Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
File: BGLgBWSpNA_0c505USFsRqjvxk8.mft (raw, json)
Hash identifier: 6N2k+ba8gzkRrDz40S9aqfl2bA+MPcsGeX/Qrlx4PRw=
Subject key identifier: E6:05:40:68:C8:61:84:BA:D4:CE:DC:63:D0:27:0D:D1:97:67:F4:E3
Authority key identifier: 04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F
Certificate issuer: /CN=0462e00564a9340ff4739d3951216c46a8efc64f
Certificate serial: 0198D7061FD005B320B3A0372489B2FB95F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 13:02:39 +0000
Manifest this update: Sat 23 Aug 2025 13:02:39 +0000
Manifest next update: Sun 24 Aug 2025 13:02:39 +0000
Files and hashes: 1: 73llHz_xwf_Kz0Ge7BqH9XmgDiA.roa (hash: FvCEfaxgWr3NTmhty3i7+MvXKehuHhI0xzvJoL1ljPo=)
2: BGLgBWSpNA_0c505USFsRqjvxk8.crl (hash: xI/5d8duNgDNgV6//aEFH2cEdnbTck7DFFHSn2YW2ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:1f:d0:05:b3:20:b3:a0:37:24:89:b2:fb:95:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0462e00564a9340ff4739d3951216c46a8efc64f
Validity
Not Before: Aug 23 13:02:39 2025 GMT
Not After : Aug 24 13:02:39 2025 GMT
Subject: CN=e6054068c86184bad4cedc63d0270dd19767f4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f8:58:23:fa:ed:7d:ff:9b:cf:7f:86:4e:09:
31:fd:67:11:98:57:75:a5:04:e3:36:3c:3a:4a:a8:
1b:df:6d:6e:e8:83:bc:58:5d:44:3f:4f:ed:6d:8e:
64:80:53:32:fc:4a:5d:28:e3:0f:a8:e1:f4:73:7a:
d8:24:56:12:ae:4c:ed:bb:e1:d2:91:1a:d8:fe:ba:
02:34:49:ec:7f:5b:fd:68:db:68:d7:e4:c2:22:f8:
93:de:ea:ec:d4:46:db:de:d4:9a:a0:87:61:5c:07:
39:81:49:eb:15:e8:ed:3b:3c:08:da:e8:21:bf:19:
a2:8b:e1:b6:f9:e3:be:22:85:3f:cb:8c:10:57:1e:
e3:e1:43:14:79:ad:84:cd:84:ed:89:b4:f0:d8:46:
73:bc:e0:ee:85:c2:ce:4f:50:19:39:88:16:86:cf:
ed:b7:a8:82:fb:a1:19:f1:bc:60:ec:9d:06:a1:06:
66:0b:2e:5a:9f:35:ad:d8:6a:4e:ca:c7:41:67:f4:
2c:75:4c:41:f5:c0:b9:20:af:d6:33:fd:38:b9:36:
88:31:66:71:38:3a:a2:f2:cf:73:b6:c9:a3:b7:46:
d5:f2:f0:66:be:95:83:db:6e:a4:3f:98:43:5c:2f:
b9:02:0f:24:a3:73:35:15:26:c3:31:4f:f6:a2:f6:
ab:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:05:40:68:C8:61:84:BA:D4:CE:DC:63:D0:27:0D:D1:97:67:F4:E3
X509v3 Authority Key Identifier:
keyid:04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:fd:d8:1a:32:9b:e4:51:ab:1b:e8:21:25:18:6e:58:61:cc:
60:b1:19:a1:f0:80:a7:8b:98:a8:95:00:a8:de:7e:39:24:8e:
