Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
File: BesSFXMXvsWP1B2S_xBbNhhkpvI.mft (raw, json)
Hash identifier: gpNfEdN6OiWrQMSiziWL3xLDflStveJ4l4gnfQH07NM=
Subject key identifier: E5:BD:73:0A:67:45:59:C0:FB:F7:45:A7:79:E5:4D:06:99:66:30:D0
Authority key identifier: 05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
Certificate issuer: /CN=05eb12157317bec58fd41d92ff105b361864a6f2
Certificate serial: 019D273AE92F27CCF3FFCBF1C351D1787318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
Manifest number: 0B65
Signing time: Wed 25 Mar 2026 23:01:05 +0000
Manifest this update: Wed 25 Mar 2026 23:01:05 +0000
Manifest next update: Thu 26 Mar 2026 23:01:05 +0000
Files and hashes: 1: 7eHaRVW-XDpYbYMS7PM9kVQMrmU.roa (hash: IHRINIPPQysqZwAhYPRCxmedKH/g1vm6KrKFWWCI12A=)
2: BesSFXMXvsWP1B2S_xBbNhhkpvI.crl (hash: 7gexbTTttCSdrOUGwE2wOsKpO3lUeT6ay4kJZ4f+iJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:e9:2f:27:cc:f3:ff:cb:f1:c3:51:d1:78:73:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05eb12157317bec58fd41d92ff105b361864a6f2
Validity
Not Before: Mar 25 23:01:05 2026 GMT
Not After : Mar 26 23:01:05 2026 GMT
Subject: CN=e5bd730a674559c0fbf745a779e54d06996630d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1d:50:d6:d7:2f:97:4f:74:4a:65:8b:88:d8:
e2:7d:15:47:7d:28:04:50:37:a0:5b:34:92:9c:8f:
ea:c1:3f:ab:74:73:bd:fd:06:0d:cf:f7:69:bb:93:
b6:0f:68:77:0b:01:a2:85:19:de:ca:0f:e6:d1:96:
f1:97:c0:0f:ac:b0:a9:a9:69:b3:d2:51:07:ad:8f:
9d:f4:06:f6:7e:f5:7f:ec:c5:f2:96:da:a7:0d:0c:
41:fe:00:f1:fb:97:d3:08:27:76:a8:54:19:5a:3a:
5a:e1:d8:c5:b7:11:2c:8a:1f:f6:a3:cf:80:9a:7e:
ba:0d:39:ef:2e:75:99:d3:7d:9f:e8:0e:2e:fc:87:
1a:aa:9f:a1:36:11:fc:c2:bf:40:fd:35:09:2e:4e:
4c:bc:53:7d:66:70:c7:70:1c:b8:9d:b8:78:f7:64:
a8:83:b1:38:79:30:7a:9f:c0:6c:3b:26:20:04:49:
1f:ae:43:11:59:59:df:a3:d9:4d:86:e6:67:df:4f:
34:d4:a4:80:b4:a6:f6:a9:3a:56:b9:87:f3:f0:96:
4d:e5:a0:70:8d:a4:b1:ca:18:98:c2:5c:33:53:99:
97:7b:2d:db:a9:80:99:16:ec:60:e0:19:33:d8:70:
b8:2b:1d:9e:75:22:ee:6c:3d:16:30:e7:e1:2f:32:
10:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BD:73:0A:67:45:59:C0:FB:F7:45:A7:79:E5:4D:06:99:66:30:D0
X509v3 Authority Key Identifier:
keyid:05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ea:2f:9d:a5:21:5f:f3:b1:e6:a9:bc:45:0c:96:dd:d9:87:
e3:ba:47:5e:81:3e:c5:02:28:5f:52:2d:95:cd:d8:28:90:2b:
a6:be:68:d4:cf:78:87:17:d5:f0:22:8f:1c:67:8e:af:40:a4:
3e:9e:30:ff:78:cf:28:a2:91:7d:dc:9b:42:cf:6a:c6:0f:04:
cf:c3:9f:cb:12:ea:71:e4:a2:73:51:39:2f:6f:9c:d2:0e:7c:
c1:f7:f3:5b:60:7c:ac:27:5e:0b:98:e7:ae:d9:e5:93:c0:8c:
f9:73:43:5f:3d:d8:db:90:21:f7:3c:17:4a:5a:95:a3:72:7e:
e8:0b:27:07:83:02:d7:d5:50:1a:34:52:80:d2:1b:e2:e4:5c:
0e:68:96:0e:e5:1c:bb:10:62:4d:ab:a1:d3:16:ea:ca:9c:df:
25:b1:d9:97:8b:2c:52:2d:88:0c:d0:2f:e5:2f:cf:ff:44:f6:
8a:f3:0b:61:31:74:a8:e7:04:a8:b1:ef:c4:2f:0a:8b:af:9d:
12:a7:bb:88:fa:3c:95:05:22:76:6d:e3:b1:df:0b:a3:b0:44:
13:3d:e7:f3:61:7f:3c:84:29:5b:cb:be:1d:70:57:5f:07:b3:
1a:5d:76:da:3c:1a:04:a5:d1:2b:ba:7c:25:4c:b7:17:a4:86:
ef:fc:40:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:52 2026 by rpki-client