Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
File: BE1l50JUsl_gDrjqBrtY--aKwZs.mft (raw, json)
Hash identifier: Ptj39f5rEx3z1i9c9PvEYY9+VZonqZ7NLFxNWPyKJIU=
Subject key identifier: 1C:79:A2:C0:3F:EE:E5:D5:50:BF:3C:BD:46:ED:07:49:10:A3:88:6E
Authority key identifier: 04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
Certificate issuer: /CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Certificate serial: 0197BF35D17C80655704AAF50E73E72D6F30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
Manifest number: 0BBA
Signing time: Mon 30 Jun 2025 05:01:04 +0000
Manifest this update: Mon 30 Jun 2025 05:01:04 +0000
Manifest next update: Tue 01 Jul 2025 05:01:04 +0000
Files and hashes: 1: BE1l50JUsl_gDrjqBrtY--aKwZs.crl (hash: YtfHdGRZmnnljjdsbrHkyk3gDj7BOfIRnDbM0/od3sg=)
2: rthTWvBWTldvCBC_jsm-IEkTBFQ.roa (hash: GkYmfEttYtLOHlLhDgqjd5V7UynvO3JpXV9H0/Hyyb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:35:d1:7c:80:65:57:04:aa:f5:0e:73:e7:2d:6f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Validity
Not Before: Jun 30 05:01:04 2025 GMT
Not After : Jul 1 05:01:04 2025 GMT
Subject: CN=1c79a2c03feee5d550bf3cbd46ed074910a3886e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c6:b7:8a:94:ed:27:07:0a:53:46:cb:96:f4:
88:c2:d0:d1:86:f8:34:6b:23:6f:05:85:c3:06:58:
c0:4d:5d:95:33:7b:a3:ab:2b:cd:20:e9:72:77:29:
04:65:57:49:80:33:7f:ca:92:05:b3:27:bc:dc:7b:
ea:c1:63:19:82:fd:e9:5f:66:9b:bf:51:d4:ed:2c:
0b:8a:d3:97:72:16:60:1b:50:c6:6f:2e:46:3c:8e:
59:24:d5:1f:47:36:8e:51:03:31:24:ff:54:af:e9:
b5:a8:d3:24:89:6e:d2:35:dc:13:f0:6e:d7:f8:a9:
08:05:0b:dc:69:dd:bb:a2:54:de:10:5d:ec:2f:65:
8a:80:d7:79:36:a9:43:87:f5:8e:bd:e6:ae:56:3a:
77:ce:ee:96:1c:e1:d9:5c:62:15:81:13:b5:c3:34:
f1:c6:9f:e9:e6:53:6e:fa:7e:6b:b4:20:8c:a0:79:
02:27:8e:2c:52:95:60:58:66:de:ab:86:dd:56:51:
c2:76:1f:ea:7a:41:58:5f:e5:a5:b6:64:7e:7f:67:
a9:3f:d1:21:df:61:c6:b1:c4:7a:57:1d:73:d7:0a:
1a:8e:8d:31:dd:b7:97:86:6b:e8:b3:d3:d5:9a:7e:
ed:6f:42:d2:81:7c:c4:2a:6c:b8:74:ef:a7:53:e3:
c8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:79:A2:C0:3F:EE:E5:D5:50:BF:3C:BD:46:ED:07:49:10:A3:88:6E
X509v3 Authority Key Identifier:
keyid:04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:86:17:5c:a7:52:db:21:6f:4a:8c:45:1a:b7:01:d6:b5:d0:
06:f9:81:5a:27:ec:9f:ba:33:b5:ac:9d:4f:85:77:d7:55:30:
