Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
File: BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft (raw, json)
Hash identifier: XsSsau28lSt4omHUI48g3+a0S+I/4RXUjbg6ZyA9rVU=
Subject key identifier: 72:BD:DA:7E:59:5A:F8:7C:E2:CC:A5:2B:8C:09:53:6E:FC:64:1D:10
Authority key identifier: 04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
Certificate issuer: /CN=044fa3808c2d28c577f9976c61cd226e188695d8
Certificate serial: 0199FC58DFA52462566F9BAEFBC0D22726E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 12:01:46 +0000
Manifest this update: Sun 19 Oct 2025 12:01:46 +0000
Manifest next update: Mon 20 Oct 2025 12:01:46 +0000
Files and hashes: 1: BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl (hash: i34BM6o29VjsDDUGgb7SDNumV4tO+EEPQ6Xic1k2gEc=)
2: h-sMApBMhDHgCGWpW-gple58v6Y.roa (hash: fbZWIQuOefiBmYf/a9pDVe0/h4tBsG3+EM0yhcaJGFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:df:a5:24:62:56:6f:9b:ae:fb:c0:d2:27:26:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044fa3808c2d28c577f9976c61cd226e188695d8
Validity
Not Before: Oct 19 12:01:46 2025 GMT
Not After : Oct 20 12:01:46 2025 GMT
Subject: CN=72bdda7e595af87ce2cca52b8c09536efc641d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:be:12:a4:a5:be:9d:f7:91:5c:9b:dd:fb:86:
22:ab:e5:ca:59:d9:13:d9:d9:2d:8c:09:a1:35:b4:
fd:c0:46:61:d6:92:cf:cd:25:1f:f4:ea:57:87:af:
e4:9c:fa:06:23:ec:77:fd:4f:0a:7e:e1:03:ff:a3:
2e:1b:23:3f:cb:8c:47:44:cb:10:1c:f9:15:fd:c9:
8d:40:f2:83:e3:c0:91:bd:db:a4:df:a7:21:69:0a:
4c:7e:fb:bc:0a:bf:10:ff:96:2a:ea:f1:69:84:6f:
76:b2:63:8b:94:63:41:90:5e:b3:1b:6f:ec:de:ee:
c7:2a:82:68:a1:f6:30:26:d7:11:f1:f2:38:51:07:
cc:cc:a7:d5:a7:12:6c:79:82:e2:13:0b:e3:63:df:
82:8b:63:d7:00:0e:46:b0:23:9c:b1:c5:98:98:4d:
63:09:15:e9:b9:0a:e9:d6:d2:c4:99:56:02:77:a7:
97:14:8c:69:1a:77:51:23:14:88:95:fb:fd:ef:f2:
99:5e:17:a6:41:1b:1a:3a:2c:1f:88:37:65:8f:60:
0f:b3:06:5a:32:7a:e9:14:26:dd:e9:8c:6d:d7:9b:
60:ee:97:d2:79:69:85:12:a1:40:58:f9:d1:01:28:
8d:13:a5:de:7c:43:20:6f:22:44:69:2d:fe:18:de:
84:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BD:DA:7E:59:5A:F8:7C:E2:CC:A5:2B:8C:09:53:6E:FC:64:1D:10
X509v3 Authority Key Identifier:
keyid:04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:02:51:24:61:58:1f:7f:f3:dd:16:34:e6:ac:f1:24:6a:e7:
52:4a:a1:e6:53:fa:02:ce:b3:5e:69:2a:13:76:81:1e:92:b0:
