Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
File: BeHQfebxKPRpxMOzAorfjU034tk.mft (raw, json)
Hash identifier: s0zbtnWW6KRtVimK7mi3kTwm/X0udUBAr3KfMqG4tws=
Subject key identifier: DB:5A:79:5D:26:7C:95:3B:5B:C0:94:12:CC:18:BE:C8:35:37:A0:5B
Authority key identifier: 05:E1:D0:7D:E6:F1:28:F4:69:C4:C3:B3:02:8A:DF:8D:4D:37:E2:D9
Certificate issuer: /CN=05e1d07de6f128f469c4c3b3028adf8d4d37e2d9
Certificate serial: 0197B6329F7711C23B5C0044D0BF1800D834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 11:01:00 +0000
Manifest this update: Sat 28 Jun 2025 11:01:00 +0000
Manifest next update: Sun 29 Jun 2025 11:01:00 +0000
Files and hashes: 1: 5_4qOd1GTRdKd6DbyMT4VAzgn60.roa (hash: Q449y6NU5T0NgahXGNO0aRD91GR+m9cfLNErlQRiyf0=)
2: BeHQfebxKPRpxMOzAorfjU034tk.crl (hash: FkZKL5FOUzopb+kh6zKnYDigcRdimBa6orIg9cBBdfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:9f:77:11:c2:3b:5c:00:44:d0:bf:18:00:d8:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05e1d07de6f128f469c4c3b3028adf8d4d37e2d9
Validity
Not Before: Jun 28 11:01:00 2025 GMT
Not After : Jun 29 11:01:00 2025 GMT
Subject: CN=db5a795d267c953b5bc09412cc18bec83537a05b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e6:a1:7b:bf:80:ed:f0:bc:30:97:99:e3:c7:
69:7c:ed:5f:d7:6b:65:25:d0:5b:d7:22:5b:96:60:
16:fe:25:b9:11:38:64:67:db:64:f1:f1:7b:e1:e3:
33:4d:00:1f:9b:92:6f:5a:b9:65:d1:36:a6:c4:e0:
0d:ab:ec:93:42:ed:75:0c:0f:bb:4f:78:ec:e4:7a:
1b:b4:b9:b2:77:47:2a:49:66:bb:8c:87:b2:40:db:
d2:78:05:f7:6e:00:d9:97:be:07:76:6d:ca:e9:35:
1b:61:2d:f1:e9:c7:a1:82:b6:e7:da:84:cd:de:59:
90:09:f7:0a:4e:8c:43:d1:1d:49:02:5e:51:c4:70:
7c:d8:7d:7e:4b:b1:ce:95:86:6a:4c:c3:1f:a0:4c:
37:f3:0a:34:2b:69:e6:c7:8c:c8:de:92:84:c4:88:
4a:dc:fa:29:4a:59:bd:15:0c:4f:bc:a6:b5:fa:16:
d5:b3:8f:d7:8a:3f:b0:a2:16:c9:52:75:5e:7a:8c:
e4:f7:cf:0d:0b:99:86:b6:bd:96:e0:07:60:65:54:
48:04:9e:2e:1d:03:bb:7d:ce:ee:9a:be:21:02:73:
5b:8e:0d:6d:81:fc:7d:09:41:b0:77:9f:19:58:5a:
5b:cb:bf:72:d4:25:1d:87:7a:86:26:4e:ed:1f:0f:
e0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5A:79:5D:26:7C:95:3B:5B:C0:94:12:CC:18:BE:C8:35:37:A0:5B
X509v3 Authority Key Identifier:
keyid:05:E1:D0:7D:E6:F1:28:F4:69:C4:C3:B3:02:8A:DF:8D:4D:37:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:de:5b:57:28:70:85:c1:da:b5:75:0d:a7:83:88:af:81:86:
69:44:11:77:f4:e9:60:85:e5:ab:36:26:0d:93:21:ca:a0:0e:
8e:85:80:23:cd:9e:27:d0:5e:8f:f9:3b:8e:f1:01:18:b4:b0:
54:1e:2e:74:ff:87:be:be:a8:43:c6:2a:bb:78:9a:10:c0:5c:
2d:bc:7b:cc:ac:e1:3d:06:b5:31:a8:0f:76:d0:a3:e3:11:a8:
ef:5a:b7:7f:b7:de:cf:51:10:93:75:2a:ff:75:cb:0c:f0:83:
b1:a0:5a:d4:af:cb:91:67:8c:d5:42:f1:5e:40:a3:57:e7:18:
ab:19:f1:34:66:99:3d:89:64:05:79:62:55:59:a7:e2:1a:87:
8e:4c:82:c3:51:d6:06:a3:00:51:18:00:23:b7:a3:dc:91:32:
2d:dc:b8:0c:cc:b1:5b:02:35:86:da:24:25:20:f8:50:3a:67:
12:3e:4a:2c:55:f0:8a:79:17:07:4f:74:4b:ac:58:92:06:23:
a9:a2:e3:d7:f6:4f:23:fe:61:fa:38:df:ad:c6:7c:71:bc:9d:
8f:df:88:4f:1e:69:d3:ac:83:83:05:ba:dc:b6:97:a2:24:20:
1f:44:a1:d1:ab:d4:86:33:e7:5d:9a:ec:5d:dd:9d:cf:84:cb:
91:5a:a4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:55:48 2025 by rpki-client