Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
File: BesSFXMXvsWP1B2S_xBbNhhkpvI.mft (raw, json)
Hash identifier: 5D8Y747KZrG3miQqkwdyaxIJy4ItQAzvuBWqTjR69RM=
Subject key identifier: 48:69:FF:36:A4:6D:EA:38:24:AB:5F:43:D6:80:1F:BD:A9:2E:1B:3B
Authority key identifier: 05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
Certificate issuer: /CN=05eb12157317bec58fd41d92ff105b361864a6f2
Certificate serial: 0198D6CD71F7BF9529B2AE1AD7C8B10E6A3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
Manifest number: 0929
Signing time: Sat 23 Aug 2025 12:00:44 +0000
Manifest this update: Sat 23 Aug 2025 12:00:44 +0000
Manifest next update: Sun 24 Aug 2025 12:00:44 +0000
Files and hashes: 1: BesSFXMXvsWP1B2S_xBbNhhkpvI.crl (hash: PPqCLpGDLIJWJ2C6xik398/rihw5lJgP0Kht00YHJxY=)
2: GmOEGytdPBI0M6M4F6yAHlQDNk4.roa (hash: rCxXhyimVf47IInvL9Aht6Onq89mIZd51JHlO7lZEGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:71:f7:bf:95:29:b2:ae:1a:d7:c8:b1:0e:6a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05eb12157317bec58fd41d92ff105b361864a6f2
Validity
Not Before: Aug 23 12:00:44 2025 GMT
Not After : Aug 24 12:00:44 2025 GMT
Subject: CN=4869ff36a46dea3824ab5f43d6801fbda92e1b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4f:0b:a0:e8:96:74:e9:ca:f2:89:3d:d7:da:
45:ec:0f:c0:e3:91:84:f8:ef:99:40:13:19:f5:70:
64:2d:22:e9:87:4f:b8:15:28:a8:34:f1:71:1d:09:
b5:e4:97:16:fb:4a:85:ee:f2:04:58:54:92:54:52:
f8:d0:6b:08:ad:29:98:51:fc:41:0f:43:11:ab:af:
48:7f:90:aa:7a:0e:c4:98:03:0a:fb:92:6e:b9:79:
6a:84:dc:6d:b7:37:c0:bf:c5:c3:e9:37:b0:95:40:
38:d4:09:18:7c:fb:a1:65:dd:93:3d:e8:ff:59:4b:
ae:68:a1:5b:71:a6:7c:0a:c9:53:49:fc:98:31:a6:
46:e5:2f:41:f2:f8:7d:7d:76:a6:8f:85:7d:e3:1b:
4d:41:53:d9:d2:b7:96:da:6d:23:dd:69:45:a8:f8:
35:85:01:8f:bf:90:e7:ae:a1:d4:18:e5:40:b1:cc:
e3:45:29:df:dd:bd:23:c6:72:c6:cb:a6:20:1d:b1:
5a:ef:7f:1d:4c:84:3c:5e:a2:81:2c:c8:46:ee:07:
58:e6:37:72:18:19:95:81:f9:88:8f:f8:ca:47:15:
b4:f6:9d:0a:89:ac:dd:be:a3:ef:b5:05:81:11:5b:
ea:74:9b:6c:d4:21:cd:a8:0e:01:6e:8e:58:ab:ea:
88:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:69:FF:36:A4:6D:EA:38:24:AB:5F:43:D6:80:1F:BD:A9:2E:1B:3B
X509v3 Authority Key Identifier:
keyid:05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:89:35:7b:19:02:93:a2:2d:a3:53:79:a3:94:bf:d9:bd:9a:
67:a9:0a:67:51:2c:e4:38:02:e8:60:a4:7d:90:77:aa:b7:7d:
