Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
File: _BeVJZEZ7optEI6bXL4LuQwJjs4.mft (raw, json)
Hash identifier: ZkWbm6cu78GqgHlMUve85aC0hp4nevqMW+7YAf8+JxY=
Subject key identifier: 97:42:4E:23:20:37:C9:95:B2:E9:B5:46:62:02:79:01:45:E6:CE:90
Authority key identifier: FC:17:95:25:91:19:EE:8A:6D:10:8E:9B:5C:BE:0B:B9:0C:09:8E:CE
Certificate issuer: /CN=fc1795259119ee8a6d108e9b5cbe0bb90c098ece
Certificate serial: 0197B77CD3D7D5769B5DF245D1AB8FDA49B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
Manifest number: 01AA
Signing time: Sat 28 Jun 2025 17:01:40 +0000
Manifest this update: Sat 28 Jun 2025 17:01:40 +0000
Manifest next update: Sun 29 Jun 2025 17:01:40 +0000
Files and hashes: 1: _BeVJZEZ7optEI6bXL4LuQwJjs4.crl (hash: 3XMROhdqkFJuGqQw5y8LW8393ZbDyHFtnd07qGL/KwY=)
2: xP4juvpCJDFtIojDOBVk5IvnB08.roa (hash: 3K8HKqQzgZ9JbtKLhv6R2lpB9bOzQZ7S4dfHQle+caY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:d3:d7:d5:76:9b:5d:f2:45:d1:ab:8f:da:49:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc1795259119ee8a6d108e9b5cbe0bb90c098ece
Validity
Not Before: Jun 28 17:01:40 2025 GMT
Not After : Jun 29 17:01:40 2025 GMT
Subject: CN=97424e232037c995b2e9b5466202790145e6ce90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0e:9b:ca:1c:9c:35:37:b5:e5:35:18:7f:51:
35:17:27:cd:38:05:d5:a1:47:ed:0a:66:f2:39:53:
98:52:10:2b:cb:d0:c7:7d:13:b2:34:33:47:08:77:
d5:e6:00:8c:8e:14:ae:ff:72:ca:e8:ec:03:be:18:
10:99:91:a1:2d:73:e3:d4:d0:89:1f:cb:43:55:fc:
6b:b5:53:eb:46:61:e1:9f:53:c4:6a:7a:b3:e4:0c:
9a:15:70:cc:a8:c3:71:a4:e1:68:17:b3:e2:85:89:
ec:7b:fe:49:2c:dd:b5:88:71:e3:e7:f7:e9:7b:6b:
f4:80:49:95:e4:25:f3:3d:03:5a:c4:c0:af:8c:c8:
12:6e:49:e4:d9:2d:3c:87:12:28:e3:99:26:bb:40:
cf:0d:8a:48:31:83:4b:91:f3:f8:a4:9f:56:63:7b:
db:77:b4:25:25:76:89:3f:dc:dc:be:e4:43:77:03:
82:74:7b:a0:a2:a7:5e:89:c6:ba:81:7d:14:61:23:
09:a0:ff:ef:03:2c:12:b2:ed:3b:0c:3e:77:d8:af:
2a:eb:60:b9:f2:03:5c:64:5f:3e:62:b2:86:a2:54:
0c:07:6e:9a:11:a5:5a:86:5e:da:11:e5:2e:76:a2:
4a:9f:49:8d:33:74:e8:a5:30:db:9f:82:6a:8e:04:
fc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:42:4E:23:20:37:C9:95:B2:E9:B5:46:62:02:79:01:45:E6:CE:90
X509v3 Authority Key Identifier:
keyid:FC:17:95:25:91:19:EE:8A:6D:10:8E:9B:5C:BE:0B:B9:0C:09:8E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b9:e2:9d:0a:56:1a:f6:10:ca:28:df:2e:e3:f1:99:0e:e5:
31:45:70:b4:96:34:f6:3a:00:94:f5:4c:af:60:00:a5:4d:40:
01:7e:b5:1a:f8:d9:3b:24:d5:ca:2e:b4:6a:c4:54:d3:f4:03:
9a:e9:35:fd:24:60:18:bf:0e:eb:fd:63:f3:ce:05:2b:2b:39:
02:a0:b5:2a:67:40:67:1c:23:0a:5b:64:ef:fe:3e:13:ca:ce:
0a:69:38:e1:82:12:fb:00:c2:8f:80:2e:43:b1:a8:02:c7:11:
5f:7b:71:c6:0b:1f:d0:69:bf:51:1a:b9:12:d0:b9:6e:9f:17:
14:ef:73:ed:02:5d:cd:d8:b5:0e:dd:a2:9a:71:3c:84:3b:db:
0f:07:26:ba:6b:b2:bd:fc:15:4d:ed:cf:62:27:b2:c8:bb:eb:
ba:f7:11:fc:30:82:f9:7d:e8:30:d0:55:1f:28:01:12:e2:ec:
a2:de:41:c4:bf:83:c1:75:f7:71:44:40:f0:1d:80:2c:30:7a:
c8:33:5d:65:21:22:11:e6:0b:60:87:70:63:36:ee:fa:86:5f:
db:a5:02:3a:96:c9:0c:06:58:a3:21:2e:97:7a:66:b0:62:79:
8d:98:86:70:69:95:a9:de:bd:8b:61:74:4a:da:86:81:0d:6b:
bd:42:0a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:13 2025 by rpki-client