Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
File: BE1l50JUsl_gDrjqBrtY--aKwZs.mft (raw, json)
Hash identifier: 34F+HOWrG+TbNuACIuvIa7nbna1aOhMDp8ACHjF8os0=
Subject key identifier: E7:95:B3:E5:99:AC:C7:F8:56:60:AF:53:22:04:37:75:E0:56:07:97
Authority key identifier: 04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
Certificate issuer: /CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Certificate serial: 0198D54E71FFF75F906E00C393205476C604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
Manifest number: 0C4A
Signing time: Sat 23 Aug 2025 05:02:24 +0000
Manifest this update: Sat 23 Aug 2025 05:02:24 +0000
Manifest next update: Sun 24 Aug 2025 05:02:24 +0000
Files and hashes: 1: BE1l50JUsl_gDrjqBrtY--aKwZs.crl (hash: NWnMP3iX5N88BjUg3RjEj0em+4/TdcLCtzV5ahoUjIM=)
2: rthTWvBWTldvCBC_jsm-IEkTBFQ.roa (hash: GkYmfEttYtLOHlLhDgqjd5V7UynvO3JpXV9H0/Hyyb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:71:ff:f7:5f:90:6e:00:c3:93:20:54:76:c6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Validity
Not Before: Aug 23 05:02:24 2025 GMT
Not After : Aug 24 05:02:24 2025 GMT
Subject: CN=e795b3e599acc7f85660af5322043775e0560797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:b7:ff:9b:33:f1:f5:ad:87:c7:a0:42:58:
fb:c9:5f:ab:1a:68:32:52:59:72:46:ec:92:dc:22:
03:2e:fa:be:b2:34:b8:43:d1:27:29:99:26:a4:76:
40:d2:62:cb:b1:0f:36:75:80:b0:ea:2c:07:27:fc:
89:f6:e2:21:19:95:03:02:ad:3b:44:f6:32:cc:5c:
d6:20:c3:0b:59:42:33:82:73:5f:40:3b:f8:20:4e:
e9:0d:34:ee:1c:2e:99:ba:41:8a:d4:b4:51:16:b8:
5d:d7:1f:2d:f9:b0:43:4c:54:f0:89:3a:24:1f:53:
5d:52:d9:30:08:9e:e6:85:12:2b:dc:c4:2a:bd:c0:
d8:00:83:51:7e:14:5d:15:81:6d:f5:42:11:8f:65:
68:8e:69:df:d7:4a:60:52:61:3e:90:5f:fb:f1:31:
00:73:63:51:e4:7e:2a:6a:b3:ef:11:93:0a:16:c2:
82:df:fc:68:c5:66:2d:18:fa:6f:54:39:d2:8e:60:
89:44:77:80:8a:ca:89:df:bf:7d:79:46:06:c0:ed:
66:b0:5a:8b:bf:ed:df:77:14:9e:b0:ec:18:e2:d4:
23:19:1f:a7:b2:d3:de:af:a3:14:59:08:43:9c:e2:
94:87:52:c6:24:dd:c8:71:6b:28:41:a7:bf:77:0e:
78:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:95:B3:E5:99:AC:C7:F8:56:60:AF:53:22:04:37:75:E0:56:07:97
X509v3 Authority Key Identifier:
keyid:04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:6a:f7:40:5f:92:6a:36:e5:99:e3:ce:5b:48:49:20:6b:df:
70:31:2b:06:f7:56:f3:fe:aa:23:19:74:ca:36:44:d3:68:95:
