
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
File: Bgit6Gocz3pIO0wpYgRduNDvgm0.mft (raw, json)
Hash identifier: +1NZvzf9YWcgRC4kWNAlbNyzbV+aZcZ9Uh3PSlYbVnc=
Subject key identifier: F4:F4:1B:9C:D1:2D:57:E6:CA:93:A5:1C:64:94:DD:6F:B2:D1:63:1E
Authority key identifier: 06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
Certificate issuer: /CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Certificate serial: 0199FBEAB21C30837FB27C7DC930F5901307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:01:26 +0000
Manifest this update: Sun 19 Oct 2025 10:01:26 +0000
Manifest next update: Mon 20 Oct 2025 10:01:26 +0000
Files and hashes: 1: Bgit6Gocz3pIO0wpYgRduNDvgm0.crl (hash: JEjedMh2IX0F5JMhi4LzfPyf9VYtCyTkCnIFl4I5gaM=)
2: GqvJxk6cmO7Tb_I2mDvjscrokEE.roa (hash: yepd+YPVUD07Z1nRvo/cI6UMDSXFFH47vweszFDmLW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:b2:1c:30:83:7f:b2:7c:7d:c9:30:f5:90:13:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Validity
Not Before: Oct 19 10:01:26 2025 GMT
Not After : Oct 20 10:01:26 2025 GMT
Subject: CN=f4f41b9cd12d57e6ca93a51c6494dd6fb2d1631e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e7:b0:88:06:09:fe:57:67:d9:cc:d7:70:9a:
b0:d6:b1:0d:84:5e:32:59:87:da:29:87:31:f1:72:
88:49:26:97:ed:e4:83:c3:4c:8c:b1:59:76:48:11:
f0:8e:68:6a:07:7a:89:68:a2:3f:b8:74:2d:0c:f8:
56:1a:d8:f3:80:32:e5:db:a3:60:f8:46:5f:61:f4:
57:cf:8f:b2:da:49:7f:61:0b:72:7c:74:5e:db:4a:
a1:42:43:6b:82:36:d8:a0:a3:fb:af:a8:6e:9a:b5:
9f:40:4c:ed:6c:ff:dd:bb:a5:4f:ee:02:9c:9d:61:
7b:c7:c9:93:c9:90:39:f0:98:8a:20:f0:5a:9c:20:
86:c5:1b:cd:d7:7e:2f:b3:f6:85:e5:89:cd:94:8b:
a0:95:c2:b8:4e:f5:1b:a3:29:03:6b:69:cc:ea:b9:
cb:a4:cc:e9:da:e2:b0:a6:70:b7:f9:99:f7:09:56:
de:d1:b6:fe:25:85:30:fe:e0:9e:a0:cd:aa:a0:65:
82:11:09:df:2c:00:96:41:45:37:ce:b7:21:fd:b1:
f2:5c:61:91:a5:08:f9:53:95:9b:be:3f:6b:b5:37:
a0:bb:b5:7d:3f:59:8b:fe:0a:c8:b9:97:45:bf:1a:
68:99:bb:97:d4:76:a2:7a:5f:28:27:48:d1:34:98:
31:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F4:1B:9C:D1:2D:57:E6:CA:93:A5:1C:64:94:DD:6F:B2:D1:63:1E
X509v3 Authority Key Identifier:
keyid:06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ff:e4:42:29:19:00:bb:9d:40:85:00:45:d3:18:9e:ca:21:
4c:58:2a:8f:c3:c9:9e:14:f3:44:25:16:62:10:90:9e:74:96:
5b:e2:d0:65:21:cd:66:55:af:cb:aa:79:b7:06:e9:87:a4:66:
d2:36:2f:aa:01:67:4a:b9:2b:30:d2:e8:b3:a9:34:dd:85:3f:
da:8a:64:c6:54:1c:17:65:74:49:62:e3:58:aa:ee:b6:68:de:
aa:42:b2:2e:c2:5c:e5:db:19:80:a8:2d:34:96:18:44:d7:33:
19:2a:2f:00:7f:26:05:0a:3d:57:fc:91:cc:25:cf:2f:c4:1f:
d9:cc:8e:a7:9e:37:61:ac:fb:64:db:6d:6e:d0:a3:ec:ec:d1:
27:f3:46:21:d0:52:f0:45:18:cb:a5:d9:2a:c3:0f:2e:1c:fa:
1b:09:07:0b:d4:9c:fd:33:49:c5:e1:35:fe:e6:91:8b:54:39:
96:c1:cf:e0:42:2e:18:f5:97:96:25:1b:e1:97:82:b2:fc:72:
52:e0:89:ff:f9:e2:d0:9e:d1:b6:1b:a3:06:e6:fd:cc:d1:f9:
5f:50:16:6b:fc:84:43:96:f4:43:2a:3a:95:bb:80:d5:5f:93:
93:d0:ad:4b:d6:1d:ac:82:df:f1:80:d7:bb:64:01:07:bc:42:
e4:e7:f3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:45:47 2025 by rpki-client