:36:dd:11:4e:5e:b8:a3:c4:10:
7f:d7:9d:ac:ed:1a:1b:20:6f:de:1a:8a:59:ea:bd:ed:43:91:
79:68:99:51:f3:8e:55:ba:5d:49:1b:cd:fa:d9:27:66:e6:66:
51:64:8a:32:f1:b7:5f:7c:3e:83:f6:a9:18:fb:15:1e:8c:33:
65:0b:c3:df:65:da:5c:55:33:55:09:b7:a2:73:6f:39:5e:2c:
5b:c6:84:31:ff:03:e7:0b:5e:dc:89:96:55:1c:79:df:d2:ae:
87:3c:e2:8b:a1:90:e2:92:d9:41:6f:2b:fb:48:79:9e:db:98:
4f:ff:7f:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXc49+HHBn5Gngw++Qcu64MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MDk3YTcyZTRhZTQwYjZiOTkyOWI3MmY4MWVmZDcxYzUx
N2RkOTgwHhcNMjUwODIzMTUwMjExWhcNMjUwODI0MTUwMjExWjAzMTEwLwYDVQQD
EygzNTNkNGVkNDg3MjAwODUxZGM3OWYwNzBmNTlhYjcwZTNiOGQ4ODA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4SmhT1ego5/MGGsts6Y8Pr1gEqV
k+xukDqDaAMfYDPSzy1LwBzuv5bteLxW1Bv/ADfiPMvn/3O4PeVBTN50m3HrOjni
NIpc+my82KPUPweH/KjENae48ceYeSHC7MPLiRj3kgJJZiLKX7zLDliHsgbHp/qo
VeXbrkL4SrKPTcnGW1EGsAYEpfWc0dxoq+2AhRVhzlGeCPZcJsksAjWxUBHddA8e
g27DkXcXPczjyIf8S1QBl+xYW7fiBxRjflPXtkCsAylo8rpNmtoAQYs2lMgVLG/5
dGBcgksTK5ncrExIETP41gWiziaG+g+Q1oUel2zdiICOjdPtxqPd7tDH6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDU9TtSHIAhR3HnwcPWatw47jYgHMB8GA1UdIwQY
MBaAFAYJenLkrkC2uZKbcvge/XHFF92YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmdsNmN1U3VRTGE1a3B0eS1CNzljY1VYM1pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zYTEwOWEtOWIzMi00NWE4LTliMGMt
N2EwMjUxN2ZkOWQyLzEvQmdsNmN1U3VRTGE1a3B0eS1CNzljY1VYM1pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zYTEwOWEtOWIzMi00NWE4LTliMGMtN2EwMjUxN2ZkOWQy
LzEvQmdsNmN1U3VRTGE1a3B0eS1CNzljY1VYM1pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFjaEmPqE
tBeU/rqjd+6EYHk7szu7Lh5f/2dwmhDOKSDswFpQHySrPCnkFFD1JDdq64VbQ1u5
+QkYaFvpmv+j2zVr3hsCHZVrYEs9TW/dBrdfbwcF18le8h+cKSwteG3lyPukTZqk
tFYm3235PoBpgzUTC5ITElbteqKhVtBPyBH6MIE0Z10eNt0RTl64o8QQf9edrO0a
GyBv3hqKWeq97UOReWiZUfOOVbpdSRvN+tknZuZmUWSKMvG3X3w+g/apGPsVHowz
ZQvD32XaXFUzVQm3onNvOV4sW8aEMf8D5wte3ImWVRx539Kuhzzii6GQ4pLZQW8r
+0h5ntuYT/9/eA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:06:15 2025 by rpki-client