Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
File: bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft (raw, json)
Hash identifier: kF5c6XFbbdvCXyFtIyAnyZ55Vr7dkldAnqlpODEGkv8=
Subject key identifier: 62:19:9A:69:08:6D:9B:31:57:79:01:81:4F:A0:89:6B:C6:33:86:D2
Authority key identifier: 6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19
Certificate issuer: /CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219
Certificate serial: 0199FFC74C5F363DDD91024384D5DAD00463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
Manifest number: 1050
Signing time: Mon 20 Oct 2025 04:01:15 +0000
Manifest this update: Mon 20 Oct 2025 04:01:15 +0000
Manifest next update: Tue 21 Oct 2025 04:01:15 +0000
Files and hashes: 1: bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl (hash: qh/fW+pvEHgp5oRmOR2/aU8QM6GzStTpaYGtOSPZAmg=)
2: pikr-Z1yZ7UUvvrmXqwotfJAjto.roa (hash: 68icAI19296YoC6/CDoRbYMVtIlmqXzI+o0fkE9+Wfc=)
3: qQqCuUJCewbsZNg09v9PamhTS90.roa (hash: OGwgmYMhdJtP2TfXi19zj/Lo5JjlQ5q60mMpyZb+YXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:4c:5f:36:3d:dd:91:02:43:84:d5:da:d0:04:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219
Validity
Not Before: Oct 20 04:01:15 2025 GMT
Not After : Oct 21 04:01:15 2025 GMT
Subject: CN=62199a69086d9b31577901814fa0896bc63386d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:72:fe:0b:68:73:b5:aa:20:8a:a3:e2:b2:c5:
10:bc:88:e3:13:21:e4:be:25:86:d1:4b:c7:e7:9b:
5a:92:0f:a2:dd:3c:a1:b6:bc:59:76:1f:bb:61:2d:
ed:00:70:b9:08:29:a9:b0:72:06:77:b7:2a:60:aa:
0f:9d:93:9b:30:db:9d:02:a6:fa:e9:ee:db:64:58:
c8:12:2a:9a:8d:3c:3e:f2:01:eb:f9:d4:72:e7:bb:
b0:e7:a3:db:20:33:ab:82:74:c0:16:63:c3:04:60:
41:72:19:28:14:21:b9:17:82:ab:45:fa:16:d5:43:
4d:ca:a4:24:63:7a:58:03:ad:2b:e1:6d:b4:84:4b:
83:16:7c:7e:99:bd:d7:f0:57:b4:12:93:06:58:b5:
04:14:26:53:82:e4:7b:6b:5a:9f:37:1b:42:84:fc:
de:cd:c7:ae:15:0e:7f:ac:9e:4a:19:f9:8b:42:b4:
0c:e8:ce:56:be:94:79:a5:a3:31:64:bb:32:98:c6:
f6:3a:88:71:59:4f:a0:19:44:9e:63:06:94:73:8c:
34:00:ff:51:4d:0b:34:ee:d7:9c:c8:78:ad:cf:75:
22:ce:c6:ed:fb:d5:73:89:08:2a:d9:aa:20:c7:ea:
26:96:02:05:c3:dc:c5:8b:fb:1c:d3:f8:d3:6e:bd:
78:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:19:9A:69:08:6D:9B:31:57:79:01:81:4F:A0:89:6B:C6:33:86:D2
X509v3 Authority Key Identifier:
keyid:6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:e3:be:71:e4:39:ba:5d:aa:b7:2c:d8:74:24:8c:27:25:32:
