Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
File: BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft (raw, json)
Hash identifier: ozF7sTpok6LELz/rVapBffmzRdJ7EV/CGN94GvMjYfc=
Subject key identifier: 03:ED:2D:DD:F2:9A:5E:F0:76:02:29:0A:7A:48:64:88:BF:67:A4:9F
Authority key identifier: 04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
Certificate issuer: /CN=044fa3808c2d28c577f9976c61cd226e188695d8
Certificate serial: 0198D73AF0E783ADBE201D354AA6FB768A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 14:00:20 +0000
Manifest this update: Sat 23 Aug 2025 14:00:20 +0000
Manifest next update: Sun 24 Aug 2025 14:00:20 +0000
Files and hashes: 1: BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl (hash: mjl+F0MvM0RTCPdEfu1KxLLhNqmS/dxaxi4VT18pqxc=)
2: ocNn2w6Qfls2fXDA9ntZYfLZt0I.roa (hash: 0P14UFeOgFvduGdV+w87JypAmwcr0ZfM6CCLMevWZPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:f0:e7:83:ad:be:20:1d:35:4a:a6:fb:76:8a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044fa3808c2d28c577f9976c61cd226e188695d8
Validity
Not Before: Aug 23 14:00:20 2025 GMT
Not After : Aug 24 14:00:20 2025 GMT
Subject: CN=03ed2dddf29a5ef07602290a7a486488bf67a49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8b:b7:07:f5:4e:7e:6d:c9:73:7a:59:44:80:
56:a7:66:51:ac:1e:08:36:6b:e3:49:35:b3:f8:26:
e5:74:e7:c5:56:e0:7d:56:a9:ca:ef:69:25:99:e5:
31:d3:96:78:d4:2c:fd:9f:f8:46:a7:28:e2:57:ce:
f2:b8:f2:a3:99:34:c9:c9:cd:78:33:8a:f9:c1:a5:
ea:7f:35:6c:c7:8f:6f:19:b8:29:35:70:9c:b1:c6:
c4:0c:49:1f:08:2b:a1:9d:d9:ba:a4:00:43:a5:87:
98:c3:d3:96:fb:9c:a0:68:9b:e1:89:29:39:af:ed:
e5:e5:bf:7d:73:45:65:3c:c5:12:fe:05:a4:72:87:
48:cf:0f:5f:f0:b7:1f:9d:b5:a7:94:bd:2a:d9:74:
e2:75:88:f2:a0:7f:79:22:1e:c0:b1:7d:3b:84:67:
86:b5:16:2e:d5:54:51:b7:71:2e:13:82:f4:fd:ad:
88:f6:f4:f3:b0:ca:cd:c0:ca:00:f5:d7:95:2a:0c:
e7:49:06:49:b6:5b:fb:c7:5b:15:90:94:1a:77:fa:
89:d9:0f:a2:57:45:88:60:6c:83:fc:fb:8a:90:be:
56:ff:8b:68:96:91:a6:4b:c8:3e:25:a2:92:4a:a1:
26:c6:ca:75:c7:62:af:1a:59:d0:04:88:36:be:9f:
af:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:ED:2D:DD:F2:9A:5E:F0:76:02:29:0A:7A:48:64:88:BF:67:A4:9F
X509v3 Authority Key Identifier:
keyid:04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:25:0c:27:98:a5:d2:37:3b:a2:dd:ba:cd:c7:e8:07:c8:64:
55:93:20:1d:c1:96:ba:3e:4d:93:a1:f7:40:34:a2:4b:2d:df:
29:a5:3d:61:d8:61:9e:eb:eb:18:2d:91:38:6f:18:0d:36:87:
ae:35:61:ae:10:54:8d:a7:70:16:c0:ca:c1:5d:82:19:e4:ad:
8a:94:f0:6a:3e:96:ed:59:8a:de:bc:24:ca:20:8a:1b:1b:a0:
fd:8f:5d:cc:14:39:61:20:82:0b:2e:f6:06:e7:b3:56:82:37:
a0:2e:6b:ee:09:eb:1a:25:7a:11:4f:de:bc:b1:81:e0:76:c9:
0a:4f:61:ba:06:c3:e6:4d:0e:2b:e5:ac:b3:bc:a9:5c:fe:bf:
6f:1c:58:cb:01:73:ab:0c:b4:af:c4:d1:3d:2c:c3:e8:36:b8:
04:8a:97:04:63:28:ae:50:6e:95:01:bb:c9:6f:3a:b9:d9:86:
b3:12:4f:7d:79:bd:99:51:63:f8:90:eb:2f:e8:39:ab:93:25:
65:22:ef:8a:37:f1:4d:01:95:fc:b6:1a:d0:bb:c8:ad:70:37:
8d:a6:34:af:46:8d:5a:a3:27:20:d3:4d:28:f2:a7:37:3c:df:
c0:14:b3:74:5c:b6:e3:c1:6d:76:7e:02:2e:e3:4d:1b:9d:89:
11:6a:86:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:00:06 2025 by rpki-client