Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
File: BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft (raw, json)
Hash identifier: huTWYoLi1RvDwNHbunYVOYhiYPGW5npa6wOdSJPhZ+o=
Subject key identifier: 19:93:6D:69:F6:61:33:8B:82:FC:90:68:24:45:DE:E9:97:D5:EC:D2
Authority key identifier: 04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
Certificate issuer: /CN=044aacab9a49e143de68979ad156b42dabddde8c
Certificate serial: 0199FEB480532B3F3B52F7108E3CBDA81D55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 23:01:06 +0000
Manifest this update: Sun 19 Oct 2025 23:01:06 +0000
Manifest next update: Mon 20 Oct 2025 23:01:06 +0000
Files and hashes: 1: BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl (hash: yNOFeb1mom2jfkYlBj0FRuXMkJ05GZi1zLWOKOSw+ys=)
2: hXYgFaLhg1h4smB81OExsZ5kDYA.roa (hash: J1LdPvY1o2Z/PcEpdVjEoKRtwcTpNQB0rwhpVoUBM7k=)
3: xNMIWy2dS-kAK1ke_Y9FCAMH0bc.roa (hash: Ms6l/F8PW5KZFppFyiKlVq4OI4pGZuAHpYocAWIKp4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:80:53:2b:3f:3b:52:f7:10:8e:3c:bd:a8:1d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044aacab9a49e143de68979ad156b42dabddde8c
Validity
Not Before: Oct 19 23:01:06 2025 GMT
Not After : Oct 20 23:01:06 2025 GMT
Subject: CN=19936d69f661338b82fc90682445dee997d5ecd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:de:b4:84:32:bb:63:1a:c0:50:31:52:ee:a4:
ab:9c:43:d9:ac:8e:cc:e8:15:18:c5:f9:c2:4a:f9:
1b:2b:ba:56:70:27:ef:ec:a9:b9:54:70:5a:88:ee:
a7:ed:80:5f:25:03:45:d6:4a:bf:d4:d7:82:9a:6c:
12:84:34:ef:c1:00:05:ab:44:64:e4:f2:14:42:c8:
2d:60:9e:ee:be:0c:1a:3d:2a:38:c2:30:0c:aa:21:
b7:1c:80:b4:2f:f6:e8:4b:d9:d6:9a:37:1e:88:f8:
b9:35:10:92:69:11:63:cb:0c:17:91:0f:71:a8:7b:
b8:c0:c4:68:30:06:cb:6a:b0:5d:61:3b:09:d5:2f:
f6:43:96:8d:70:75:eb:64:c6:c7:df:45:cc:86:10:
a2:6b:74:b6:17:f7:dc:38:01:57:8b:a2:6c:00:41:
7c:4f:85:31:9a:b5:01:28:9e:42:3c:3c:96:28:67:
5b:f2:09:c0:2e:38:17:9e:5e:d5:a7:dc:3c:15:2c:
98:a3:01:33:31:82:df:e4:e7:ef:8d:13:18:5b:ab:
b4:10:a4:55:af:6b:41:89:3c:55:30:36:db:7d:bd:
62:3e:1c:98:aa:06:dd:2d:ac:78:41:18:e9:38:15:
83:c2:4f:6d:cd:09:99:ae:00:4d:59:b0:83:bd:20:
f4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:93:6D:69:F6:61:33:8B:82:FC:90:68:24:45:DE:E9:97:D5:EC:D2
X509v3 Authority Key Identifier:
