Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
File: BgOecctxUgSoPMJTgi3CmmLHmeY.mft (raw, json)
Hash identifier: u3379H10g/upE4kB8f5F8C45ovPI5BV1REiuXlcI/xw=
Subject key identifier: 1F:6C:EF:9B:B9:1B:79:76:B7:AC:12:1A:D6:64:A1:C4:99:14:52:F4
Authority key identifier: 06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6
Certificate issuer: /CN=06039e71cb715204a83cc253822dc29a62c799e6
Certificate serial: 0199FDD8E711C9607A1B3F10695F0DA90A88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
Manifest number: 07F4
Signing time: Sun 19 Oct 2025 19:01:14 +0000
Manifest this update: Sun 19 Oct 2025 19:01:14 +0000
Manifest next update: Mon 20 Oct 2025 19:01:14 +0000
Files and hashes: 1: AzSimOOUCBaH0nGWbesdL3p-c-Y.roa (hash: tmnAHG5c86gcxksbrSaGyYNVU434mmJFa3fZgdZ+AZw=)
2: BgOecctxUgSoPMJTgi3CmmLHmeY.crl (hash: X5KY7YZ799w1OZtxSi74GvbeWSoQWn6YFYdTeM6niDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:e7:11:c9:60:7a:1b:3f:10:69:5f:0d:a9:0a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06039e71cb715204a83cc253822dc29a62c799e6
Validity
Not Before: Oct 19 19:01:14 2025 GMT
Not After : Oct 20 19:01:14 2025 GMT
Subject: CN=1f6cef9bb91b7976b7ac121ad664a1c4991452f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:87:7b:b4:1b:6f:3a:12:6e:4e:54:48:d6:a9:
03:09:83:be:88:28:b2:7a:42:5a:c6:f1:8d:ba:6f:
8a:01:d0:d8:60:b5:56:14:25:33:a1:b0:ec:eb:9a:
de:1b:56:49:a7:e9:cc:65:6c:6b:e8:ae:e3:f1:d8:
d1:94:39:a7:36:31:01:a1:ce:e4:da:e3:81:e8:1c:
fb:a7:8a:cb:5c:ad:18:35:03:60:1c:9d:0a:d3:f9:
cc:7d:fa:c0:19:34:aa:d1:c6:b8:2a:9e:e1:23:4b:
56:90:99:86:81:d0:00:41:b0:58:e4:49:30:15:50:
10:ab:5e:28:9b:05:c4:5a:3a:13:fc:25:81:3b:09:
8f:83:e7:a2:b2:a4:65:e5:ad:5c:2d:75:40:86:89:
d6:cb:d8:7a:0e:d5:6b:d5:0c:27:87:3d:fe:95:25:
72:f4:91:2f:4e:c7:1f:1c:5b:cc:5c:4e:18:85:e6:
10:c2:ed:39:e6:0e:72:bf:50:22:bb:91:17:cb:7e:
f8:0c:00:2b:c6:68:ab:8c:c9:23:e4:37:b1:c9:be:
c4:0d:22:83:a2:50:53:6a:7f:40:33:b4:90:58:46:
90:3c:c0:a3:12:ac:1d:6b:dc:73:6a:7c:ae:95:52:
eb:43:19:5a:32:50:d8:11:d8:eb:bb:f9:4c:55:a3:
8f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6C:EF:9B:B9:1B:79:76:B7:AC:12:1A:D6:64:A1:C4:99:14:52:F4
X509v3 Authority Key Identifier:
keyid:06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:28:15:13:b2:1e:b7:6e:4d:f9:64:f3:55:5b:5d:2b:c9:65:
62:d6:2d:cf:63:36:9e:dc:e5:ed:c3:e1:73:59:1f:cb:99:99:
f0:11:52:78:db:74:de:0e:41:26:5a:86:3b:fe:19:1b:5e:03:
80:5b:e4:9e:94:75:15:ee:ff:20:c9:24:76:92:48:d3:e6:0c:
9b:0b:91:3e:ce:6e:f0:80:c2:f1:e8:cd:c0:1a:55:19:14:6b:
38:f8:82:6d:51:cb:a6:0d:c5:2a:4a:d0:bf:5a:02:09:b2:c2:
a3:17:08:10:a2:fc:94:92:a0:62:72:9e:13:d7:f9:b2:af:28:
ec:3b:6b:67:68:3d:b4:c7:73:37:e4:72:dd:2f:ef:fe:7b:c3:
8a:32:5c:2e:dd:96:39:88:99:07:9f:d7:c7:16:81:6a:90:24:
b4:8b:ef:78:b0:4f:18:4f:36:f4:6e:2a:d4:24:03:4c:1f:b9:
a1:9c:ed:71:08:4a:b2:ac:5e:19:48:24:bb:42:b9:fe:02:87:
2f:79:a8:b1:a0:e8:86:a4:3e:e9:c5:a3:05:21:56:6b:af:2a:
93:41:f0:32:d9:18:a8:e6:41:f7:65:4e:0e:8f:ab:7f:fb:d9:
e6:b0:15:bd:e7:46:5f:89:1c:39:85:74:43:72:db:c9:4d:a8:
f5:b9:58:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:07:32 2025 by rpki-client