41:1a:d2:dd:0c:a5:0a:5c:06:9a:5e:36:7a:fa:74:bb:9c:52:
ed:99:f9:c9:bc:7e:43:f2:46:aa:14:e2:3a:33:b9:00:49:f5:
a9:40:39:f4:08:c3:99:97:6b:bb:5d:e1:7e:bb:51:8f:ab:30:
39:15:d4:34:24:13:25:be:95:c9:72:b0:ed:a5:a5:6e:4f:f7:
61:18:53:33:f3:76:a5:51:77:d8:92:dd:77:85:10:4f:5c:40:
06:74:bf:20:3d:1f:45:4d:8c:8c:d6:98:0e:f6:01:bf:0b:25:
61:4b:30:6c:54:7e:96:e0:eb:30:b2:83:2d:e3:b6:8c:ae:19:
23:99:e6:16:e6:18:98:7e:47:46:cb:8e:d7:37:99:8f:80:03:
7b:aa:0e:02:0a:9d:09:a4:7f:45:4a:f8:07:cd:d2:60:81:1b:
89:a3:34:b9:87:68:14:e9:94:42:cd:6e:74:07:b2:98:f2:eb:
1d:f3:d2:72:a5:a7:ee:3a:24:f7:97:8d:78:2e:ab:37:59:55:
02:05:b5:f9:f2:18:60:89:d1:43:df:ba:c7:75:68:3d:06:cb:
55:a4:06:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBh/QBbMgs6A3JImy+5XyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NjJlMDA1NjRhOTM0MGZmNDczOWQzOTUxMjE2YzQ2YThl
ZmM2NGYwHhcNMjUwODIzMTMwMjM5WhcNMjUwODI0MTMwMjM5WjAzMTEwLwYDVQQD
EyhlNjA1NDA2OGM4NjE4NGJhZDRjZWRjNjNkMDI3MGRkMTk3NjdmNGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/hYI/rtff+bz3+GTgkx/WcRmFd1
pQTjNjw6Sqgb321u6IO8WF1EP0/tbY5kgFMy/EpdKOMPqOH0c3rYJFYSrkztu+HS
kRrY/roCNEnsf1v9aNto1+TCIviT3urs1Ebb3tSaoIdhXAc5gUnrFejtOzwI2ugh
vxmii+G2+eO+IoU/y4wQVx7j4UMUea2EzYTtibTw2EZzvODuhcLOT1AZOYgWhs/t
t6iC+6EZ8bxg7J0GoQZmCy5anzWt2GpOysdBZ/QsdUxB9cC5IK/WM/04uTaIMWZx
ODqi8s9ztsmjt0bV8vBmvpWD226kP5hDXC+5Ag8ko3M1FSbDMU/2ovargwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOYFQGjIYYS61M7cY9AnDdGXZ/TjMB8GA1UdIwQY
MBaAFARi4AVkqTQP9HOdOVEhbEao78ZPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkdMZ0JXU3BOQV8wYzUwNVVTRnNScWp2eGs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC84YzlhYTgtYzEwYS00ZTJkLTliNjQt
MjI3MzAyZDU5NTcyLzEvQkdMZ0JXU3BOQV8wYzUwNVVTRnNScWp2eGs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC84YzlhYTgtYzEwYS00ZTJkLTliNjQtMjI3MzAyZDU5NTcy
LzEvQkdMZ0JXU3BOQV8wYzUwNVVTRnNScWp2eGs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeP3YGjKb
5FGrG+ghJRhuWGHMYLEZofCAp4uYqJUAqN5+OSSOQRrS3QylClwGml42evp0u5xS
7Zn5ybx+Q/JGqhTiOjO5AEn1qUA59AjDmZdru13hfrtRj6swORXUNCQTJb6VyXKw
7aWlbk/3YRhTM/N2pVF32JLdd4UQT1xABnS/ID0fRU2MjNaYDvYBvwslYUswbFR+
luDrMLKDLeO2jK4ZI5nmFuYYmH5HRsuO1zeZj4ADe6oOAgqdCaR/RUr4B83SYIEb
iaM0uYdoFOmUQs1udAeymPLrHfPScqWn7jok95eNeC6rN1lVAgW1+fIYYInRQ9+6
x3VoPQbLVaQG/Q==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:22:54 2025 by rpki-client