Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
File: BGLgBWSpNA_0c505USFsRqjvxk8.mft (raw, json)
Hash identifier: 0q83mmdY0ZM2lYbbRwq0J/+V1dvE24osTiW95P91tyU=
Subject key identifier: 2A:CD:A6:C6:57:1A:1B:DE:F2:AD:CD:C5:BE:F4:78:9F:F9:0E:EA:69
Authority key identifier: 04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F
Certificate issuer: /CN=0462e00564a9340ff4739d3951216c46a8efc64f
Certificate serial: 0197B7457A63A767A7815E4748265176900C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
Manifest number: 15BB
Signing time: Sat 28 Jun 2025 16:01:13 +0000
Manifest this update: Sat 28 Jun 2025 16:01:13 +0000
Manifest next update: Sun 29 Jun 2025 16:01:13 +0000
Files and hashes: 1: 73llHz_xwf_Kz0Ge7BqH9XmgDiA.roa (hash: FvCEfaxgWr3NTmhty3i7+MvXKehuHhI0xzvJoL1ljPo=)
2: BGLgBWSpNA_0c505USFsRqjvxk8.crl (hash: vWaP+ueuOAf6PJykom5WIz0St+GjdnRXkHVxPY4ypxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:7a:63:a7:67:a7:81:5e:47:48:26:51:76:90:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0462e00564a9340ff4739d3951216c46a8efc64f
Validity
Not Before: Jun 28 16:01:13 2025 GMT
Not After : Jun 29 16:01:13 2025 GMT
Subject: CN=2acda6c6571a1bdef2adcdc5bef4789ff90eea69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:98:4f:0a:f7:84:eb:e2:f9:8a:5d:d4:0f:dd:
c5:82:c6:ab:33:80:bf:cc:f1:6f:4d:f6:17:7c:2b:
77:4c:ce:c5:52:c5:e0:32:6b:a1:93:b6:46:54:76:
43:46:6a:35:0e:a0:8d:aa:9a:5a:d9:51:5d:64:77:
1f:ec:a9:b5:1f:9c:61:f1:2c:83:b6:8c:90:e6:4c:
00:a8:73:e4:59:55:ff:e1:3e:4d:26:79:e3:11:43:
0b:d7:4b:48:17:71:91:be:fc:cc:51:f6:c9:32:e4:
22:c2:3d:a9:2c:a5:2a:e7:f7:f3:44:56:04:9a:b1:
4f:f4:c9:00:f2:86:0d:9f:37:59:4d:19:74:4c:b0:
68:45:49:09:27:c9:1a:c8:95:4b:05:49:1f:dc:71:
d2:04:ca:84:19:d9:16:b6:c3:11:88:2b:6c:64:84:
5f:98:03:67:10:fd:6f:6e:69:1a:b6:85:f6:80:05:
00:79:9e:47:db:94:ca:6d:49:0d:b3:c4:96:0f:c6:
d2:e5:2b:ed:5a:c9:52:00:d4:5e:7b:f8:6f:43:a0:
95:8d:62:4c:0c:4e:fe:bb:95:c3:23:3c:8f:2c:d4:
79:08:3d:ac:4c:3a:c9:e8:b4:f1:60:2e:3d:e5:66:
27:f9:6b:13:13:4f:cd:4c:ab:24:15:52:a5:8a:bf:
53:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CD:A6:C6:57:1A:1B:DE:F2:AD:CD:C5:BE:F4:78:9F:F9:0E:EA:69
X509v3 Authority Key Identifier:
keyid:04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:4d:cf:23:d6:74:9d:a3:f9:8a:82:4d:ab:86:06:5d:e0:61:
77:02:b6:7f:e2:6a:e9:41:65:c0:d2:a7:ba:5e:6d:6d:91:be:
84:45:b0:18:72:fe:38:ad:2e:6c:7c:69:17:dd:93:71:74:d0:
fd:0e:cb:02:fd:d8:f0:72:83:6c:7a:50:21:ba:2a:ae:88:ec:
26:20:80:9c:3a:d1:66:9c:82:e9:75:3e:8f:39:6c:b3:09:12:
d6:6d:3c:b3:95:1e:45:64:97:bc:b3:81:89:59:f1:a7:f9:d4:
7f:d5:14:f7:b8:00:f2:78:7e:43:ee:96:be:99:27:10:1d:08:
d4:d0:f5:d0:42:1a:00:cf:ba:16:1b:7a:6c:c7:cd:66:c2:40:
31:0f:92:f8:fa:4a:63:95:a5:6f:49:ea:9b:14:39:ea:9f:1e:
4c:f4:db:cf:3d:6d:21:03:ea:b0:5b:be:fa:07:a6:3c:00:78:
2c:db:b4:d5:54:01:2c:d0:61:78:22:7e:3e:d8:66:27:64:d3:
bb:b8:3e:ea:10:6b:76:22:94:9c:80:96:ad:90:75:42:3a:b8:
b4:c5:34:7c:57:ba:06:05:63:00:67:c8:07:e6:14:37:44:1c:
7b:8f:fa:e8:05:ce:b1:9f:46:c4:4a:a0:39:d5:42:6f:19:e4:
32:99:64:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:52:05 2025 by rpki-client