Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
File: BG82Rli2TivxUNIPyDjDZCB5deI.mft (raw, json)
Hash identifier: /e6xFEcqiwn+9BaeNSvnJfmumEI3zeK5DEg+xT/DjUM=
Subject key identifier: 68:60:F3:4D:82:22:05:16:BA:68:00:E5:AE:DD:64:17:F7:33:D4:77
Authority key identifier: 04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2
Certificate issuer: /CN=046f364658b64e2bf150d20fc838c364207975e2
Certificate serial: 019A006C6EBEFF3C4252BF4E89C412F40839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 07:01:37 +0000
Manifest this update: Mon 20 Oct 2025 07:01:37 +0000
Manifest next update: Tue 21 Oct 2025 07:01:37 +0000
Files and hashes: 1: BG82Rli2TivxUNIPyDjDZCB5deI.crl (hash: FeBWBMcSWP/L6vvPX+0BrbcN0CETDKdouxPsivmL/Jc=)
2: qxAUvip_8lZbKoAfeyu3yfK1MRA.roa (hash: Wv+fjRl0zo+z70zGiW88GBq2MX8dxKNwzn9322Y6qM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:6e:be:ff:3c:42:52:bf:4e:89:c4:12:f4:08:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046f364658b64e2bf150d20fc838c364207975e2
Validity
Not Before: Oct 20 07:01:37 2025 GMT
Not After : Oct 21 07:01:37 2025 GMT
Subject: CN=6860f34d82220516ba6800e5aedd6417f733d477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a1:dd:a0:12:bd:b4:1e:7d:17:9d:34:0a:a1:
1e:70:3f:86:4d:b6:53:65:ca:e5:dc:96:c1:a7:91:
5a:10:f9:40:1a:1a:83:0e:aa:8f:b0:8e:d4:0d:d0:
06:2f:fd:09:fa:a3:71:42:64:d1:e2:1a:2e:24:60:
d5:8e:51:fa:f6:b8:48:f5:61:45:c7:18:e8:39:15:
3e:c9:f2:e8:d1:60:7c:90:68:35:d1:75:04:b1:76:
f1:6e:88:bf:d6:76:f1:8f:a4:4d:45:3d:45:97:cf:
aa:a7:96:2f:63:e5:ae:02:b7:e6:cf:60:05:ac:44:
fe:73:f4:da:0e:4d:10:ed:78:e5:2e:60:66:a7:63:
85:c1:07:80:46:f7:5c:b1:e6:02:5b:76:47:27:e9:
18:33:86:23:a4:cf:91:43:15:90:27:ed:27:f0:58:
83:98:0d:a3:5e:03:66:a6:c9:5e:20:29:b9:47:51:
d0:58:0d:f2:04:dd:0f:9e:b1:dc:de:7e:21:9f:03:
01:b5:c1:37:47:a3:23:c3:be:ee:26:ee:e1:f6:cc:
0d:85:01:cb:f9:89:5f:49:cc:a3:81:1d:23:06:21:
da:22:01:ea:76:56:76:00:3e:49:3e:cf:2f:db:89:
be:72:97:dd:79:14:ac:1d:67:62:70:4c:1f:cf:cc:
87:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:60:F3:4D:82:22:05:16:BA:68:00:E5:AE:DD:64:17:F7:33:D4:77
X509v3 Authority Key Identifier:
keyid:04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3f:b8:f0:bc:c5:1c:67:f3:35:2a:98:e9:a2:85:ac:eb:d5:
d8:82:f2:88:c5:17:4f:50:93:f5:d9:70:7a:22:28:48:0c:2c:
dc:15:f8:bd:d3:3b:f1:a9:bd:b5:9b:03:bb:6f:49:a1:a3:42:
10:15:cb:bf:1e:a3:7e:f0:8e:6c:4b:10:a1:2b:22:0a:74:91:
b5:b4:f2:83:8d:ce:c1:83:fc:92:32:e2:d3:82:0f:ae:ae:ad:
fd:2c:95:d1:9f:6b:4c:a0:26:f6:28:ef:3b:f0:ec:ef:cd:60:
9d:4c:db:9b:3c:13:20:bf:31:78:1d:cf:1c:53:f2:f9:2b:5a:
82:51:32:06:31:0a:1b:72:69:b8:4b:c9:c9:14:a9:8a:0e:f5:
3c:f1:99:6d:25:7d:21:3b:4c:62:47:6c:52:67:f0:27:c1:47:
bb:56:a1:10:b7:51:71:23:aa:08:0b:c3:c7:1e:5c:58:35:55:
ef:9c:7d:5a:4f:7b:f5:8e:40:8a:e1:f1:3c:ef:21:96:da:c1:
cf:09:9e:72:5f:c5:c2:48:ae:01:57:27:a4:de:28:d0:6c:33:
ee:94:6b:de:69:ed:c2:fa:ce:ce:fa:9e:9e:a7:25:3d:b2:fd:
d4:90:0a:b6:76:7c:36:40:b9:70:a8:02:5d:66:8e:51:0a:6e:
18:e4:9b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:53:12 2025 by rpki-client