Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
File: BE-_fHvu77FSWiYU2c1jpCafn0o.mft (raw, json)
Hash identifier: 1A20Ylr6dcbes2HL4fdIJfhud3xIy2TAnIOllXis0Hc=
Subject key identifier: 3D:08:8D:2C:A6:FA:A8:53:51:ED:B1:CC:13:41:1A:50:E3:A7:62:EC
Authority key identifier: 04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
Certificate issuer: /CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Certificate serial: 019A00A33A6F3A7BBF7AE0AA442F6F25FE12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
Manifest number: 08A4
Signing time: Mon 20 Oct 2025 08:01:28 +0000
Manifest this update: Mon 20 Oct 2025 08:01:28 +0000
Manifest next update: Tue 21 Oct 2025 08:01:28 +0000
Files and hashes: 1: BE-_fHvu77FSWiYU2c1jpCafn0o.crl (hash: jIB5XTpup6c1y7vFP010Hm/U0sGDIjOUE0L8XWJd5Ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:3a:6f:3a:7b:bf:7a:e0:aa:44:2f:6f:25:fe:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Validity
Not Before: Oct 20 08:01:28 2025 GMT
Not After : Oct 21 08:01:28 2025 GMT
Subject: CN=3d088d2ca6faa85351edb1cc13411a50e3a762ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:54:ee:1f:d3:a8:f6:5a:01:a2:7d:cc:8a:3e:
33:7c:01:55:e4:56:66:3a:c5:d1:1d:34:df:7c:e7:
68:d3:6a:8b:e1:d8:2b:8b:54:f9:4f:58:7d:34:d8:
00:51:ed:c9:da:28:30:1c:9a:d9:4d:4f:7f:03:08:
92:39:dd:d6:08:9b:37:30:cd:6c:69:77:f0:a8:67:
58:c1:1e:d8:e6:25:3f:6c:a5:84:b6:f1:da:1f:5c:
eb:fa:cd:5c:84:3c:48:d5:4f:c7:97:81:2f:e7:48:
a4:28:4d:43:2c:40:48:d7:0b:40:2e:dc:0d:32:77:
b7:29:68:4f:7f:14:49:e7:5e:1b:51:e6:9d:09:b9:
59:97:1e:ed:04:38:fd:f9:df:2b:33:6e:46:8f:47:
f1:4b:0e:0e:18:d8:9a:ba:9f:60:28:6d:7f:60:3e:
60:a5:8e:42:9c:11:02:10:35:73:a5:ff:aa:1a:34:
f8:dc:01:1a:e3:a5:1a:ea:af:90:2c:d2:91:c9:f9:
ca:bd:d5:92:d9:6f:6b:05:8a:fc:7a:a7:0e:74:9e:
47:dc:2b:9a:f1:c3:6b:8a:2c:d9:96:55:de:45:80:
5e:36:36:c6:1b:d5:de:54:51:50:48:ca:f2:64:3b:
fd:08:10:ff:24:f5:4f:fb:eb:f7:69:aa:6c:8e:de:
20:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:08:8D:2C:A6:FA:A8:53:51:ED:B1:CC:13:41:1A:50:E3:A7:62:EC
X509v3 Authority Key Identifier:
keyid:04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:18:b0:9d:e2:0c:e6:f6:98:08:74:4b:b9:f0:d0:08:9b:47:
0f:b5:ae:a2:06:28:8c:59:bd:eb:1e:09:cd:c3:09:b2:94:e1:
f4:1d:00:59:2c:b0:fc:83:f8:69:57:3b:82:4e:63:a7:ed:83:
04:56:50:87:7c:ec:dc:c6:5d:01:65:4a:73:be:99:90:9b:81:
e0:55:9a:35:33:46:43:c9:e0:3d:93:f3:d4:24:6c:9f:10:48:
7c:77:33:c0:4f:24:ee:d1:68:f1:ab:47:39:a5:9d:bf:43:3d:
92:bf:86:2b:22:dc:da:1e:f9:25:62:c6:1c:4a:75:41:97:86:
af:d2:41:8a:80:2f:e6:e2:ca:9a:cc:27:76:09:9d:a4:95:c4:
fc:8a:10:bd:b9:f3:44:9a:a4:43:1a:d6:de:ec:f1:29:04:e2:
ed:9f:f9:34:88:1d:be:1c:61:20:bd:a9:33:44:a6:c2:1e:d4:
c9:b8:9a:56:43:86:64:10:45:aa:82:46:2a:d8:4a:7f:56:0f:
a5:8d:83:dd:0c:2e:4f:00:88:2d:51:28:cc:dd:ba:b2:57:a9:
73:dc:45:89:ac:c9:33:05:1c:ab:bb:a3:d6:31:e1:28:b0:89:
fc:05:34:3e:c5:b8:9c:bc:4a:03:80:d7:c7:e9:1a:df:a8:54:
b7:c4:90:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:33:35 2025 by rpki-client