keyid:04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:33:3e:1f:1b:01:58:ff:6f:89:cf:21:c1:40:5f:ec:67:82:
51:c6:07:23:93:85:bb:96:dd:ec:40:5b:c2:87:33:f5:7f:a6:
e1:db:c5:86:da:08:2f:aa:74:3b:6a:1d:c2:8e:f6:1c:f2:4e:
eb:55:70:34:b7:1c:ac:a7:14:6c:3e:88:02:c1:a3:38:4a:cd:
57:8f:bf:ba:c1:4d:46:70:a7:a1:db:9f:ac:8a:ae:26:cd:1e:
d9:78:c8:49:fd:f8:eb:25:5b:0a:f6:58:e5:9a:db:88:fa:ca:
0d:5a:88:6c:0e:20:e1:75:23:09:c8:23:23:c8:87:a9:fc:8d:
64:db:5f:52:02:9d:80:57:05:78:8e:9b:40:c6:a1:20:19:3f:
04:fd:31:bb:35:7d:2f:1c:a9:b8:a4:d2:dd:96:ab:85:22:5b:
f1:61:c7:33:9d:f2:fe:1b:6c:3e:a2:ef:47:a7:c1:be:25:e0:
15:57:a4:15:a4:f0:0c:11:df:32:18:dc:56:c9:d4:b4:5e:95:
55:d8:0b:d6:a5:2f:1b:a0:81:42:0e:6b:3a:4a:fc:f7:15:61:
7c:6d:27:9e:10:fb:6c:95:b9:19:d1:f2:a1:c0:3a:a9:52:4c:
73:68:65:aa:1e:c4:dc:40:11:42:71:9a:a6:88:ba:41:a0:4a:
60:c3:e3:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+tIBTKz87UvcQjjy9qB1VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NGFhY2FiOWE0OWUxNDNkZTY4OTc5YWQxNTZiNDJkYWJk
ZGRlOGMwHhcNMjUxMDE5MjMwMTA2WhcNMjUxMDIwMjMwMTA2WjAzMTEwLwYDVQQD
EygxOTkzNmQ2OWY2NjEzMzhiODJmYzkwNjgyNDQ1ZGVlOTk3ZDVlY2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN60hDK7YxrAUDFS7qSrnEPZrI7M
6BUYxfnCSvkbK7pWcCfv7Km5VHBaiO6n7YBfJQNF1kq/1NeCmmwShDTvwQAFq0Rk
5PIUQsgtYJ7uvgwaPSo4wjAMqiG3HIC0L/boS9nWmjceiPi5NRCSaRFjywwXkQ9x
qHu4wMRoMAbLarBdYTsJ1S/2Q5aNcHXrZMbH30XMhhCia3S2F/fcOAFXi6JsAEF8
T4UxmrUBKJ5CPDyWKGdb8gnALjgXnl7Vp9w8FSyYowEzMYLf5OfvjRMYW6u0EKRV
r2tBiTxVMDbbfb1iPhyYqgbdLax4QRjpOBWDwk9tzQmZrgBNWbCDvSD07wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmTbWn2YTOLgvyQaCRF3umX1ezSMB8GA1UdIwQY
MBaAFARKrKuaSeFD3miXmtFWtC2r3d6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NmE3NGUtNGRiOC00ZmU5LTk4MDIt
M2JiOTI2ODc2MDJjLzEvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy84NmE3NGUtNGRiOC00ZmU5LTk4MDItM2JiOTI2ODc2MDJj
LzEvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaTM+HxsB
WP9vic8hwUBf7GeCUcYHI5OFu5bd7EBbwocz9X+m4dvFhtoIL6p0O2odwo72HPJO
61VwNLccrKcUbD6IAsGjOErNV4+/usFNRnCnodufrIquJs0e2XjISf346yVbCvZY
5ZrbiPrKDVqIbA4g4XUjCcgjI8iHqfyNZNtfUgKdgFcFeI6bQMahIBk/BP0xuzV9
LxypuKTS3ZarhSJb8WHHM53y/htsPqLvR6fBviXgFVekFaTwDBHfMhjcVsnUtF6V
VdgL1qUvG6CBQg5rOkr89xVhfG0nnhD7bJW5GdHyocA6qVJMc2hlqh7E3EARQnGa
poi6QaBKYMPj9w==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:08 2025 by rpki-client