Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
File: BesSFXMXvsWP1B2S_xBbNhhkpvI.mft (raw, json)
Hash identifier: G97yRERD0rfp3w25GBV3YLBp36XlCJKnHJPH+HMQ08c=
Subject key identifier: 70:C9:29:A7:1E:F1:F6:D4:10:49:B4:0B:23:C0:D6:D7:1F:35:12:E8
Authority key identifier: 05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
Certificate issuer: /CN=05eb12157317bec58fd41d92ff105b361864a6f2
Certificate serial: 0199FC589081999589416DE785F284FC4EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
Manifest number: 09C1
Signing time: Sun 19 Oct 2025 12:01:26 +0000
Manifest this update: Sun 19 Oct 2025 12:01:26 +0000
Manifest next update: Mon 20 Oct 2025 12:01:26 +0000
Files and hashes: 1: BesSFXMXvsWP1B2S_xBbNhhkpvI.crl (hash: cUs46CJZA+v2jdTNg2yDXkiGe1T4FZxCb1lf6+zf580=)
2: GmOEGytdPBI0M6M4F6yAHlQDNk4.roa (hash: rCxXhyimVf47IInvL9Aht6Onq89mIZd51JHlO7lZEGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:90:81:99:95:89:41:6d:e7:85:f2:84:fc:4e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05eb12157317bec58fd41d92ff105b361864a6f2
Validity
Not Before: Oct 19 12:01:26 2025 GMT
Not After : Oct 20 12:01:26 2025 GMT
Subject: CN=70c929a71ef1f6d41049b40b23c0d6d71f3512e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e0:12:eb:d3:a3:3e:c9:16:ad:6d:6f:94:c6:
4c:26:da:bd:c3:d9:ec:17:a8:74:b5:6f:4d:a2:00:
25:ac:ef:0f:87:33:b3:ef:f0:b7:8c:ff:a4:28:55:
9c:a6:ac:41:86:be:a4:31:75:53:c9:ab:97:99:95:
1c:32:c8:13:13:10:6d:d3:e6:64:e9:e2:15:f5:f5:
1c:00:2b:34:a9:0c:97:8e:90:4a:2b:7a:84:58:01:
68:c4:c9:3a:3f:76:ff:a4:a4:fa:7d:14:c4:df:dd:
35:b2:40:33:9e:de:10:2d:a1:22:44:f9:06:84:37:
bf:9f:34:29:28:6c:ae:58:36:2a:05:34:92:4a:f7:
3b:7c:ac:79:ec:33:1d:35:cf:ef:8b:6b:21:cb:85:
a1:ec:b8:d0:16:c3:44:4b:a6:b1:81:92:b6:16:49:
b2:bb:69:ca:ae:7f:40:e1:ac:07:d6:78:d4:db:a7:
6a:70:4d:b7:f5:1c:c0:ea:54:00:1f:6e:2e:78:9a:
0a:ac:a6:44:6a:88:74:b6:72:b0:c0:3a:4e:62:25:
86:0a:88:d0:56:2e:3c:9d:8b:be:0f:f7:8f:81:f6:
c9:5e:f3:62:91:b5:9f:86:37:3f:63:f5:74:35:02:
66:93:04:83:82:61:38:1f:39:61:6c:4c:a0:45:9b:
e6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C9:29:A7:1E:F1:F6:D4:10:49:B4:0B:23:C0:D6:D7:1F:35:12:E8
X509v3 Authority Key Identifier:
keyid:05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:25:e7:3c:0a:0d:9b:89:f9:88:f4:c9:84:66:4a:19:2a:c0:
ad:ff:1a:9a:f2:78:b0:62:07:b4:02:f1:a1:57:85:37:e6:a1:
f1:3f:cd:5a:61:e2:52:65:d4:75:62:59:c0:63:5b:4b:3d:d3:
f3:2c:46:94:fb:5b:97:5c:4f:de:39:36:a4:d1:8f:13:77:2d:
e3:e1:86:85:ac:c6:83:3b:a2:a8:56:52:4e:cf:a2:a5:a9:29:
42:34:e1:e1:e9:83:c9:b4:17:d3:a1:f5:ab:cf:ac:01:3a:14:
35:69:a9:18:aa:08:c9:cc:e0:85:73:8f:91:3e:e4:49:83:0d:
97:b8:b1:7e:a1:7c:1e:f9:70:b7:30:10:31:ec:71:b2:e3:74:
f0:c0:c4:c5:9c:24:f3:d9:ea:56:88:d7:ee:4b:0b:ae:aa:62:
63:a0:1a:8d:36:e7:ea:35:18:a9:7b:79:b7:f7:b1:4f:e2:79:
15:81:c9:eb:89:92:65:5e:02:2e:25:f7:a5:4e:db:eb:b0:31:
f1:fe:32:fd:ce:45:96:03:64:d0:d2:6a:04:65:b1:b7:19:e3:
00:9b:eb:a3:00:01:a3:2a:e6:71:7b:5b:01:09:c3:0c:39:95:
ee:f3:f0:6a:ea:93:1b:db:93:62:c0:43:58:b3:2e:3f:de:55:
6e:09:a6:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WJCBmZWJQW3nhfKE/E6yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZWIxMjE1NzMxN2JlYzU4ZmQ0MWQ5MmZmMTA1YjM2MTg2
NGE2ZjIwHhcNMjUxMDE5MTIwMTI2WhcNMjUxMDIwMTIwMTI2WjAzMTEwLwYDVQQD
Eyg3MGM5MjlhNzFlZjFmNmQ0MTA0OWI0MGIyM2MwZDZkNzFmMzUxMmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweAS69OjPskWrW1vlMZMJtq9w9ns
F6h0tW9NogAlrO8PhzOz7/C3jP+kKFWcpqxBhr6kMXVTyauXmZUcMsgTExBt0+Zk
6eIV9fUcACs0qQyXjpBKK3qEWAFoxMk6P3b/pKT6fRTE3901skAznt4QLaEiRPkG
hDe/nzQpKGyuWDYqBTSSSvc7fKx57DMdNc/vi2shy4Wh7LjQFsNES6axgZK2Fkmy
u2nKrn9A4awH1njU26dqcE239RzA6lQAH24ueJoKrKZEaoh0tnKwwDpOYiWGCojQ
Vi48nYu+D/ePgfbJXvNikbWfhjc/Y/V0NQJmkwSDgmE4HzlhbEygRZvm4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDJKace8fbUEEm0CyPA1tcfNRLoMB8GA1UdIwQY
MBaAFAXrEhVzF77Fj9Qdkv8QWzYYZKbyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmVzU0ZYTVh2c1dQMUIyU194QmJOaGhrcHZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yMGM4NDItYjQ5NC00ZGI2LWFhNzUt
M2RkMzZhMjlmYTI4LzEvQmVzU0ZYTVh2c1dQMUIyU194QmJOaGhrcHZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8yMGM4NDItYjQ5NC00ZGI2LWFhNzUtM2RkMzZhMjlmYTI4
LzEvQmVzU0ZYTVh2c1dQMUIyU194QmJOaGhrcHZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfSXnPAoN
m4n5iPTJhGZKGSrArf8amvJ4sGIHtALxoVeFN+ah8T/NWmHiUmXUdWJZwGNbSz3T
8yxGlPtbl1xP3jk2pNGPE3ct4+GGhazGgzuiqFZSTs+ipakpQjTh4emDybQX06H1
q8+sAToUNWmpGKoIyczghXOPkT7kSYMNl7ixfqF8HvlwtzAQMexxsuN08MDExZwk
89nqVojX7ksLrqpiY6AajTbn6jUYqXt5t/exT+J5FYHJ64mSZV4CLiX3pU7b67Ax
8f4y/c5FlgNk0NJqBGWxtxnjAJvrowABoyrmcXtbAQnDDDmV7vPwauqTG9uTYsBD
WLMuP95Vbgmmrg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:50 2025 by rpki-client