ea:6e:7d:4b:12:f9:d1:60:7c:f2:a2:79:e3:aa:f3:91:30:69:
af:7d:ad:e0:44:69:a0:d5:24:33:b7:0b:64:44:5b:6d:ed:b1:
93:ba:c3:b0:46:83:10:62:db:6d:9e:9f:c0:3d:6e:79:da:b1:
fc:d4:d9:4e:ea:6e:3e:af:5e:e9:20:82:59:5d:62:d0:2b:07:
1f:10:c2:e2:3a:44:64:7a:16:80:fb:27:06:3e:40:c1:a8:76:
e7:30:8e:e5:96:62:84:d3:2e:3c:f0:05:69:42:73:6a:d7:3c:
23:86:ca:0d:a0:2f:9e:42:2b:d3:81:b5:98:da:82:51:ec:f1:
e5:90:3c:91:bb:a4:5e:7b:63:91:2a:0d:5b:ce:39:1b:fd:b3:
3d:1a:b3:81:be:d2:9b:d8:58:02:f5:46:6d:4a:ab:a3:1e:3c:
13:ba:ae:5d:a5:8f:44:72:fe:f6:06:3a:6d:99:bd:1d:f3:d8:
ec:58:8f:2f:b0:85:ff:06:1c:5e:b4:b7:60:3f:e9:05:b9:c3:
31:47:79:40:0a:aa:0c:1f:3f:c3:67:da:a3:4e:6c:b5:95:cf:
8b:ec:df:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzXH3v5Upsq4a18ixDmo+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZWIxMjE1NzMxN2JlYzU4ZmQ0MWQ5MmZmMTA1YjM2MTg2
NGE2ZjIwHhcNMjUwODIzMTIwMDQ0WhcNMjUwODI0MTIwMDQ0WjAzMTEwLwYDVQQD
Eyg0ODY5ZmYzNmE0NmRlYTM4MjRhYjVmNDNkNjgwMWZiZGE5MmUxYjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5U8LoOiWdOnK8ok919pF7A/A45GE
+O+ZQBMZ9XBkLSLph0+4FSioNPFxHQm15JcW+0qF7vIEWFSSVFL40GsIrSmYUfxB
D0MRq69If5Cqeg7EmAMK+5JuuXlqhNxttzfAv8XD6TewlUA41AkYfPuhZd2TPej/
WUuuaKFbcaZ8CslTSfyYMaZG5S9B8vh9fXamj4V94xtNQVPZ0reW2m0j3WlFqPg1
hQGPv5DnrqHUGOVAsczjRSnf3b0jxnLGy6YgHbFa738dTIQ8XqKBLMhG7gdY5jdy
GBmVgfmIj/jKRxW09p0KiazdvqPvtQWBEVvqdJts1CHNqA4Bbo5Yq+qIPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhp/zakbeo4JKtfQ9aAH72pLhs7MB8GA1UdIwQY
MBaAFAXrEhVzF77Fj9Qdkv8QWzYYZKbyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmVzU0ZYTVh2c1dQMUIyU194QmJOaGhrcHZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yMGM4NDItYjQ5NC00ZGI2LWFhNzUt
M2RkMzZhMjlmYTI4LzEvQmVzU0ZYTVh2c1dQMUIyU194QmJOaGhrcHZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8yMGM4NDItYjQ5NC00ZGI2LWFhNzUtM2RkMzZhMjlmYTI4
LzEvQmVzU0ZYTVh2c1dQMUIyU194QmJOaGhrcHZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuIk1exkC
k6Ito1N5o5S/2b2aZ6kKZ1Es5DgC6GCkfZB3qrd96m59SxL50WB88qJ546rzkTBp
r32t4ERpoNUkM7cLZERbbe2xk7rDsEaDEGLbbZ6fwD1uedqx/NTZTupuPq9e6SCC
WV1i0CsHHxDC4jpEZHoWgPsnBj5Awah25zCO5ZZihNMuPPAFaUJzatc8I4bKDaAv
nkIr04G1mNqCUezx5ZA8kbukXntjkSoNW845G/2zPRqzgb7Sm9hYAvVGbUqrox48
E7quXaWPRHL+9gY6bZm9HfPY7FiPL7CF/wYcXrS3YD/pBbnDMUd5QAqqDB8/w2fa
o05stZXPi+zfnQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:13:45 2025 by rpki-client