
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
File: BGaUC2ukf4zBCntHjkBWPLuKt_A.mft (raw, json)
Hash identifier: MSWq8wqTPZ43G6f3rX9fFXcLJtIIRMGQXNygCJMRRiQ=
Subject key identifier: C3:E3:95:3C:FA:CB:A4:0E:01:99:E1:93:A7:79:46:E5:95:98:81:87
Authority key identifier: 04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0
Certificate issuer: /CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
Certificate serial: 019A02912BF36192335B693069BA09408F15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
Manifest number: 0B9C
Signing time: Mon 20 Oct 2025 17:00:59 +0000
Manifest this update: Mon 20 Oct 2025 17:00:59 +0000
Manifest next update: Tue 21 Oct 2025 17:00:59 +0000
Files and hashes: 1: BGaUC2ukf4zBCntHjkBWPLuKt_A.crl (hash: AO8pqa7kHrLIoYV5XSpYq4LeKACrnqQ9GTkv7BOgJbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:91:2b:f3:61:92:33:5b:69:30:69:ba:09:40:8f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
Validity
Not Before: Oct 20 17:00:59 2025 GMT
Not After : Oct 21 17:00:59 2025 GMT
Subject: CN=c3e3953cfacba40e0199e193a77946e595988187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c8:5a:91:72:c1:3a:56:d3:66:7f:d4:af:b4:
84:af:ca:64:93:65:a1:d0:ae:9b:82:82:34:93:98:
1f:de:20:24:40:30:5f:e5:c1:f8:40:2e:de:79:b2:
81:a8:ec:89:69:d2:9e:87:fc:67:03:9f:2e:07:be:
ba:53:a7:2c:bd:24:e8:07:0d:fd:12:52:27:5d:38:
94:0f:ec:7c:de:08:ae:0b:d1:fc:c7:a3:af:d2:61:
94:ca:39:01:6c:b7:40:f0:0e:0e:c1:a9:86:9b:77:
b2:cf:63:ff:3c:1e:ad:a6:80:b2:ec:83:16:d3:7b:
6e:bd:07:37:f7:3b:05:f1:91:62:08:13:04:59:af:
27:17:57:c4:fb:1a:0b:2b:a0:5a:1f:64:8b:bf:54:
ae:04:3e:7e:2f:fe:95:97:3c:f8:7e:49:a2:d9:e3:
5a:91:c2:b4:5f:0b:6a:9c:c6:b9:f8:d9:6d:b2:ab:
07:51:15:d3:a4:70:fa:15:7e:93:1e:a7:8d:73:aa:
e3:36:a8:e0:70:1c:ba:a5:96:c3:03:a5:53:66:69:
2b:d1:e7:b8:dd:b7:39:2c:32:2e:91:a8:b1:59:a3:
20:19:92:3a:5b:66:d4:94:3a:a7:0a:47:a7:c5:8d:
b2:c8:75:03:d2:ae:fc:7a:f3:3f:16:38:6d:47:ac:
eb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E3:95:3C:FA:CB:A4:0E:01:99:E1:93:A7:79:46:E5:95:98:81:87
X509v3 Authority Key Identifier:
keyid:04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e2:34:de:ec:83:df:3b:37:a4:8e:38:e4:1a:08:80:e5:71:
d6:cb:80:28:cb:0d:b4:27:8e:43:c4:0e:c1:5a:9f:f6:3b:75:
2f:40:3e:d7:0c:e7:7b:ba:9b:57:55:4d:db:63:87:b2:46:ae:
5b:26:6d:99:46:ab:d5:36:45:90:b2:35:38:06:f8:45:2d:7f:
09:6c:f3:02:3e:31:d8:7a:ce:fe:19:a6:aa:ee:ea:26:09:1c:
0d:24:3b:2b:ab:15:af:33:65:db:99:5c:23:2e:48:04:49:e4:
0c:14:5b:57:18:c2:b3:83:11:a7:86:da:c5:e4:9f:33:80:a0:
1c:12:90:c4:73:a7:48:e4:80:f8:13:64:07:dd:cf:a8:c7:49:
cf:59:61:b2:04:cd:d6:c3:3f:e7:b7:76:fe:61:f3:9d:1b:d5:
89:1b:8e:ff:ed:26:71:86:93:3e:1e:57:fe:18:ca:57:ab:29:
eb:a9:ba:4c:3b:1e:59:4d:3f:2a:fe:3e:e4:b6:e4:d6:e8:4d:
bd:e1:61:11:9f:57:50:a5:f1:9c:a2:26:a5:05:78:92:19:5f:
e9:84:c9:b4:43:d1:11:f0:51:f2:4b:bf:6d:6f:28:99:2b:5b:
27:b0:62:1e:97:8a:b4:ca:a2:ae:29:22:f9:8c:6f:2f:b2:10:
12:f0:8e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:43:22 2025 by rpki-client