98:a5:15:75:c0:4f:91:dd:f1:8c:5f:2b:4c:6c:34:02:9b:e3:
d7:67:23:d6:41:24:48:d1:a2:af:d5:95:14:a7:b4:80:fb:76:
7d:c1:ea:31:e5:05:58:53:49:4b:95:2d:71:e6:a1:98:1f:6c:
a0:f0:a2:d9:f6:06:80:ab:77:ed:39:e8:ef:9c:ef:16:0a:ae:
54:a9:a6:c9:7f:af:52:c3:a2:9d:ac:a0:ac:2f:5b:a5:cf:43:
6b:d6:d4:57:33:5d:1b:15:8b:1c:e8:c1:d3:fa:44:ad:ef:56:
97:2f:c1:97:72:6e:60:68:6f:e3:4d:d8:03:42:b5:5a:2f:6e:
fd:48:2f:2b:df:33:d5:de:89:7a:aa:18:9e:1e:e1:f1:73:18:
0a:67:f8:a8:03:e5:8f:78:ab:f3:63:31:21:f7:8b:15:16:9e:
89:1a:37:d0:cf:79:71:f8:27:a9:b2:a0:d4:1e:34:cb:80:63:
2d:60:66:e3:a5:87:a0:46:da:03:40:6a:f7:d7:53:fa:63:d8:
5d:fe:bb:cb:d8:51:18:b6:41:19:41:0b:8a:b9:df:0f:1f:86:
d1:5a:6c:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTnH/91+QbgDDkyBUdsYEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NGQ2NWU3NDI1NGIyNWZlMDBlYjhlYTA2YmI1OGZiZTY4
YWMxOWIwHhcNMjUwODIzMDUwMjI0WhcNMjUwODI0MDUwMjI0WjAzMTEwLwYDVQQD
EyhlNzk1YjNlNTk5YWNjN2Y4NTY2MGFmNTMyMjA0Mzc3NWUwNTYwNzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQq3/5sz8fWth8egQlj7yV+rGmgy
UllyRuyS3CIDLvq+sjS4Q9EnKZkmpHZA0mLLsQ82dYCw6iwHJ/yJ9uIhGZUDAq07
RPYyzFzWIMMLWUIzgnNfQDv4IE7pDTTuHC6ZukGK1LRRFrhd1x8t+bBDTFTwiTok
H1NdUtkwCJ7mhRIr3MQqvcDYAINRfhRdFYFt9UIRj2Vojmnf10pgUmE+kF/78TEA
c2NR5H4qarPvEZMKFsKC3/xoxWYtGPpvVDnSjmCJRHeAisqJ3799eUYGwO1msFqL
v+3fdxSesOwY4tQjGR+nstPer6MUWQhDnOKUh1LGJN3IcWsoQae/dw54zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOeVs+WZrMf4VmCvUyIEN3XgVgeXMB8GA1UdIwQY
MBaAFARNZedCVLJf4A646ga7WPvmisGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkUxbDUwSlVzbF9nRHJqcUJydFktLWFLd1pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kMzljNmMtNDVlMS00MTI2LWE0ZTIt
NDA0MzhhOTk5NDE0LzEvQkUxbDUwSlVzbF9nRHJqcUJydFktLWFLd1pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9kMzljNmMtNDVlMS00MTI2LWE0ZTItNDA0MzhhOTk5NDE0
LzEvQkUxbDUwSlVzbF9nRHJqcUJydFktLWFLd1pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXWr3QF+S
ajblmePOW0hJIGvfcDErBvdW8/6qIxl0yjZE02iVmKUVdcBPkd3xjF8rTGw0Apvj
12cj1kEkSNGir9WVFKe0gPt2fcHqMeUFWFNJS5UtceahmB9soPCi2fYGgKt37Tno
75zvFgquVKmmyX+vUsOinaygrC9bpc9Da9bUVzNdGxWLHOjB0/pEre9Wly/Bl3Ju
YGhv403YA0K1Wi9u/UgvK98z1d6JeqoYnh7h8XMYCmf4qAPlj3ir82MxIfeLFRae
iRo30M95cfgnqbKg1B40y4BjLWBm46WHoEbaA0Bq99dT+mPYXf67y9hRGLZBGUEL
irnfDx+G0Vpsow==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:06 2025 by rpki-client