Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
File: Be02xlZG2ssRSqcsG7y3QYG3_0M.mft (raw, json)
Hash identifier: mtFbGW8m0CAFUV0kMT2iaB9bzT9k2k+60cHpX9B241w=
Subject key identifier: 2D:B7:59:A7:08:4F:5D:07:25:E2:93:26:EC:3F:A1:A4:5A:B9:7F:7E
Authority key identifier: 05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43
Certificate issuer: /CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43
Certificate serial: 0199FC8F3278FDF6EF3B25CA10F47922464F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
Manifest number: 120F
Signing time: Sun 19 Oct 2025 13:01:06 +0000
Manifest this update: Sun 19 Oct 2025 13:01:06 +0000
Manifest next update: Mon 20 Oct 2025 13:01:06 +0000
Files and hashes: 1: Be02xlZG2ssRSqcsG7y3QYG3_0M.crl (hash: qcHp4s6NvSKtD+QeDksWH9bIqyTp5X6Xj4XhzyjCYVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:32:78:fd:f6:ef:3b:25:ca:10:f4:79:22:46:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43
Validity
Not Before: Oct 19 13:01:06 2025 GMT
Not After : Oct 20 13:01:06 2025 GMT
Subject: CN=2db759a7084f5d0725e29326ec3fa1a45ab97f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:59:08:ba:26:94:93:18:4a:47:0b:9b:61:1a:
7d:02:f0:bd:32:41:ae:5b:71:af:03:04:d4:24:84:
4a:f9:79:3b:95:ec:2b:68:85:94:77:ab:22:dc:c7:
81:ff:f5:67:ee:32:5e:4a:db:0f:eb:7e:bd:e1:ee:
45:36:fe:a0:ca:ad:43:e8:55:ea:7a:d3:8f:23:1d:
70:19:5c:4c:d3:16:4b:13:d4:af:c6:f7:e9:73:70:
5a:b1:ec:f4:89:6b:df:9c:e0:53:58:90:36:7b:01:
f2:35:ea:d5:21:5b:60:69:3e:b7:20:f3:df:28:36:
e3:ee:62:df:9c:71:9f:c4:05:29:30:82:2b:81:65:
48:9e:60:9c:ea:1c:92:7e:d2:14:43:c5:58:79:af:
92:6e:cc:43:1b:07:8a:c5:2c:0c:d6:be:98:bb:cf:
0a:44:5d:a2:f7:a7:6a:d2:58:3e:fc:3b:3c:f6:03:
90:06:73:63:cb:81:b9:84:be:ad:d0:37:25:05:5f:
bc:f7:5c:06:09:c2:e2:7c:38:9c:8e:44:36:8a:ad:
1f:4b:f2:45:34:4a:9c:5f:15:d3:ea:db:c6:90:bb:
93:6f:98:05:ce:87:92:50:f2:20:7c:0f:93:bd:6b:
3e:0f:2a:2a:a8:67:17:99:6b:72:63:e2:c5:c9:be:
c7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B7:59:A7:08:4F:5D:07:25:E2:93:26:EC:3F:A1:A4:5A:B9:7F:7E
X509v3 Authority Key Identifier:
keyid:05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c9:1b:7a:16:2a:12:05:3a:cb:37:44:6a:fb:b6:aa:73:eb:
50:b2:70:5c:ca:1c:23:f5:e2:86:a1:c9:c8:04:df:21:d3:2f:
80:fa:4f:d2:a0:2b:22:bb:dc:d4:8b:95:da:13:21:f2:bc:d7:
fa:f5:db:44:14:aa:61:27:f9:a7:e5:75:51:21:4a:8c:6a:5b:
c6:0c:ed:c0:3f:f7:b7:97:df:2c:34:31:af:b0:98:23:5a:e3:
fd:34:9f:c1:67:5a:25:e1:53:8c:ef:ce:f6:25:49:b5:9c:44:
59:bb:b6:16:13:65:82:4f:cc:c4:bb:c3:30:73:7f:45:84:60:
27:ab:1b:ee:45:22:28:64:c4:69:e4:a6:0e:a7:80:fa:d7:8a:
38:ad:ff:7f:02:dd:1e:3b:7f:58:3d:c7:22:c4:19:df:4b:99:
7a:f5:3e:31:14:70:67:0f:24:69:61:fc:f9:41:85:de:73:b7:
e3:4f:d2:6e:e0:14:f3:de:e4:db:57:b7:b2:16:ef:04:db:c2:
a5:27:20:80:f6:fe:58:ec:47:56:b5:26:3b:3a:95:c2:29:e2:
b0:6b:fd:c9:22:48:56:cc:fd:ed:fd:15:b7:13:a5:6c:ab:83:
35:41:d2:24:25:fd:e0:95:ed:9e:ff:9d:36:b3:02:e4:f2:47:
e0:fe:10:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:56 2025 by rpki-client