17:5f:3c:1f:e2:d7:51:03:c6:32:27:a1:56:84:ea:ed:db:c0:
5b:2e:26:ba:35:b6:15:bd:7b:05:8a:a9:31:ee:fd:48:32:85:
3f:27:a4:f2:31:a3:5f:f5:83:ab:89:59:7b:cc:e3:9e:58:db:
09:81:a9:74:5d:c8:af:d5:ff:bc:43:06:6a:a9:b6:49:b4:f5:
c8:cf:8b:87:4f:4f:55:c4:65:0f:00:4b:33:0d:93:d7:b1:65:
93:fc:78:f3:13:58:b0:b1:0a:d4:63:ee:58:3d:f8:50:19:7a:
5b:d8:24:65:9c:25:24:80:3a:56:93:03:05:9f:84:6e:f8:b8:
0c:9c:9d:4d:bd:2c:58:ec:c2:30:33:78:79:cd:d9:4e:33:8e:
1b:e9:97:af:67:50:a9:42:28:92:a1:59:75:96:50:a0:f7:c4:
a3:60:0a:ae:a8:e4:60:65:0e:41:df:0b:0a:0c:3f:27:69:07:
9d:1f:d7:c6:ef:8e:fa:e6:e6:73:76:8d:24:2e:7c:99:d1:58:
c5:54:ed:a9:b9:86:79:e2:16:a6:75:7d:06:80:69:a6:c5:54:
ec:6d:3a:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WN+lJGJWb5uu+8DSJybnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NGZhMzgwOGMyZDI4YzU3N2Y5OTc2YzYxY2QyMjZlMTg4
Njk1ZDgwHhcNMjUxMDE5MTIwMTQ2WhcNMjUxMDIwMTIwMTQ2WjAzMTEwLwYDVQQD
Eyg3MmJkZGE3ZTU5NWFmODdjZTJjY2E1MmI4YzA5NTM2ZWZjNjQxZDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq74SpKW+nfeRXJvd+4Yiq+XKWdkT
2dktjAmhNbT9wEZh1pLPzSUf9OpXh6/knPoGI+x3/U8KfuED/6MuGyM/y4xHRMsQ
HPkV/cmNQPKD48CRvduk36chaQpMfvu8Cr8Q/5Yq6vFphG92smOLlGNBkF6zG2/s
3u7HKoJoofYwJtcR8fI4UQfMzKfVpxJseYLiEwvjY9+Ci2PXAA5GsCOcscWYmE1j
CRXpuQrp1tLEmVYCd6eXFIxpGndRIxSIlfv97/KZXhemQRsaOiwfiDdlj2APswZa
MnrpFCbd6Yxt15tg7pfSeWmFEqFAWPnRASiNE6XefEMgbyJEaS3+GN6E5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHK92n5ZWvh84sylK4wJU278ZB0QMB8GA1UdIwQY
MBaAFARPo4CMLSjFd/mXbGHNIm4YhpXYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkUtamdJd3RLTVYzLVpkc1ljMGliaGlHbGRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9hOWJlYjAtY2JlNy00NjVlLTgwMDgt
ZDU0NzIyY2NhODQ5LzEvQkUtamdJd3RLTVYzLVpkc1ljMGliaGlHbGRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9hOWJlYjAtY2JlNy00NjVlLTgwMDgtZDU0NzIyY2NhODQ5
LzEvQkUtamdJd3RLTVYzLVpkc1ljMGliaGlHbGRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjgJRJGFY
H3/z3RY05qzxJGrnUkqh5lP6As6zXmkqE3aBHpKwF188H+LXUQPGMiehVoTq7dvA
Wy4mujW2Fb17BYqpMe79SDKFPyek8jGjX/WDq4lZe8zjnljbCYGpdF3Ir9X/vEMG
aqm2SbT1yM+Lh09PVcRlDwBLMw2T17Flk/x48xNYsLEK1GPuWD34UBl6W9gkZZwl
JIA6VpMDBZ+Ebvi4DJydTb0sWOzCMDN4ec3ZTjOOG+mXr2dQqUIokqFZdZZQoPfE
o2AKrqjkYGUOQd8LCgw/J2kHnR/Xxu+O+ubmc3aNJC58mdFYxVTtqbmGeeIWpnV9
BoBppsVU7G06hg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:51 2025 by rpki-client