Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
File: BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft (raw, json)
Hash identifier: NaCa/uwxHM0spNJqeyXDx5M7hiAjibiSLwScwxWQ7MY=
Subject key identifier: 7E:D5:4A:FE:B6:E3:A4:56:47:BE:A8:29:AC:D4:AD:AB:0A:C7:25:7F
Authority key identifier: 04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
Certificate issuer: /CN=044fa3808c2d28c577f9976c61cd226e188695d8
Certificate serial: 0197B96ACF69DF17B698F9B4DCE844934610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 02:01:14 +0000
Manifest this update: Sun 29 Jun 2025 02:01:14 +0000
Manifest next update: Mon 30 Jun 2025 02:01:14 +0000
Files and hashes: 1: BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl (hash: aF+kK50/BkPKYwcfydBZ5NMW7qqGQnzjxMkZKc0FFQM=)
2: ocNn2w6Qfls2fXDA9ntZYfLZt0I.roa (hash: 0P14UFeOgFvduGdV+w87JypAmwcr0ZfM6CCLMevWZPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:cf:69:df:17:b6:98:f9:b4:dc:e8:44:93:46:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044fa3808c2d28c577f9976c61cd226e188695d8
Validity
Not Before: Jun 29 02:01:14 2025 GMT
Not After : Jun 30 02:01:14 2025 GMT
Subject: CN=7ed54afeb6e3a45647bea829acd4adab0ac7257f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:68:ac:5a:8d:78:b5:fb:47:a9:b7:1f:e0:cb:
5e:3a:a7:dc:eb:5e:d6:5e:68:b5:ad:d7:1c:cc:7b:
82:af:9a:8d:db:91:1b:5e:70:ae:0f:e1:6c:5a:e3:
20:ae:4e:d9:18:87:fa:1e:49:27:0b:18:60:6c:2d:
5e:7f:c2:27:a9:33:24:70:c0:f8:84:0f:37:fe:3c:
22:aa:fe:03:5c:da:b8:81:9b:95:0b:ec:3a:d9:1d:
0e:66:aa:f2:96:cd:86:d1:4b:b2:d0:b0:79:ef:3f:
dc:1d:a0:98:5f:01:63:3f:57:0e:81:42:a1:4e:2e:
82:49:96:9f:cc:2b:1d:15:47:7b:82:29:44:79:cf:
f4:b5:8f:f1:35:4a:d8:14:12:c6:13:15:66:6e:a9:
24:57:a5:f7:43:9a:52:f6:d2:d6:bd:0b:2c:dd:c9:
55:67:a0:2d:84:5b:63:12:18:81:6b:81:0b:40:09:
c4:e2:6c:f5:8e:56:dc:91:98:6a:7e:dc:90:19:58:
fa:27:df:ae:d0:34:45:f5:5b:4b:29:05:13:75:7a:
2f:48:08:0e:96:d1:63:c5:8e:d1:01:fe:6d:46:13:
6e:35:db:9d:0c:ee:b6:82:ad:7e:f0:b5:01:03:51:
c6:bc:61:75:35:7a:0c:52:44:7f:b6:18:22:5e:26:
fa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D5:4A:FE:B6:E3:A4:56:47:BE:A8:29:AC:D4:AD:AB:0A:C7:25:7F
X509v3 Authority Key Identifier:
keyid:04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:2c:bc:16:04:77:3c:96:43:c9:79:18:70:07:a4:64:15:1d:
21:52:cc:e1:9e:8a:b2:13:0f:34:d9:79:dd:0a:94:c6:6e:32:
84:06:83:50:24:e2:9a:10:3a:ac:05:ca:09:8a:63:9c:55:30:
4d:4c:39:6a:8a:13:03:e5:f7:84:94:2c:c1:b4:0d:ba:73:eb:
ed:d2:03:76:e7:9a:22:ab:cd:b2:eb:86:d3:35:04:e3:12:74:
6e:1c:0f:d3:90:ef:13:94:c4:80:00:e0:42:27:8d:94:58:c2:
00:00:82:5a:16:f5:8a:ba:3d:44:9c:a2:f9:b9:02:e0:39:c1:
58:be:e3:3a:b6:b9:c9:21:7a:f4:59:ec:08:e7:d2:4c:5b:2a:
69:88:37:d8:1d:59:6f:0c:e1:05:a3:07:fb:22:10:f1:5e:e3:
6c:db:4a:7a:79:06:25:4a:97:65:52:30:a2:88:32:9c:59:63:
4b:19:8f:77:e1:32:a7:68:3d:17:0e:7e:24:b2:55:45:48:c9:
15:b3:ce:59:d9:e0:8b:ca:40:d8:b0:8f:4e:29:a3:5d:95:8e:
9d:ed:78:4c:01:f7:c5:79:00:c8:95:f4:5c:ed:96:7a:9f:dd:
f9:4b:ec:81:2f:02:2a:cf:b7:9a:0d:5e:1c:3a:f5:89:4d:c4:
1d:8a:39:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:10:47 2025 by rpki-client