
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
File: BGLgBWSpNA_0c505USFsRqjvxk8.mft (raw, json)
Hash identifier: O0y1U5tPt8WKufkcAclkAtcvLc5IhHN9tDUYbJOT4bs=
Subject key identifier: 20:20:AE:64:7D:B2:C0:B7:03:38:10:4F:DA:94:02:5C:09:72:12:D9
Authority key identifier: 04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F
Certificate issuer: /CN=0462e00564a9340ff4739d3951216c46a8efc64f
Certificate serial: 019A04487AD5C49EB3F6316964307FE190E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
Manifest number: 16EC
Signing time: Tue 21 Oct 2025 01:00:50 +0000
Manifest this update: Tue 21 Oct 2025 01:00:50 +0000
Manifest next update: Wed 22 Oct 2025 01:00:50 +0000
Files and hashes: 1: 73llHz_xwf_Kz0Ge7BqH9XmgDiA.roa (hash: FvCEfaxgWr3NTmhty3i7+MvXKehuHhI0xzvJoL1ljPo=)
2: BGLgBWSpNA_0c505USFsRqjvxk8.crl (hash: n2G4lqFZc0P4H2c3tAYGe2FJsxdUpTU9mAM6EOymSYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:48:7a:d5:c4:9e:b3:f6:31:69:64:30:7f:e1:90:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0462e00564a9340ff4739d3951216c46a8efc64f
Validity
Not Before: Oct 21 01:00:50 2025 GMT
Not After : Oct 22 01:00:50 2025 GMT
Subject: CN=2020ae647db2c0b70338104fda94025c097212d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:79:b9:e3:56:2d:46:77:38:9f:b1:a3:7d:03:
5e:de:ca:3e:e5:21:25:be:e8:25:f3:51:74:e4:42:
a1:38:5e:49:57:8e:5a:ae:59:6b:b7:b5:f4:15:fe:
38:08:f2:8c:35:3a:8f:62:a9:91:db:0e:51:ea:1d:
c7:4d:7a:da:69:83:40:d2:76:53:87:3c:bf:85:01:
64:b3:71:1b:ca:08:e8:ac:67:5b:b5:8a:74:73:c8:
d0:ec:8c:f0:e1:69:a1:8a:ce:b5:30:db:40:63:21:
47:44:2a:77:5f:67:8a:82:a0:5d:68:03:ce:0c:f8:
ae:de:02:a4:f2:b2:e6:f1:8b:fe:7d:e5:a9:4a:c6:
01:32:69:ba:06:0d:18:b2:7f:a0:6e:4d:3a:54:23:
de:a3:34:4f:18:64:6f:07:c4:35:31:61:75:dd:c8:
08:35:50:8a:50:20:6f:1e:b6:2f:da:21:da:bf:98:
7c:c3:fa:04:31:f8:1b:bd:f6:13:e4:55:69:1a:be:
8e:66:ea:51:b8:30:62:e4:e9:0e:60:f6:21:d9:77:
31:5a:d7:6e:5b:8e:e2:1a:b9:95:bd:c0:3d:f6:6b:
ff:42:e1:44:0e:15:1b:b5:1f:8c:15:ad:36:f9:5b:
b5:07:24:df:17:c2:5a:54:f1:04:00:41:8d:1a:7b:
cb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:20:AE:64:7D:B2:C0:B7:03:38:10:4F:DA:94:02:5C:09:72:12:D9
X509v3 Authority Key Identifier:
keyid:04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b5:2d:8c:64:46:ae:49:19:a2:62:ac:68:5e:7a:3d:ea:88:
f3:3e:5c:09:69:05:cf:20:55:f4:c2:99:29:06:c9:bf:65:a0:
