Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
File: BE-_fHvu77FSWiYU2c1jpCafn0o.mft (raw, json)
Hash identifier: BXyPp9h9aetmlWiMhACvqedvfGFL7xCNb/pZpDpeglU=
Subject key identifier: FD:F7:D8:76:E7:81:B4:7D:BF:E7:A4:5F:77:22:B8:D8:C0:DF:D2:82
Authority key identifier: 04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
Certificate issuer: /CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Certificate serial: 0198D54E5C17745FE91BCAAA8997446B22E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
Manifest number: 0809
Signing time: Sat 23 Aug 2025 05:02:19 +0000
Manifest this update: Sat 23 Aug 2025 05:02:19 +0000
Manifest next update: Sun 24 Aug 2025 05:02:19 +0000
Files and hashes: 1: BE-_fHvu77FSWiYU2c1jpCafn0o.crl (hash: 8aP7FQrkuLGMX1rU9gagH6ZYaVBBKg9EwseeiODlK/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:5c:17:74:5f:e9:1b:ca:aa:89:97:44:6b:22:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Validity
Not Before: Aug 23 05:02:19 2025 GMT
Not After : Aug 24 05:02:19 2025 GMT
Subject: CN=fdf7d876e781b47dbfe7a45f7722b8d8c0dfd282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4a:19:30:f5:e0:51:21:b7:db:c1:8f:bf:7d:
cb:36:8c:e8:0e:6d:f3:24:65:79:ab:86:7b:62:48:
ab:06:0d:9f:24:00:78:00:70:6e:8a:1b:db:82:16:
2c:3d:3c:28:d4:0a:75:73:a8:38:97:1c:59:69:4d:
f5:31:79:aa:23:a1:57:d6:82:b4:25:fb:31:7a:81:
f5:3d:57:3f:7c:9c:79:f1:58:d9:e9:a6:2f:57:f8:
20:b9:05:6f:2f:8d:70:45:6b:2d:3a:02:4e:20:f8:
27:4e:11:94:c1:da:05:42:e1:ee:73:4c:b2:b4:46:
ea:5e:f1:92:70:c1:b3:68:94:cc:f9:cd:4f:56:89:
a6:56:a7:66:4c:25:ae:16:0f:51:b6:9b:cd:6a:35:
94:11:d4:88:2e:eb:44:6a:93:19:01:4d:7b:7e:37:
93:8a:1f:71:25:2f:63:13:07:0b:62:01:a4:b2:9f:
98:c1:aa:15:ff:f9:39:9e:46:77:b9:fc:46:d4:2f:
1c:85:e9:43:7e:74:4e:2c:65:56:c3:ac:d5:b6:f3:
53:53:ce:f2:1e:74:65:0a:7e:f3:e1:92:36:c6:39:
9d:50:9e:05:6a:dc:24:42:34:91:8f:49:83:6f:c4:
4a:0e:8b:c9:e6:9b:30:ec:bb:7a:39:8a:bb:59:d0:
39:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F7:D8:76:E7:81:B4:7D:BF:E7:A4:5F:77:22:B8:D8:C0:DF:D2:82
X509v3 Authority Key Identifier:
keyid:04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:26:3e:06:d7:4a:a5:0a:7e:4c:df:c3:a7:88:ac:69:dc:04:
4a:b9:3d:4c:45:f8:5e:cd:a5:41:88:c7:92:4a:37:32:02:87:
f0:b7:f3:46:aa:78:c7:f5:08:9c:0e:49:1e:f8:7a:90:fe:a5:
5e:59:fd:72:7c:2e:7f:f8:47:81:44:61:7b:ed:01:28:7a:dd:
d7:b3:c7:33:47:f1:da:39:5e:2f:a6:9a:db:48:ec:a4:e9:0a:
e4:8c:68:8a:ce:99:59:80:7e:a7:88:68:76:e1:98:36:ac:f5:
8e:7e:ee:ee:6a:9d:b8:c4:4f:24:82:97:a3:a2:69:e0:72:36:
f6:27:aa:34:73:93:43:85:2f:82:65:65:65:d4:e6:62:af:1b:
8f:22:83:35:a9:db:89:4a:14:c9:91:cd:10:dc:90:fc:af:b5:
26:0f:4d:fe:df:ff:62:39:8c:d6:e8:1e:a6:ec:6e:1b:18:01:
c7:26:91:d7:c2:aa:8a:d4:c6:30:f7:d9:08:ab:a4:c8:00:1c:
10:20:95:30:d4:22:ad:12:79:6e:b1:74:b2:af:0e:cf:51:23:
a4:e8:ca:44:49:ea:52:81:c5:d5:30:88:39:ec:d8:7e:d0:55:
6c:0d:1d:5e:69:93:45:10:b5:ce:e7:2a:c1:b3:6a:8e:7b:c7:
24:f5:4d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:42 2025 by rpki-client