Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
File: BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft (raw, json)
Hash identifier: NP+ZIxc5fRuVYn2tDRoplyT3NKmI2A2apcYKYPXEetA=
Subject key identifier: 50:7B:9C:B7:DA:97:53:93:73:6F:C4:63:50:C4:26:0E:71:92:66:3B
Authority key identifier: 04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
Certificate issuer: /CN=044aacab9a49e143de68979ad156b42dabddde8c
Certificate serial: 0197B77C65EC7A8023B5AE67E8848DB72C05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 17:01:12 +0000
Manifest this update: Sat 28 Jun 2025 17:01:12 +0000
Manifest next update: Sun 29 Jun 2025 17:01:12 +0000
Files and hashes: 1: BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl (hash: xNsgQPXDQ/F3K0Pgug2+iD85t47nhTxluJVcPwMzeUQ=)
2: hXYgFaLhg1h4smB81OExsZ5kDYA.roa (hash: J1LdPvY1o2Z/PcEpdVjEoKRtwcTpNQB0rwhpVoUBM7k=)
3: xNMIWy2dS-kAK1ke_Y9FCAMH0bc.roa (hash: Ms6l/F8PW5KZFppFyiKlVq4OI4pGZuAHpYocAWIKp4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:65:ec:7a:80:23:b5:ae:67:e8:84:8d:b7:2c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044aacab9a49e143de68979ad156b42dabddde8c
Validity
Not Before: Jun 28 17:01:12 2025 GMT
Not After : Jun 29 17:01:12 2025 GMT
Subject: CN=507b9cb7da975393736fc46350c4260e7192663b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:77:25:ff:cf:32:78:7b:27:f0:9f:78:d4:cc:
9d:b8:e3:9d:bd:e7:35:86:36:f4:53:59:84:bb:b6:
51:0d:1a:d0:ba:21:00:5e:eb:6a:1d:b3:6f:b3:68:
75:b1:65:8b:3e:59:e8:2a:79:d5:a7:b8:3b:87:4c:
ad:3a:e5:be:b3:38:ed:70:b2:16:63:16:02:02:e8:
28:e8:6b:91:4e:47:17:30:39:d0:94:10:89:68:2b:
15:89:67:c4:33:9c:4a:b6:47:06:32:48:ba:43:31:
d7:45:fc:5e:bd:80:ce:4c:6e:d5:a9:be:1f:58:1e:
bc:79:bb:51:af:4f:0c:6a:eb:bc:0d:e3:82:2f:02:
24:e6:be:d0:fb:1c:e4:2f:cb:62:88:fd:15:1f:cc:
5a:6c:ec:57:82:e2:77:66:31:76:1e:ee:db:35:81:
c0:89:25:9f:80:53:11:53:45:cc:7e:a3:53:81:54:
e7:01:a9:15:2f:16:18:00:4a:09:42:df:9a:1a:d4:
f8:45:ab:72:d9:61:44:98:6d:92:8c:c8:37:0d:97:
99:ef:36:c8:1a:0d:e1:b4:7c:92:43:55:a0:28:8a:
e0:0e:97:5d:6e:08:6a:3d:09:4b:2b:81:ef:96:56:
85:43:b8:ed:cb:be:b8:d0:fe:f1:b6:09:ec:cb:ca:
c3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7B:9C:B7:DA:97:53:93:73:6F:C4:63:50:C4:26:0E:71:92:66:3B
X509v3 Authority Key Identifier:
