Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
File: BGrKxxMSOFbUrmwWBUYCaE39B8s.mft (raw, json)
Hash identifier: G/bMf5j0VVCaxUFF4y3wtPBml7Yon+xthZK8UGvm57Y=
Subject key identifier: A1:D2:7A:78:DB:4C:C6:CF:C7:2F:2F:70:22:17:C6:F2:59:19:10:28
Authority key identifier: 04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB
Certificate issuer: /CN=046acac713123856d4ae6c16054602684dfd07cb
Certificate serial: 0199FD3425828A1DA50BCA69934563E40AC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
Manifest number: 052B
Signing time: Sun 19 Oct 2025 16:01:17 +0000
Manifest this update: Sun 19 Oct 2025 16:01:17 +0000
Manifest next update: Mon 20 Oct 2025 16:01:17 +0000
Files and hashes: 1: BGrKxxMSOFbUrmwWBUYCaE39B8s.crl (hash: 29K92Fr8y17dkILjJztvTTZCae1qtTDM787KO81eRg4=)
2: eKW1kuPZCd7Q2-wUVFiZHmqNaHE.roa (hash: E2zSiIhX/F8uFFD091DwlATetZWIqRRANFto/vLbHCQ=)
3: pudWPRPK-Wa6m4Pmer93cIZQrII.roa (hash: o79B3cprgcfu6XLm8f0k9H9gQI2spOpkuG4dS9wCxDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:25:82:8a:1d:a5:0b:ca:69:93:45:63:e4:0a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046acac713123856d4ae6c16054602684dfd07cb
Validity
Not Before: Oct 19 16:01:17 2025 GMT
Not After : Oct 20 16:01:17 2025 GMT
Subject: CN=a1d27a78db4cc6cfc72f2f702217c6f259191028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d9:65:dc:ed:d5:2f:3b:c1:b8:0e:84:8c:71:
43:40:ad:7a:a8:dd:f9:c8:2b:34:e9:43:8c:b4:85:
c7:c9:fa:ca:54:dc:ce:68:08:7e:ea:47:b7:a2:b5:
5b:f5:b3:06:a6:30:3a:ad:d3:c1:12:61:0d:ef:a7:
42:c0:88:a0:82:fc:4b:85:d6:c7:56:58:b5:d8:d3:
b7:19:85:67:e5:20:27:9c:65:c3:1e:45:b1:38:ee:
b3:bb:1e:2c:aa:69:3b:5a:0f:d8:26:09:69:dc:38:
eb:fc:44:a3:9e:1e:2b:c7:f1:bf:43:cb:41:44:c3:
da:37:51:d3:24:e6:05:b2:e8:90:8e:73:85:9a:82:
cb:61:8a:f9:2b:cf:41:92:9a:21:34:29:3b:29:52:
f3:43:07:c4:e7:f5:04:bd:ba:74:92:8a:36:0f:36:
92:a9:d7:0d:b9:c2:83:bc:3e:50:c6:a6:2f:1b:56:
54:dc:af:f5:1e:85:94:83:41:ca:1a:b0:5d:09:34:
4d:fb:43:65:54:2a:82:8f:49:c9:0b:26:ba:10:0f:
cd:f3:c7:33:ca:ea:55:00:e8:6c:20:eb:9d:d6:21:
fe:00:bf:9f:61:98:68:93:b7:32:3d:f6:6c:34:54:
94:45:a4:ad:a3:15:12:95:34:32:2f:74:54:20:49:
31:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D2:7A:78:DB:4C:C6:CF:C7:2F:2F:70:22:17:C6:F2:59:19:10:28
X509v3 Authority Key Identifier:
keyid:04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:62:49:1a:5a:0b:42:3b:c2:45:81:43:a3:df:06:d2:24:22:
af:59:a0:54:d1:06:b6:96:7a:b5:c3:41:6f:94:29:c0:36:3f:
9c:78:0c:86:06:1f:08:94:89:8b:e8:8c:06:96:a7:a5:d0:d2:
5f:5f:b1:4f:41:c7:e8:14:08:39:37:f2:b1:ed:79:e4:9e:94:
cf:48:08:4a:77:62:90:06:41:13:4a:6d:9f:eb:1a:20:7b:bb:
09:4e:74:b8:b7:fa:65:bf:41:f3:1b:8a:ba:27:8b:98:b4:e6:
7b:ea:34:46:7b:71:23:d5:02:e0:95:03:24:02:70:7f:63:22:
55:27:d2:be:d5:2e:78:0b:86:6f:92:2f:46:23:ac:47:10:f0:
63:88:96:fa:0f:5c:f5:73:7f:52:10:d7:c2:87:58:a7:56:bf:
5b:5c:6b:ed:be:db:09:c9:b4:d7:a9:09:0f:79:66:2c:ca:ee:
ae:0f:47:23:91:b1:3f:84:e8:0f:b1:2a:ba:d4:af:88:e8:52:
9a:3e:67:00:ea:7b:52:82:bb:05:de:c1:56:cb:3a:7d:68:d7:
df:4b:c7:cf:5f:e5:3b:1b:7b:f3:ce:1a:0c:b5:54:db:8a:24:
96:cb:90:d4:b6:3d:ec:05:90:a5:90:bd:aa:f0:f6:3f:fb:42:
61:c8:0f:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NCWCih2lC8ppk0Vj5ArDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NmFjYWM3MTMxMjM4NTZkNGFlNmMxNjA1NDYwMjY4NGRm
ZDA3Y2IwHhcNMjUxMDE5MTYwMTE3WhcNMjUxMDIwMTYwMTE3WjAzMTEwLwYDVQQD
EyhhMWQyN2E3OGRiNGNjNmNmYzcyZjJmNzAyMjE3YzZmMjU5MTkxMDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dll3O3VLzvBuA6EjHFDQK16qN35
yCs06UOMtIXHyfrKVNzOaAh+6ke3orVb9bMGpjA6rdPBEmEN76dCwIiggvxLhdbH
Vli12NO3GYVn5SAnnGXDHkWxOO6zux4sqmk7Wg/YJglp3Djr/ESjnh4rx/G/Q8tB
RMPaN1HTJOYFsuiQjnOFmoLLYYr5K89BkpohNCk7KVLzQwfE5/UEvbp0koo2DzaS
qdcNucKDvD5QxqYvG1ZU3K/1HoWUg0HKGrBdCTRN+0NlVCqCj0nJCya6EA/N88cz
yupVAOhsIOud1iH+AL+fYZhok7cyPfZsNFSURaStoxUSlTQyL3RUIEkxLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHSenjbTMbPxy8vcCIXxvJZGRAoMB8GA1UdIwQY
MBaAFARqyscTEjhW1K5sFgVGAmhN/QfLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkdyS3h4TVNPRmJVcm13V0JVWUNhRTM5QjhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS80MTg2ZTQtYTJhMC00YmRhLWJjODgt
ZTZlOTI4Y2U1MzRmLzEvQkdyS3h4TVNPRmJVcm13V0JVWUNhRTM5QjhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS80MTg2ZTQtYTJhMC00YmRhLWJjODgtZTZlOTI4Y2U1MzRm
LzEvQkdyS3h4TVNPRmJVcm13V0JVWUNhRTM5QjhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOWJJGloL
QjvCRYFDo98G0iQir1mgVNEGtpZ6tcNBb5QpwDY/nHgMhgYfCJSJi+iMBpanpdDS
X1+xT0HH6BQIOTfyse155J6Uz0gISndikAZBE0ptn+saIHu7CU50uLf6Zb9B8xuK
uieLmLTme+o0RntxI9UC4JUDJAJwf2MiVSfSvtUueAuGb5IvRiOsRxDwY4iW+g9c
9XN/UhDXwodYp1a/W1xr7b7bCcm016kJD3lmLMrurg9HI5GxP4ToD7EqutSviOhS
mj5nAOp7UoK7Bd7BVss6fWjX30vHz1/lOxt7884aDLVU24oklsuQ1LY97AWQpZC9
qvD2P/tCYcgPCg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:10 2025 by rpki-client