
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
File: Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft (raw, json)
Hash identifier: FYwKiB/9cqc8oeK6zDfo4l24urUC8uBKh50/YYpwA0M=
Subject key identifier: 9F:F1:FB:7F:5C:06:8D:75:61:7E:70:53:11:A4:D7:58:FA:C3:96:A6
Authority key identifier: 06:09:7A:72:E4:AE:40:B6:B9:92:9B:72:F8:1E:FD:71:C5:17:DD:98
Certificate issuer: /CN=06097a72e4ae40b6b9929b72f81efd71c517dd98
Certificate serial: 0199FB0F4C6803DCA8CE38EEFCE46E291AFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
Manifest number: 0304
Signing time: Sun 19 Oct 2025 06:01:47 +0000
Manifest this update: Sun 19 Oct 2025 06:01:47 +0000
Manifest next update: Mon 20 Oct 2025 06:01:47 +0000
Files and hashes: 1: Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl (hash: dPbtl1rETLbFpN88dIS/4XC6s/rSU1BkklFH6gGcaLs=)
2: aTqNBiMtHyqY4sjo2vUby0yJMKk.roa (hash: 8tR80jRMgENDFDI+mB0B/a9/v+rAAXYdo53Fd7KchX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:4c:68:03:dc:a8:ce:38:ee:fc:e4:6e:29:1a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06097a72e4ae40b6b9929b72f81efd71c517dd98
Validity
Not Before: Oct 19 06:01:47 2025 GMT
Not After : Oct 20 06:01:47 2025 GMT
Subject: CN=9ff1fb7f5c068d75617e705311a4d758fac396a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1d:4b:82:0c:2f:10:2a:ef:ac:2e:77:f8:0c:
1c:a9:4a:f1:d6:70:2c:61:56:ba:1f:0a:89:ce:a0:
07:0d:45:6d:9d:2e:97:e8:02:82:32:b9:b2:66:45:
68:96:d6:a4:5b:4f:b5:a9:13:b2:24:10:d0:7b:4f:
cd:56:6d:95:4c:d2:98:c9:28:91:3b:31:1d:ac:29:
33:06:db:1d:f8:86:b9:ad:59:cf:ca:cc:d7:02:4a:
8b:4b:2d:c3:8b:da:64:84:05:1d:2d:7a:65:4c:6e:
66:16:77:cc:8d:84:c3:ae:df:b2:52:36:26:05:e3:
e6:df:1d:f3:e0:c6:5e:9c:07:1d:3d:30:7b:2c:b9:
80:1d:c1:b1:95:4b:d9:cf:93:ee:02:80:af:ad:cb:
74:99:51:55:a4:4c:b1:97:9e:13:8a:c0:f0:43:80:
78:84:00:53:0e:2f:69:fd:d1:a4:fb:14:fc:57:81:
e6:2d:66:55:2c:c2:3d:6c:7a:fb:65:e0:61:b2:e3:
21:17:96:1f:75:89:36:b2:c2:5f:24:8f:43:fb:64:
36:63:d9:55:eb:ca:43:d3:74:08:5f:57:c8:77:7b:
c2:ba:99:23:dc:4d:d2:42:fb:fe:96:d5:20:ee:ca:
b2:e3:bf:f6:06:00:59:33:1f:8f:49:d0:68:d3:38:
03:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F1:FB:7F:5C:06:8D:75:61:7E:70:53:11:A4:D7:58:FA:C3:96:A6
X509v3 Authority Key Identifier:
keyid:06:09:7A:72:E4:AE:40:B6:B9:92:9B:72:F8:1E:FD:71:C5:17:DD:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:b2:2f:53:1c:a7:06:3d:6e:ad:e8:16:a8:24:b4:cc:d0:d7:
7f:97:b4:dd:9f:af:9e:f5:a6:d7:38:98:fe:fc:ac:87:69:b1:
6c:b0:1b:77:dd:89:ad:77:98:69:1a:6e:b6:35:99:56:b6:8c:
10:de:e0:ba:3c:18:3c:e3:45:d6:05:e8:05:35:5e:52:e2:81:
86:07:82:74:0c:24:70:f6:19:e0:1c:16:55:90:1a:da:8b:c2:
5b:6e:a2:80:d6:b3:c5:7e:be:47:15:52:44:bc:b0:c4:1c:d9:
c9:8d:97:1a:25:e9:7c:55:c7:6f:db:e1:41:06:d1:f0:fc:86:
33:60:e0:6f:d2:43:a0:6d:bf:e3:bb:87:c7:69:9c:c0:c8:3a:
50:7d:70:22:a2:ae:f2:3f:3e:24:66:fa:c3:e1:66:39:cf:de:
73:bb:4f:b9:7a:c4:20:89:9d:ea:2d:75:d7:f7:0c:a2:00:4b:
30:4e:ee:4c:7c:9d:88:3e:35:56:8c:a6:37:a8:34:4f:a5:01:
41:40:ad:0f:8a:b8:fd:fc:e1:4d:40:e0:e7:2d:2b:d3:f9:45:
41:de:17:22:55:47:27:02:fe:78:34:f0:c6:5c:8c:4b:5e:80:
3e:66:df:69:9f:50:06:1b:fc:2b:87:96:e6:d5:f9:92:73:6b:
41:94:5c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:52 2025 by rpki-client