keyid:04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:9c:bf:19:83:ba:20:30:87:0c:b2:6a:32:9c:4a:cb:3a:83:
51:5e:e1:f7:78:fa:ed:17:d6:44:6d:e5:a4:9c:3f:0c:10:66:
05:98:24:02:b6:46:b3:fc:a4:65:db:28:3b:d0:39:2c:29:6b:
df:5d:51:d8:7d:00:0e:0b:38:5a:e8:28:54:89:b7:c0:63:3a:
ac:6d:fb:09:f9:37:d3:3d:1b:49:82:fd:29:f6:96:4c:71:d8:
cb:83:db:7f:bd:ba:05:53:a2:16:ac:42:bf:ba:19:0f:1e:ea:
32:b7:e9:4b:54:c4:43:90:bc:32:93:65:e7:d5:b6:f7:36:c2:
59:c2:27:79:00:d4:d0:d1:d8:3d:bb:7d:41:27:de:42:1e:b1:
30:ca:4f:19:e1:c1:6e:20:06:5e:43:4f:cd:51:e5:92:f8:5d:
3a:c5:af:76:b0:98:9d:fc:a1:14:d5:d0:f7:fe:31:1e:31:dc:
0d:68:f1:51:da:fd:67:ee:d1:7c:32:08:5f:44:37:13:8e:75:
3d:28:8c:8f:93:41:28:ae:20:e4:13:b7:b1:2c:40:1c:60:16:
f4:0d:b7:fa:cb:73:a2:9b:7f:26:20:a7:86:12:03:7f:83:40:
ed:0e:40:83:c3:c4:43:15:57:61:fb:cc:03:e8:fb:e3:3b:93:
b6:b5:75:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fGXseoAjta5n6ISNtywFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NGFhY2FiOWE0OWUxNDNkZTY4OTc5YWQxNTZiNDJkYWJk
ZGRlOGMwHhcNMjUwNjI4MTcwMTEyWhcNMjUwNjI5MTcwMTEyWjAzMTEwLwYDVQQD
Eyg1MDdiOWNiN2RhOTc1MzkzNzM2ZmM0NjM1MGM0MjYwZTcxOTI2NjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHcl/88yeHsn8J941MyduOOdvec1
hjb0U1mEu7ZRDRrQuiEAXutqHbNvs2h1sWWLPlnoKnnVp7g7h0ytOuW+szjtcLIW
YxYCAugo6GuRTkcXMDnQlBCJaCsViWfEM5xKtkcGMki6QzHXRfxevYDOTG7Vqb4f
WB68ebtRr08Mauu8DeOCLwIk5r7Q+xzkL8tiiP0VH8xabOxXguJ3ZjF2Hu7bNYHA
iSWfgFMRU0XMfqNTgVTnAakVLxYYAEoJQt+aGtT4Raty2WFEmG2SjMg3DZeZ7zbI
Gg3htHySQ1WgKIrgDpddbghqPQlLK4HvllaFQ7jty7640P7xtgnsy8rDNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFB7nLfal1OTc2/EY1DEJg5xkmY7MB8GA1UdIwQY
MBaAFARKrKuaSeFD3miXmtFWtC2r3d6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NmE3NGUtNGRiOC00ZmU5LTk4MDIt
M2JiOTI2ODc2MDJjLzEvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy84NmE3NGUtNGRiOC00ZmU5LTk4MDItM2JiOTI2ODc2MDJj
LzEvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZy/GYO6
IDCHDLJqMpxKyzqDUV7h93j67RfWRG3lpJw/DBBmBZgkArZGs/ykZdsoO9A5LClr
311R2H0ADgs4WugoVIm3wGM6rG37Cfk30z0bSYL9KfaWTHHYy4Pbf726BVOiFqxC
v7oZDx7qMrfpS1TEQ5C8MpNl59W29zbCWcIneQDU0NHYPbt9QSfeQh6xMMpPGeHB
biAGXkNPzVHlkvhdOsWvdrCYnfyhFNXQ9/4xHjHcDWjxUdr9Z+7RfDIIX0Q3E451
PSiMj5NBKK4g5BO3sSxAHGAW9A23+stzopt/JiCnhhIDf4NA7Q5Ag8PEQxVXYfvM
A+j74zuTtrV1NQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:46 2025 by rpki-client