Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
File: BEw2vtOpgR94Jg5_X0_S_V54jgM.mft (raw, json)
Hash identifier: PF3QVdssXWFpK9+MRcdFaNy7yjLI2n/V5jWKEpPhJhQ=
Subject key identifier: 83:D7:C8:E3:0D:A7:82:34:99:EA:0B:74:BD:BB:32:2A:78:5A:E0:F6
Authority key identifier: 04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
Certificate issuer: /CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Certificate serial: 0198D4E0B244C9FC570673DCAEEFA50462B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
Manifest number: 0CE1
Signing time: Sat 23 Aug 2025 03:02:32 +0000
Manifest this update: Sat 23 Aug 2025 03:02:32 +0000
Manifest next update: Sun 24 Aug 2025 03:02:32 +0000
Files and hashes: 1: AqwTFt-qyr9ctfZVh_Lc-HmCLI4.roa (hash: 6o18WCqQ1vQmdpr+KgNhHjoy4zxFnk5Txpn2BtXndjc=)
2: BEw2vtOpgR94Jg5_X0_S_V54jgM.crl (hash: Bps8SY/wi/iKSS9XIr1kSUg+pKhOfD9kQ70OZlVYaC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:b2:44:c9:fc:57:06:73:dc:ae:ef:a5:04:62:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Validity
Not Before: Aug 23 03:02:32 2025 GMT
Not After : Aug 24 03:02:32 2025 GMT
Subject: CN=83d7c8e30da7823499ea0b74bdbb322a785ae0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e1:e5:25:09:c6:90:6f:0c:ef:1f:51:78:97:
00:a5:82:09:b5:43:5f:e8:f4:0d:54:b5:3b:d3:d3:
c1:9d:39:82:d7:9c:8a:0d:38:98:4b:c0:94:a9:29:
69:0a:22:b9:a0:57:e9:72:bc:25:b9:41:d7:6f:bb:
55:ac:ad:0e:61:e0:01:5e:5c:02:46:42:06:87:51:
6f:15:62:e2:79:d5:6c:f8:20:aa:75:87:fa:7a:8c:
95:7a:c8:ae:d6:bf:0b:5c:7e:98:b6:b5:9e:28:2a:
24:1c:40:05:a9:14:57:59:15:56:cf:bc:85:c8:6e:
a7:8a:a4:40:e3:b2:d2:a6:4d:a1:e2:a8:cc:b5:e6:
1f:40:38:ec:c9:9a:6a:f3:41:9c:39:b3:42:22:bf:
04:98:fd:31:bc:8f:e8:83:55:6f:4f:a9:da:a9:0c:
cb:ed:0c:38:a2:e4:b4:b5:64:6f:69:94:4e:ae:f2:
bf:d4:17:8f:a4:9d:fc:2d:08:88:ce:f0:e9:69:85:
97:88:6b:2b:78:4f:32:5f:6a:2b:ad:e0:7e:43:db:
62:65:33:38:e9:08:e6:99:ed:01:99:e7:25:bb:17:
92:fc:d2:e9:6f:4e:68:79:6c:aa:19:cd:e6:0b:88:
ad:e1:94:07:1a:80:af:61:e9:63:67:d0:86:ba:e2:
a0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D7:C8:E3:0D:A7:82:34:99:EA:0B:74:BD:BB:32:2A:78:5A:E0:F6
X509v3 Authority Key Identifier:
keyid:04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:3d:f6:8d:6f:ea:8a:92:52:bd:07:ad:df:88:f0:f9:19:7a:
cc:00:d3:0d:f9:47:8d:4f:3c:7a:5d:f8:33:65:b0:76:65:e9:
6d:25:99:4a:c9:6a:b8:05:e5:5a:4b:b3:aa:0a:07:cd:29:c6:
27:0c:3a:cb:54:1b:f8:61:3c:a9:1d:7f:19:24:69:ed:15:71:
5f:38:f6:8d:85:51:86:87:8f:ef:05:c1:16:76:fc:3e:42:a3:
a3:a4:73:de:49:b3:e4:4c:34:81:bb:1c:29:78:5b:48:23:d0:
23:19:c7:3e:76:56:1e:6b:fc:92:55:6e:86:45:92:f8:1d:85:
03:d1:38:0f:76:b0:40:d3:6f:85:54:7d:33:76:69:74:dc:77:
86:5d:45:ce:8d:e9:b8:89:6d:22:36:4c:3c:80:56:13:0e:58:
82:be:18:56:28:61:a9:4e:b0:a9:1c:8d:fe:e7:0c:30:dd:1b:
4d:9a:f8:43:75:ad:3b:9c:ed:67:3a:58:40:60:d9:c6:ce:21:
68:a9:7d:44:00:45:e3:66:25:94:03:d7:b9:51:0c:9b:68:c4:
92:b0:90:e4:e9:b7:b1:ad:dd:8e:ce:9f:53:4e:b1:71:7c:5e:
03:fa:fb:29:2e:33:60:63:67:4f:44:9b:6a:29:4b:60:48:ef:
06:c9:76:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:14 2025 by rpki-client