
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
File: BE-_fHvu77FSWiYU2c1jpCafn0o.mft (raw, json)
Hash identifier: yaBgQdU7v9l9mBCPLHeeu6doPSzBZOfGr04Z56DJvh0=
Subject key identifier: 0C:2D:95:99:69:0A:AE:C0:F9:A7:57:9D:33:FE:7C:05:51:37:23:42
Authority key identifier: 04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
Certificate issuer: /CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Certificate serial: 0196A164C787577BD35B028B1996D76CCDE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
Manifest number: 06E5
Signing time: Mon 05 May 2025 17:00:58 +0000
Manifest this update: Mon 05 May 2025 17:00:58 +0000
Manifest next update: Tue 06 May 2025 17:00:58 +0000
Files and hashes: 1: BE-_fHvu77FSWiYU2c1jpCafn0o.crl (hash: tRL+U+/lbsorS/BimYv0Ws8DG7TVYFvdOMnxp/PRsSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 17:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:64:c7:87:57:7b:d3:5b:02:8b:19:96:d7:6c:cd:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Validity
Not Before: May 5 17:00:58 2025 GMT
Not After : May 6 17:00:58 2025 GMT
Subject: CN=0c2d9599690aaec0f9a7579d33fe7c0551372342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:10:94:aa:9c:d4:33:dd:be:1f:38:0c:e3:3b:
e2:a1:bb:3c:60:27:81:48:fc:66:06:8c:e1:58:bd:
97:1e:7b:7f:44:04:75:90:29:b1:33:c4:ba:30:a1:
93:86:0b:c3:ec:93:84:94:62:48:88:bc:98:bf:92:
0d:60:d8:39:65:06:30:98:76:c0:90:3a:78:b1:28:
37:15:1a:d6:29:dd:93:4a:2b:2f:77:f6:10:de:54:
86:ce:ba:70:8a:47:e1:35:15:aa:e8:af:a3:7e:0f:
1b:bb:5c:64:b4:40:ef:15:c7:52:b4:c9:c0:56:c6:
2b:66:58:45:8c:a5:22:7c:06:df:71:9f:e3:bd:b6:
3f:03:8f:7e:cd:5e:bb:07:55:e4:1e:26:39:c2:13:
b5:a5:e8:f8:06:67:c9:a9:3b:b1:15:da:3e:6a:04:
a7:1b:d3:67:c0:9a:7d:a5:97:8a:f8:de:a4:c3:c5:
98:de:45:0a:45:56:7a:61:d0:03:c6:62:1b:71:ef:
68:05:30:02:49:a9:22:dc:eb:c1:76:ed:f2:bf:77:
10:44:dd:5b:7c:97:75:df:ce:85:3d:b7:0d:c7:a2:
eb:96:fd:1a:9e:f1:6f:19:7a:64:f7:7a:1f:6a:bf:
0c:42:8f:82:16:19:e4:72:02:5e:7f:a5:fc:a5:f8:
62:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2D:95:99:69:0A:AE:C0:F9:A7:57:9D:33:FE:7C:05:51:37:23:42
X509v3 Authority Key Identifier:
keyid:04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e4:7c:41:33:76:87:09:15:f7:43:2c:f5:ba:3e:06:36:08:
22:ed:a4:2f:af:b7:e6:88:75:78:47:28:eb:a5:31:6b:f5:7f:
f7:f8:97:78:1f:2d:0b:59:01:e6:d1:fd:69:a3:8c:18:11:4f:
96:26:56:ce:98:b2:f1:b0:4d:97:14:1d:53:02:80:da:5a:a1:
5a:a7:03:21:61:44:c3:ba:67:3a:eb:aa:ab:2f:a0:3c:62:86:
8c:fb:bb:90:eb:e1:96:03:85:f2:2c:52:92:d3:77:e3:b9:6b:
ed:5d:78:7b:a6:0a:a3:b5:a6:77:cd:8b:6e:2c:01:03:b5:18:
e7:c0:4b:6a:97:a2:a5:0b:ca:a4:67:1c:53:27:13:6e:f4:3b:
7a:07:b4:95:79:ad:d9:76:9f:0d:db:6b:14:e7:ee:25:66:19:
57:1f:96:28:11:46:e0:aa:f0:da:c1:7d:c3:2c:f5:d4:01:ca:
34:4d:0e:66:9d:a8:16:73:28:97:28:19:a7:e8:93:0b:fb:d7:
fa:8a:39:d5:e6:14:e0:c0:85:ce:a7:1b:6a:91:d7:4c:3b:13:
f8:db:57:0c:7b:5d:1f:06:06:ab:d5:da:6b:6d:c1:b1:d1:60:
5e:c5:91:77:6e:d3:7b:7c:4e:0b:4d:8c:06:8a:b6:67:4f:7c:
88:70:99:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:22:24 2025 by rpki-client