Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
File: Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft (raw, json)
Hash identifier: hP0OrKsqU3LreOSy8iE1SJt9xeR9U52G3xYDhCvE0P4=
Subject key identifier: B3:97:C3:62:55:4F:07:B1:77:A1:5D:DC:15:40:C9:F2:7E:08:05:0D
Authority key identifier: 06:09:7A:72:E4:AE:40:B6:B9:92:9B:72:F8:1E:FD:71:C5:17:DD:98
Certificate issuer: /CN=06097a72e4ae40b6b9929b72f81efd71c517dd98
Certificate serial: 0197B5C4B7EE6A82323E67B7197FED16ED18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
Manifest number: 01D7
Signing time: Sat 28 Jun 2025 09:00:57 +0000
Manifest this update: Sat 28 Jun 2025 09:00:57 +0000
Manifest next update: Sun 29 Jun 2025 09:00:57 +0000
Files and hashes: 1: Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl (hash: wYLJXuB53Kg2wEJNODnRj6tdVErGrZWdoAOuafL1JtQ=)
2: aTqNBiMtHyqY4sjo2vUby0yJMKk.roa (hash: 8tR80jRMgENDFDI+mB0B/a9/v+rAAXYdo53Fd7KchX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:b7:ee:6a:82:32:3e:67:b7:19:7f:ed:16:ed:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06097a72e4ae40b6b9929b72f81efd71c517dd98
Validity
Not Before: Jun 28 09:00:57 2025 GMT
Not After : Jun 29 09:00:57 2025 GMT
Subject: CN=b397c362554f07b177a15ddc1540c9f27e08050d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:c8:f8:e7:9a:65:a0:18:18:32:92:3c:13:b4:
25:dd:de:d8:e7:c9:59:92:a9:26:90:ac:d6:20:57:
ba:ba:9f:41:f1:7a:06:ef:55:c4:13:10:2d:d7:5a:
ac:a0:69:00:61:9e:b2:ee:6c:ce:8b:2b:64:8b:69:
a1:f1:b8:1d:10:21:1f:d1:70:2f:c9:f8:68:9a:a0:
ea:bb:e6:ae:12:6d:ad:f8:c7:39:73:94:78:46:0a:
89:45:d8:fb:9f:c7:d0:01:07:59:fc:b8:1d:c1:3e:
47:a0:d0:4a:d5:6f:65:17:ac:7a:22:78:b2:b3:5d:
bf:29:d7:c9:09:c2:fd:25:97:65:c2:f9:24:40:d0:
e4:13:c2:aa:1f:a8:e9:6b:f9:71:a8:92:d5:1d:50:
7e:0f:0d:d9:ac:a0:27:84:8a:44:1f:ae:12:f8:a4:
2a:d9:4f:d4:bd:7f:2a:fe:49:8a:c4:b0:e5:43:ee:
7d:db:34:35:7f:56:50:b4:2f:6a:10:a5:e3:53:ab:
d0:c4:d1:43:da:a3:51:eb:9e:4a:46:22:c1:39:c9:
05:4d:fa:5f:43:6f:aa:08:48:cd:14:46:52:7e:98:
47:fe:42:41:f8:f1:71:e3:1a:a3:00:be:0a:0e:db:
5a:f0:cf:6d:10:0f:39:c3:b5:5c:ad:73:ef:48:66:
35:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:97:C3:62:55:4F:07:B1:77:A1:5D:DC:15:40:C9:F2:7E:08:05:0D
X509v3 Authority Key Identifier:
keyid:06:09:7A:72:E4:AE:40:B6:B9:92:9B:72:F8:1E:FD:71:C5:17:DD:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:3e:6d:07:bf:5e:aa:5c:32:38:cd:c1:6a:55:9e:1f:41:32:
5e:d5:72:e6:b4:9f:db:8a:ac:d1:01:e6:e5:97:2b:13:dc:55:
29:45:0a:98:bd:b1:5e:89:6d:6c:79:0e:ef:17:47:2c:51:7e:
52:23:c8:5e:d0:57:71:20:b2:8d:35:ec:56:20:c6:06:8b:7a:
72:f3:08:ca:c1:1d:3f:18:1f:22:06:2e:a6:a6:d8:6e:18:ab:
de:74:d8:cc:9d:1e:50:f1:7d:a6:db:1c:4f:ca:5e:54:4e:65:
ed:1c:92:4b:6c:29:7c:11:40:28:d2:4a:8b:47:0c:23:62:db:
0b:b1:7a:d1:d6:1f:df:db:c0:66:d5:7a:33:23:17:9b:a5:d6:
ed:79:ce:19:d9:10:64:10:95:06:fc:a2:05:5a:12:d7:3b:da:
5c:5e:18:9d:1c:32:07:73:25:cd:2a:5b:51:0d:cc:9c:50:8c:
cb:e3:9d:5a:5d:56:f1:af:3b:f2:a3:21:f8:88:29:f1:c7:ea:
8e:8b:14:0b:7b:49:01:e8:63:fb:0f:1b:88:94:8a:2a:c1:8e:
4a:6d:47:48:74:c4:43:73:27:11:bc:bf:87:3e:8e:e5:0f:7f:
01:ab:ae:cf:41:53:a3:45:4b:2c:f3:bd:5a:e5:a3:52:d3:9b:
0a:8a:67:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1xLfuaoIyPme3GX/tFu0YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MDk3YTcyZTRhZTQwYjZiOTkyOWI3MmY4MWVmZDcxYzUx
N2RkOTgwHhcNMjUwNjI4MDkwMDU3WhcNMjUwNjI5MDkwMDU3WjAzMTEwLwYDVQQD
EyhiMzk3YzM2MjU1NGYwN2IxNzdhMTVkZGMxNTQwYzlmMjdlMDgwNTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+cj455ploBgYMpI8E7Ql3d7Y58lZ
kqkmkKzWIFe6up9B8XoG71XEExAt11qsoGkAYZ6y7mzOiytki2mh8bgdECEf0XAv
yfhomqDqu+auEm2t+Mc5c5R4RgqJRdj7n8fQAQdZ/LgdwT5HoNBK1W9lF6x6Iniy
s12/KdfJCcL9JZdlwvkkQNDkE8KqH6jpa/lxqJLVHVB+Dw3ZrKAnhIpEH64S+KQq
2U/UvX8q/kmKxLDlQ+592zQ1f1ZQtC9qEKXjU6vQxNFD2qNR655KRiLBOckFTfpf
Q2+qCEjNFEZSfphH/kJB+PFx4xqjAL4KDtta8M9tEA85w7VcrXPvSGY1PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOXw2JVTwexd6Fd3BVAyfJ+CAUNMB8GA1UdIwQY
MBaAFAYJenLkrkC2uZKbcvge/XHFF92YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmdsNmN1U3VRTGE1a3B0eS1CNzljY1VYM1pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zYTEwOWEtOWIzMi00NWE4LTliMGMt
N2EwMjUxN2ZkOWQyLzEvQmdsNmN1U3VRTGE1a3B0eS1CNzljY1VYM1pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zYTEwOWEtOWIzMi00NWE4LTliMGMtN2EwMjUxN2ZkOWQy
LzEvQmdsNmN1U3VRTGE1a3B0eS1CNzljY1VYM1pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3j5tB79e
qlwyOM3BalWeH0EyXtVy5rSf24qs0QHm5ZcrE9xVKUUKmL2xXoltbHkO7xdHLFF+
UiPIXtBXcSCyjTXsViDGBot6cvMIysEdPxgfIgYupqbYbhir3nTYzJ0eUPF9ptsc
T8peVE5l7RySS2wpfBFAKNJKi0cMI2LbC7F60dYf39vAZtV6MyMXm6XW7XnOGdkQ
ZBCVBvyiBVoS1zvaXF4YnRwyB3MlzSpbUQ3MnFCMy+OdWl1W8a878qMh+Igp8cfq
josUC3tJAehj+w8biJSKKsGOSm1HSHTEQ3MnEby/hz6O5Q9/Aauuz0FTo0VLLPO9
WuWjUtObCopnyw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:10 2025 by rpki-client