9f:28:14:16:3b:d8:38:a8:4f:ef:6b:5d:09:11:4b:0e:b7:64:
8c:02:8b:69:9c:a6:f9:02:68:60:8c:ab:e1:6d:d3:6d:5c:24:
6c:46:18:d5:71:47:c6:f1:36:b2:f7:a8:44:60:54:40:c8:06:
51:35:e6:5e:4d:5b:4d:c2:51:d9:cd:cd:cd:4b:d9:3c:4a:b6:
36:e3:ae:cc:63:d1:7a:62:76:81:ac:cc:8a:eb:08:05:e3:f5:
06:3f:d5:0a:aa:cf:d1:f7:e1:de:d7:dd:f8:50:0e:58:c1:98:
13:ea:0d:45:10:e3:c2:32:ec:1f:b6:91:c5:29:b4:b9:07:83:
59:49:e5:c4:8a:2c:7d:10:c3:44:4a:7f:3b:2d:5e:db:62:08:
cd:62:a3:27:ed:78:97:55:18:1f:2c:f5:f0:97:ed:5f:53:d6:
04:67:c7:9c:98:38:44:32:92:76:ce:30:f3:44:0a:26:36:28:
f5:04:10:4d:41:4c:92:e6:4d:17:1d:a1:06:f7:e0:c4:0a:b6:
b7:00:14:bd:13:59:95:35:fd:a3:24:84:9e:34:ee:43:c8:6b:
e2:04:18:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoESHrVxJ6z9jFpZDB/4ZDiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NjJlMDA1NjRhOTM0MGZmNDczOWQzOTUxMjE2YzQ2YThl
ZmM2NGYwHhcNMjUxMDIxMDEwMDUwWhcNMjUxMDIyMDEwMDUwWjAzMTEwLwYDVQQD
EygyMDIwYWU2NDdkYjJjMGI3MDMzODEwNGZkYTk0MDI1YzA5NzIxMmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3m541YtRnc4n7GjfQNe3so+5SEl
vugl81F05EKhOF5JV45arllrt7X0Ff44CPKMNTqPYqmR2w5R6h3HTXraaYNA0nZT
hzy/hQFks3EbygjorGdbtYp0c8jQ7Izw4Wmhis61MNtAYyFHRCp3X2eKgqBdaAPO
DPiu3gKk8rLm8Yv+feWpSsYBMmm6Bg0Ysn+gbk06VCPeozRPGGRvB8Q1MWF13cgI
NVCKUCBvHrYv2iHav5h8w/oEMfgbvfYT5FVpGr6OZupRuDBi5OkOYPYh2XcxWtdu
W47iGrmVvcA99mv/QuFEDhUbtR+MFa02+Vu1ByTfF8JaVPEEAEGNGnvLFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAgrmR9ssC3AzgQT9qUAlwJchLZMB8GA1UdIwQY
MBaAFARi4AVkqTQP9HOdOVEhbEao78ZPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkdMZ0JXU3BOQV8wYzUwNVVTRnNScWp2eGs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC84YzlhYTgtYzEwYS00ZTJkLTliNjQt
MjI3MzAyZDU5NTcyLzEvQkdMZ0JXU3BOQV8wYzUwNVVTRnNScWp2eGs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC84YzlhYTgtYzEwYS00ZTJkLTliNjQtMjI3MzAyZDU5NTcy
LzEvQkdMZ0JXU3BOQV8wYzUwNVVTRnNScWp2eGs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLUtjGRG
rkkZomKsaF56PeqI8z5cCWkFzyBV9MKZKQbJv2WgnygUFjvYOKhP72tdCRFLDrdk
jAKLaZym+QJoYIyr4W3TbVwkbEYY1XFHxvE2sveoRGBUQMgGUTXmXk1bTcJR2c3N
zUvZPEq2NuOuzGPRemJ2gazMiusIBeP1Bj/VCqrP0ffh3tfd+FAOWMGYE+oNRRDj
wjLsH7aRxSm0uQeDWUnlxIosfRDDREp/Oy1e22IIzWKjJ+14l1UYHyz18JftX1PW
BGfHnJg4RDKSds4w80QKJjYo9QQQTUFMkuZNFx2hBvfgxAq2twAUvRNZlTX9oySE
njTuQ8hr4gQYjg==
-----END CERTIFICATE-----
Generated at Tue Oct 21 05:27:56 2025 by rpki-client