7a:60:6f:81:83:aa:b0:04:b3:1e:42:0e:cc:d9:ed:2f:55:75:
b4:7b:45:79:31:c9:8a:bf:a7:d1:43:68:9c:80:3c:05:80:c2:
fd:57:44:62:7b:02:8c:54:76:45:87:d5:8d:ba:06:14:51:36:
e8:74:51:e6:d4:82:63:1b:b2:98:1f:f1:cf:de:e6:ac:d1:77:
c0:d3:88:c7:f9:5a:88:4e:72:e5:13:a0:ca:d0:e0:8e:52:f1:
cc:1d:5e:8d:3a:2e:f4:7f:2d:5f:ac:9c:75:ee:a4:b5:df:35:
c4:df:f1:41:12:cd:4b:3a:df:f0:31:30:d0:41:90:b7:fd:da:
df:4a:c6:62:fd:64:13:8e:ca:c9:f2:47:69:3b:85:17:3f:d1:
bc:52:e4:19:c8:d7:20:d1:12:a1:e5:7f:aa:8a:73:69:50:f9:
ef:c4:af:13:d5:e9:46:90:8d:29:2d:48:6a:f3:5d:80:9a:0b:
b0:c7:ef:2b:e8:73:bf:36:74:f9:bf:f2:83:c2:16:88:b1:53:
38:a4:d9:fd:c2:96:c4:b3:96:c2:9b:58:a7:e0:54:9d:3c:e0:
70:3b:69:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe/NdF8gGVXBKr1DnPnLW8wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NGQ2NWU3NDI1NGIyNWZlMDBlYjhlYTA2YmI1OGZiZTY4
YWMxOWIwHhcNMjUwNjMwMDUwMTA0WhcNMjUwNzAxMDUwMTA0WjAzMTEwLwYDVQQD
EygxYzc5YTJjMDNmZWVlNWQ1NTBiZjNjYmQ0NmVkMDc0OTEwYTM4ODZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysa3ipTtJwcKU0bLlvSIwtDRhvg0
ayNvBYXDBljATV2VM3ujqyvNIOlydykEZVdJgDN/ypIFsye83HvqwWMZgv3pX2ab
v1HU7SwLitOXchZgG1DGby5GPI5ZJNUfRzaOUQMxJP9Ur+m1qNMkiW7SNdwT8G7X
+KkIBQvcad27olTeEF3sL2WKgNd5NqlDh/WOveauVjp3zu6WHOHZXGIVgRO1wzTx
xp/p5lNu+n5rtCCMoHkCJ44sUpVgWGbeq4bdVlHCdh/qekFYX+WltmR+f2epP9Eh
32HGscR6Vx1z1woajo0x3beXhmvos9PVmn7tb0LSgXzEKmy4dO+nU+PIKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBx5osA/7uXVUL88vUbtB0kQo4huMB8GA1UdIwQY
MBaAFARNZedCVLJf4A646ga7WPvmisGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkUxbDUwSlVzbF9nRHJqcUJydFktLWFLd1pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kMzljNmMtNDVlMS00MTI2LWE0ZTIt
NDA0MzhhOTk5NDE0LzEvQkUxbDUwSlVzbF9nRHJqcUJydFktLWFLd1pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9kMzljNmMtNDVlMS00MTI2LWE0ZTItNDA0MzhhOTk5NDE0
LzEvQkUxbDUwSlVzbF9nRHJqcUJydFktLWFLd1pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa4YXXKdS
2yFvSoxFGrcB1rXQBvmBWifsn7oztaydT4V311UwemBvgYOqsASzHkIOzNntL1V1
tHtFeTHJir+n0UNonIA8BYDC/VdEYnsCjFR2RYfVjboGFFE26HRR5tSCYxuymB/x
z97mrNF3wNOIx/laiE5y5ROgytDgjlLxzB1ejTou9H8tX6ycde6ktd81xN/xQRLN
Szrf8DEw0EGQt/3a30rGYv1kE47KyfJHaTuFFz/RvFLkGcjXINESoeV/qopzaVD5
78SvE9XpRpCNKS1IavNdgJoLsMfvK+hzvzZ0+b/yg8IWiLFTOKTZ/cKWxLOWwptY
p+BUnTzgcDtp2A==
-----END CERTIFICATE-----
Generated at Mon Jun 30 12:31:25 2025 by rpki-client