34:82:ad:05:d5:fc:35:2a:3c:c3:f1:c8:e2:31:5a:b1:1f:66:
9a:16:c2:90:0c:22:ae:d4:8d:80:e7:80:34:ed:ce:f5:53:0d:
7d:27:83:55:bb:de:7c:8b:b5:eb:3f:d5:76:78:f0:79:82:26:
53:bf:7a:9c:fc:04:78:bb:a8:77:15:cb:dd:c3:f5:17:fa:8f:
fb:50:12:ac:04:1c:21:03:fe:cc:72:0c:74:7c:4b:16:a8:d5:
4b:78:80:11:31:bc:c9:5e:d8:71:0f:5f:50:f2:fe:5c:24:7f:
18:72:ff:d6:bf:6c:b4:74:ab:28:e6:ed:19:53:3c:c2:db:32:
d4:a2:1a:34:95:6c:da:f3:df:d5:c3:f4:73:16:6d:d9:7c:ef:
7f:21:05:12:c2:03:43:c2:99:7a:3a:4e:d8:b0:9f:b6:d7:41:
2b:dc:2c:4f:80:9a:d5:18:73:9e:a3:a7:dd:1e:d7:51:82:4f:
01:5d:ac:09:b4:df:a5:e2:d5:e2:62:69:aa:66:d7:e2:8b:00:
dd:fe:8b:e0:7a:2e:f0:80:5f:21:f1:2e:fa:72:98:31:bd:d9:
ab:57:5d:c4:80:d4:2c:f4:76:9a:06:8c:26:13:86:cb:b3:5b:
61:8b:9e:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/x0xfNj3dkQJDhNXa0ARjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGU3ZWFmZTJmZmFhOTBjYWU5NDc2ODAzMDM0ZGI2ZGE3
YzEyMTkwHhcNMjUxMDIwMDQwMTE1WhcNMjUxMDIxMDQwMTE1WjAzMTEwLwYDVQQD
Eyg2MjE5OWE2OTA4NmQ5YjMxNTc3OTAxODE0ZmEwODk2YmM2MzM4NmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3L+C2hztaogiqPissUQvIjjEyHk
viWG0UvH55takg+i3TyhtrxZdh+7YS3tAHC5CCmpsHIGd7cqYKoPnZObMNudAqb6
6e7bZFjIEiqajTw+8gHr+dRy57uw56PbIDOrgnTAFmPDBGBBchkoFCG5F4KrRfoW
1UNNyqQkY3pYA60r4W20hEuDFnx+mb3X8Fe0EpMGWLUEFCZTguR7a1qfNxtChPze
zceuFQ5/rJ5KGfmLQrQM6M5WvpR5paMxZLsymMb2OohxWU+gGUSeYwaUc4w0AP9R
TQs07tecyHitz3Uizsbt+9VziQgq2aogx+omlgIFw9zFi/sc0/jTbr14NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIZmmkIbZsxV3kBgU+giWvGM4bSMB8GA1UdIwQY
MBaAFGxOfq/i/6qQyulHaAMDTbbafBIZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkU1LXItTF9xcERLNlVkb0F3Tk50dHA4RWhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8zZGVhZTQtNzIwZC00ZWFlLWIzZDkt
YjIxZGQzZjY4YWJhLzEvYkU1LXItTF9xcERLNlVkb0F3Tk50dHA4RWhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8zZGVhZTQtNzIwZC00ZWFlLWIzZDktYjIxZGQzZjY4YWJh
LzEvYkU1LXItTF9xcERLNlVkb0F3Tk50dHA4RWhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzOO+ceQ5
ul2qtyzYdCSMJyUyNIKtBdX8NSo8w/HI4jFasR9mmhbCkAwirtSNgOeANO3O9VMN
fSeDVbvefIu16z/VdnjweYImU796nPwEeLuodxXL3cP1F/qP+1ASrAQcIQP+zHIM
dHxLFqjVS3iAETG8yV7YcQ9fUPL+XCR/GHL/1r9stHSrKObtGVM8wtsy1KIaNJVs
2vPf1cP0cxZt2XzvfyEFEsIDQ8KZejpO2LCfttdBK9wsT4Ca1RhznqOn3R7XUYJP
AV2sCbTfpeLV4mJpqmbX4osA3f6L4Hou8IBfIfEu+nKYMb3Zq1ddxIDULPR2mgaM
JhOGy7NbYYuerA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:15:41 2025 by rpki-client