Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft
File: 5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft (raw, json)
Hash identifier: bPHpqoHplZymqOPEfdZy7mHilDZTR8jEvJO3cxlY2Io=
Subject key identifier: E5:31:25:8E:21:0E:BE:8E:EA:2E:DC:68:E8:2E:83:59:A0:6D:40:06
Authority key identifier: E4:17:98:A3:EE:49:D5:23:E8:8E:1A:D1:03:E6:3E:12:1D:84:D1:B5
Certificate issuer: /CN=e41798a3ee49d523e88e1ad103e63e121d84d1b5
Certificate serial: 0198D660804476348F561CE0F54589F4F687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft
Manifest number: 0D41
Signing time: Sat 23 Aug 2025 10:01:44 +0000
Manifest this update: Sat 23 Aug 2025 10:01:44 +0000
Manifest next update: Sun 24 Aug 2025 10:01:44 +0000
Files and hashes: 1: 5BeYo-5J1SPojhrRA-Y-Eh2E0bU.crl (hash: xNYYt3tak/HYSG8/RtlcX/q3XhQEriJkCP0y4eUMMDc=)
2: ojpo3C_o4XkLEMUun-AN5dsCn0c.roa (hash: KD+YKxAdab+/MSSFUGcDgdX/M8ezVTZqmPoRZBNH630=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:80:44:76:34:8f:56:1c:e0:f5:45:89:f4:f6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e41798a3ee49d523e88e1ad103e63e121d84d1b5
Validity
Not Before: Aug 23 10:01:44 2025 GMT
Not After : Aug 24 10:01:44 2025 GMT
Subject: CN=e531258e210ebe8eea2edc68e82e8359a06d4006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3c:ac:d0:38:9e:71:b7:fd:a0:03:07:5b:06:
73:33:35:ff:03:24:98:27:fb:11:3c:5f:38:df:b9:
e0:dd:4d:b0:68:90:01:eb:38:25:f3:1b:ed:26:d2:
a1:64:dd:d7:98:81:37:5d:8f:a5:bf:0c:b2:88:76:
f9:5e:73:60:d0:93:3e:6f:49:0c:f2:04:ff:a5:c6:
e2:a8:2e:31:eb:94:71:d6:26:10:72:ec:07:45:2e:
35:59:89:9e:b3:d2:70:85:eb:8d:0f:f9:19:a9:60:
98:57:bc:11:d6:8f:27:9d:8d:0c:5b:2d:c6:05:b0:
73:11:c2:a5:a5:ba:cb:a2:67:59:5a:dc:08:0b:f5:
67:91:72:05:b9:0f:6a:41:4a:94:87:d8:aa:00:7f:
2c:61:02:84:d6:c1:65:f5:18:a2:48:6c:96:30:72:
3d:de:14:f5:ad:5a:43:56:b3:51:e5:6e:fa:84:01:
73:24:ef:63:ae:a6:ae:62:bb:fd:15:0d:e2:f3:9f:
b7:02:cc:73:07:93:00:9e:7d:a3:d7:15:f5:b4:1b:
7d:8f:fc:d3:12:14:62:e9:83:cf:09:64:96:9d:2d:
1c:63:06:a2:38:1d:49:89:5c:77:d1:6e:8a:3c:7c:
52:5c:09:b6:b9:d5:0a:9b:d4:4a:6e:05:21:87:91:
f8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:31:25:8E:21:0E:BE:8E:EA:2E:DC:68:E8:2E:83:59:A0:6D:40:06
X509v3 Authority Key Identifier:
keyid:E4:17:98:A3:EE:49:D5:23:E8:8E:1A:D1:03:E6:3E:12:1D:84:D1:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:2a:18:57:89:1e:7c:38:e6:74:23:7f:54:3c:2e:ef:ca:1f:
76:aa:4d:14:a3:9f:8d:cf:59:92:8c:e1:18:5b:5e:3f:90:6b:
ba:58:bc:d8:60:c4:96:d5:61:3a:41:07:20:9e:ac:8a:76:3e:
32:7f:78:1b:4e:ac:3a:14:42:8f:e1:d3:a3:0c:1e:03:3e:b2:
a1:44:a3:25:47:c7:20:ca:08:38:ce:21:64:93:0b:f3:06:19:
39:06:4b:6e:22:c4:51:02:96:aa:b7:39:c4:c3:e7:41:16:94:
35:9b:f1:72:88:c4:58:b5:1e:7e:f6:ed:4f:90:84:eb:fe:c9:
63:0c:52:bd:66:49:19:2a:b8:7c:6c:1c:77:19:b8:20:ed:71:
cd:3f:2a:13:fb:3c:f5:e0:d0:b1:86:ca:9f:fc:38:93:6e:ca:
f2:43:91:50:95:a1:0a:1b:0e:dc:33:c0:4a:43:42:55:c7:00:
47:5b:26:3a:8b:9a:aa:fa:35:7b:be:68:5e:29:16:24:c3:99:
2b:60:26:ff:d2:88:6a:70:e0:00:14:41:a0:5c:e9:eb:46:e3:
ff:e7:06:44:89:01:fb:91:08:9b:04:81:46:56:d9:30:d5:55:
85:02:40:73:23:c3:11:bd:39:0f:4c:db:84:8d:4a:0d:43:d7:
e1:9e:4a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:08:30 2025 by rpki-client