Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
File: BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft (raw, json)
Hash identifier: DIpSVSz2rAthdtAx+TLp101Ec9XsFIL4Cmx1yn5H/n8=
Subject key identifier: CC:75:9D:BB:D6:AD:67:D0:A9:BA:A7:C9:52:9E:25:68:F1:6D:E4:18
Authority key identifier: 04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
Certificate issuer: /CN=044aacab9a49e143de68979ad156b42dabddde8c
Certificate serial: 0198D54EB30C177A461F707EFBB8F634471A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 05:02:41 +0000
Manifest this update: Sat 23 Aug 2025 05:02:41 +0000
Manifest next update: Sun 24 Aug 2025 05:02:41 +0000
Files and hashes: 1: BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl (hash: OEUehY2u5ZBpq9uQpud+2n5442dy2em/LLGRgc9hQxE=)
2: hXYgFaLhg1h4smB81OExsZ5kDYA.roa (hash: J1LdPvY1o2Z/PcEpdVjEoKRtwcTpNQB0rwhpVoUBM7k=)
3: xNMIWy2dS-kAK1ke_Y9FCAMH0bc.roa (hash: Ms6l/F8PW5KZFppFyiKlVq4OI4pGZuAHpYocAWIKp4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:b3:0c:17:7a:46:1f:70:7e:fb:b8:f6:34:47:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044aacab9a49e143de68979ad156b42dabddde8c
Validity
Not Before: Aug 23 05:02:41 2025 GMT
Not After : Aug 24 05:02:41 2025 GMT
Subject: CN=cc759dbbd6ad67d0a9baa7c9529e2568f16de418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1c:48:f1:24:1c:24:ea:bd:0e:b7:52:0a:1f:
31:89:38:67:89:66:e2:72:43:72:b2:7b:f3:25:a3:
90:6f:a8:2d:19:3a:78:9a:d8:49:9d:da:29:31:bc:
31:bf:0c:12:10:5a:81:7f:bf:ac:39:a0:27:d2:c5:
3d:6f:36:8f:59:9b:8a:27:b2:5c:50:6e:aa:82:e0:
dd:ac:1c:f4:68:09:73:65:62:cd:30:82:d7:77:ac:
fc:a2:97:f8:1a:e5:92:0a:60:b6:70:cf:40:9a:74:
7e:a3:a6:5b:37:69:b0:d3:b2:bf:0c:2c:c4:d1:bc:
ff:1d:85:d2:68:4e:bb:75:fd:d9:d9:db:5e:1e:ed:
0f:7d:b7:f6:55:9d:32:3e:fe:72:29:85:f3:8b:8e:
df:1e:2c:e3:9e:7c:9d:ec:9d:0e:62:ed:0a:a7:65:
91:f1:75:70:ac:e3:37:e8:c9:80:1d:11:1a:cc:cd:
2d:16:10:f2:49:66:bb:3e:77:fc:db:32:0f:68:2d:
2a:3a:6e:91:2c:31:51:07:7b:4b:bf:90:09:57:97:
fc:5e:8f:e2:78:2c:e3:2e:f7:ee:a0:91:d1:cf:b1:
2c:25:25:3a:70:ae:b1:b1:04:33:56:d3:f1:69:08:
99:13:03:66:bc:1b:aa:8f:70:b1:b1:1c:ca:90:29:
38:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:75:9D:BB:D6:AD:67:D0:A9:BA:A7:C9:52:9E:25:68:F1:6D:E4:18
X509v3 Authority Key Identifier:
keyid:04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:30:69:14:db:07:00:1c:ac:cb:a5:4c:5e:30:75:ef:78:92:
7a:58:a4:11:27:ba:10:c7:0c:1b:4a:2e:3c:5f:08:13:93:52:
d3:32:27:c2:bb:fd:75:1a:c9:0a:87:81:c9:f6:3e:7d:07:eb:
2a:c9:16:e8:eb:af:7f:07:92:77:01:8c:83:a8:30:2c:39:cf:
f0:23:49:70:8c:ea:e4:2c:f3:31:7f:f4:ac:bf:e9:43:0c:24:
71:a8:2c:7c:31:20:3c:57:7a:c0:16:71:2c:1f:75:dc:30:d3:
b6:49:5d:23:21:7e:50:9c:5b:ed:4c:d5:db:86:f5:e0:62:6d:
bc:18:ec:f5:80:33:43:56:70:de:d0:c3:fc:d0:fb:c8:3d:79:
1a:66:6c:b7:a7:6a:68:17:98:6d:d0:54:2b:68:bb:8c:29:05:
6b:d9:bc:5f:86:71:3a:4c:7c:9d:ca:e1:99:db:0f:ae:ac:b8:
b2:d5:1f:c7:57:ed:31:10:b1:b0:c1:2b:e0:8d:05:9f:be:3d:
bc:85:7d:9f:66:50:5c:b4:04:58:f8:8b:b2:fc:2a:28:b9:35:
db:68:c3:b9:54:b2:4e:3c:5d:60:1a:64:7d:00:a4:ce:49:fa:
b3:25:da:6a:e2:12:9d:e2:21:cb:48:a8:42:87:ac:ab:a6:20:
aa:7c:67:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:34 2025 by rpki-client