Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
File: BE1l50JUsl_gDrjqBrtY--aKwZs.mft (raw, json)
Hash identifier: qBqnOxj+RMojhjYgAEOWI/FnekoVt50lP+Sk16H3QSM=
Subject key identifier: 6F:BF:C1:BD:C9:1F:42:9C:48:58:5C:42:81:DB:43:5F:39:D4:8E:69
Authority key identifier: 04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
Certificate issuer: /CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Certificate serial: 0199FAD7E2FF2CBD4BE89D10139805BCD904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
Manifest number: 0CE2
Signing time: Sun 19 Oct 2025 05:01:16 +0000
Manifest this update: Sun 19 Oct 2025 05:01:16 +0000
Manifest next update: Mon 20 Oct 2025 05:01:16 +0000
Files and hashes: 1: BE1l50JUsl_gDrjqBrtY--aKwZs.crl (hash: 0knR/a6sWP/3V42ZpJGxrFi4t9XIK6OlIj3jUXsrAxU=)
2: rthTWvBWTldvCBC_jsm-IEkTBFQ.roa (hash: GkYmfEttYtLOHlLhDgqjd5V7UynvO3JpXV9H0/Hyyb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:e2:ff:2c:bd:4b:e8:9d:10:13:98:05:bc:d9:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Validity
Not Before: Oct 19 05:01:16 2025 GMT
Not After : Oct 20 05:01:16 2025 GMT
Subject: CN=6fbfc1bdc91f429c48585c4281db435f39d48e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:da:4d:2a:98:24:38:95:18:b2:bb:f3:80:e6:
2a:77:91:2c:3c:19:80:77:da:51:42:6c:c0:79:d3:
aa:93:2f:ac:48:0c:f6:ca:62:37:5a:a6:08:1d:38:
e9:1b:84:f3:cd:3c:13:96:66:74:2a:64:61:0d:0c:
26:7f:f3:1b:41:d7:ed:93:41:d7:8e:ff:c5:db:59:
57:f9:b1:22:bd:3a:a1:14:98:01:24:76:87:3f:70:
81:ad:e9:1e:43:97:a9:11:5b:69:29:eb:6b:ce:af:
a6:36:b0:9c:8c:29:62:1f:a6:b6:ef:b9:85:97:8c:
17:d2:10:0d:93:06:26:32:72:ee:46:51:17:ce:87:
b2:0d:9a:ae:dc:3c:91:79:40:e6:d6:0e:bf:be:5e:
4b:2e:48:99:76:1a:a2:49:2c:8e:94:9c:f0:d3:af:
74:82:5c:c1:6d:b5:c2:16:4f:4b:17:e3:83:9e:da:
0b:20:a2:d4:95:93:42:2c:b7:20:ea:1d:a4:67:2f:
e5:8c:59:32:34:65:a6:1a:cd:f9:80:0b:e7:a6:b3:
af:84:46:4a:3e:b5:12:81:fd:bf:8b:ce:0f:8b:77:
4f:6c:3c:26:bb:fc:95:70:1e:08:71:b6:e3:23:cc:
f5:9b:68:a5:73:c2:98:11:62:e6:bc:62:61:0a:20:
f0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BF:C1:BD:C9:1F:42:9C:48:58:5C:42:81:DB:43:5F:39:D4:8E:69
X509v3 Authority Key Identifier:
keyid:04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ef:d6:7d:d3:77:a0:ad:94:31:4a:64:86:1b:e8:4f:9a:47:20:
0c:05:b3:e3:3a:8b:ef:2e:b9:f2:df:a2:30:f1:db:62:e0:be:
28:c2:3c:ee:36:aa:08:d9:41:d7:ae:64:92:82:ca:9f:4c:f8:
27:d2:97:e5:06:f5:9c:59:39:96:99:b0:b6:39:b7:39:82:26:
32:06:b8:66:4c:7f:3b:e3:e9:55:c3:20:41:10:b5:e8:2f:5b:
89:2f:b0:bb:19:2a:c5:72:ed:ff:4e:36:0a:3b:f8:a7:87:d1:
02:db:94:5a:18:8c:e2:ab:26:08:9c:da:22:50:02:d7:f0:1b:
06:91:69:1f:5c:6d:ad:69:4f:62:19:d6:b2:8f:a3:a4:09:29:
0a:ec:5a:00:62:34:9c:39:a6:4e:a2:4b:40:bf:34:c5:eb:c3:
ca:de:85:26:b0:4b:be:c5:ec:3a:2a:f9:b1:b9:4d:78:5f:c5:
e2:da:41:85:7a:d0:de:7d:5f:01:f0:c4:f1:c6:d8:44:30:c3:
6c:c6:f9:03:c9:aa:21:ec:81:86:1b:5e:02:4c:4c:62:a7:ad:
f0:e9:c1:b9:92:65:11:86:7a:8c:61:37:ca:93:d8:4f:9e:e5:
e4:97:b6:82:16:e7:31:8c:96:98:0d:1e:5a:e8:36:f6:a7:78:
86:d6:71:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:17 2025 by rpki-client