Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
File: BeHQfebxKPRpxMOzAorfjU034tk.mft (raw, json)
Hash identifier: JfQUZW08fSjSxHsNiZA0epGQsu1feD/Jo1qbIHijq+g=
Subject key identifier: 85:C8:1A:D3:3A:19:33:94:1D:0C:67:2C:09:C5:6C:07:7D:0A:3C:C0
Authority key identifier: 05:E1:D0:7D:E6:F1:28:F4:69:C4:C3:B3:02:8A:DF:8D:4D:37:E2:D9
Certificate issuer: /CN=05e1d07de6f128f469c4c3b3028adf8d4d37e2d9
Certificate serial: 0198D5F120B83D37B27F3FCDC451CEE61703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 08:00:06 +0000
Manifest this update: Sat 23 Aug 2025 08:00:06 +0000
Manifest next update: Sun 24 Aug 2025 08:00:06 +0000
Files and hashes: 1: 5_4qOd1GTRdKd6DbyMT4VAzgn60.roa (hash: Q449y6NU5T0NgahXGNO0aRD91GR+m9cfLNErlQRiyf0=)
2: BeHQfebxKPRpxMOzAorfjU034tk.crl (hash: yOUhwafxINSOyDL/Z4vG6YIkCossFcU2jzifAVVJXmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:20:b8:3d:37:b2:7f:3f:cd:c4:51:ce:e6:17:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05e1d07de6f128f469c4c3b3028adf8d4d37e2d9
Validity
Not Before: Aug 23 08:00:06 2025 GMT
Not After : Aug 24 08:00:06 2025 GMT
Subject: CN=85c81ad33a1933941d0c672c09c56c077d0a3cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ae:ad:6e:15:c4:d2:fa:73:61:14:16:4b:0e:
8f:3d:31:5a:dc:83:54:46:db:b1:6d:c7:ab:6e:39:
97:61:5c:b2:d8:ea:d8:99:b2:29:40:b6:31:04:46:
6c:24:2b:cf:bb:c2:9e:64:10:af:4c:f3:e6:6c:f9:
44:17:6e:16:49:dd:9b:0a:9c:21:f7:d4:ea:98:33:
6e:91:f0:47:75:6b:ce:9a:ab:16:14:33:f5:5a:05:
22:b3:39:72:f2:7d:b3:ce:a8:55:5c:a3:09:7f:fc:
ff:fb:d1:f1:41:26:2f:e3:02:cc:76:de:b8:0d:4f:
a4:8a:da:40:a0:25:0a:75:ce:4c:9e:c2:44:eb:f6:
16:d2:14:07:a9:85:47:31:79:fd:9a:10:2e:0c:8f:
fc:0c:5e:8a:8a:22:94:fd:de:62:2e:f2:33:6f:96:
3d:b5:1b:b2:0a:99:c5:79:e0:bd:6c:20:eb:3b:43:
1f:4f:de:71:f6:84:3e:e9:12:27:66:c4:c4:63:cf:
60:2d:d8:87:32:34:a4:b8:49:8d:a1:55:d0:2e:78:
d9:f2:02:91:1a:7f:e2:ae:4d:44:75:f7:da:8b:69:
64:9c:b2:4e:65:57:b0:c6:ad:78:f5:01:e8:6f:dc:
5a:00:fb:43:eb:12:d5:18:28:52:e4:15:56:85:35:
99:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C8:1A:D3:3A:19:33:94:1D:0C:67:2C:09:C5:6C:07:7D:0A:3C:C0
X509v3 Authority Key Identifier:
keyid:05:E1:D0:7D:E6:F1:28:F4:69:C4:C3:B3:02:8A:DF:8D:4D:37:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d8:44:8d:f8:d0:21:99:e0:ff:4a:90:5e:1f:a9:ea:35:1f:
76:cf:d8:a3:bc:0c:86:bf:82:54:a2:af:6f:e4:a6:86:92:3e:
fb:cb:2d:a1:c2:a6:01:3f:c0:54:7c:ec:ae:4a:28:15:4c:ba:
9e:74:93:2c:1f:d4:f7:f8:f3:f9:f9:e7:ea:87:0b:02:39:77:
cf:36:94:c1:22:0d:78:34:53:e6:37:7b:f0:1b:62:35:a2:a9:
66:0e:e8:b2:83:5c:9f:7c:e3:39:dd:5c:a5:00:4d:5d:d4:a7:
29:ad:00:d4:76:b2:1b:ee:d5:d5:d2:28:71:f1:61:a1:f8:3e:
f8:9f:c1:1a:91:3e:29:ac:54:16:d1:66:99:e4:b9:72:ea:ac:
ac:86:84:43:ab:e4:f3:a5:b2:a1:00:c3:d3:64:95:ee:69:dd:
d5:b1:b3:52:43:29:f3:f4:c6:b0:1c:cc:39:9c:8f:f2:89:d9:
84:7a:9b:2b:af:b8:00:d5:5a:44:3b:4c:55:5f:68:97:0c:3e:
ea:c1:7e:c0:cd:fb:45:10:0e:19:c5:c2:0b:44:a5:22:4d:b1:
88:b1:d7:02:0d:d9:ee:cc:13:ed:6f:7f:93:45:a4:71:2a:4f:
fb:c5:9e:bb:e2:cf:1f:25:e1:5e:88:fe:b6:5a:d6:59:b0:ba:
0f:ec:92:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:43 2025 by rpki-client