Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
File: BEw2vtOpgR94Jg5_X0_S_V54jgM.mft (raw, json)
Hash identifier: nCV6Y+czoDh1gyQFluuLXStUDoasMRhupeFbFzS5qS8=
Subject key identifier: AD:F1:BD:79:46:EE:C3:D6:86:DD:64:76:4B:F3:5A:26:8F:1D:7C:49
Authority key identifier: 04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
Certificate issuer: /CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Certificate serial: 0199FC584967838C05E3052C9D68856A06A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
Manifest number: 0D7A
Signing time: Sun 19 Oct 2025 12:01:08 +0000
Manifest this update: Sun 19 Oct 2025 12:01:08 +0000
Manifest next update: Mon 20 Oct 2025 12:01:08 +0000
Files and hashes: 1: AqwTFt-qyr9ctfZVh_Lc-HmCLI4.roa (hash: 6o18WCqQ1vQmdpr+KgNhHjoy4zxFnk5Txpn2BtXndjc=)
2: BEw2vtOpgR94Jg5_X0_S_V54jgM.crl (hash: HBlE8LMeJrfB3DPx/iCfKO627UC80Zhm7/9c00bqIKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:49:67:83:8c:05:e3:05:2c:9d:68:85:6a:06:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Validity
Not Before: Oct 19 12:01:08 2025 GMT
Not After : Oct 20 12:01:08 2025 GMT
Subject: CN=adf1bd7946eec3d686dd64764bf35a268f1d7c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9e:56:0d:d7:e3:48:b2:ea:67:8f:cf:40:a3:
71:6d:89:22:fd:14:51:38:57:c0:c2:35:21:aa:6f:
22:7a:d3:44:18:02:f3:3b:3a:fe:d5:1c:e5:c3:2e:
73:9e:b5:f3:ab:db:06:f9:27:89:91:f4:44:d4:b4:
5f:4e:57:eb:e8:04:32:f1:d9:01:e9:56:d3:56:0a:
a8:ce:4d:90:3c:62:58:11:c1:0d:ff:4f:1e:8c:2a:
f1:6e:8d:b1:52:6b:67:ca:a1:a3:8a:32:8d:cd:98:
cd:39:2f:42:0b:b6:a4:83:35:2d:0a:11:82:10:67:
be:99:0a:a5:d4:dc:eb:82:27:32:1c:b1:77:9e:a6:
c6:9c:8e:bb:78:58:12:80:5d:44:a8:0e:37:a3:a0:
82:fb:2c:4e:28:f6:73:00:a2:73:a9:72:4e:51:6a:
80:59:da:38:1e:cc:88:9f:d6:e5:c0:a3:1f:a5:cf:
6d:3f:53:24:16:42:65:1d:d5:e1:83:1d:16:b5:23:
66:c5:99:f7:ad:d1:13:d0:58:31:2d:fe:33:15:df:
36:cb:fa:ed:c6:ea:4b:88:18:9a:ff:12:35:50:34:
01:d3:0a:05:80:df:73:92:59:61:cc:b9:3b:24:c4:
9c:eb:bd:96:de:c8:09:21:15:12:5e:b5:ac:8e:95:
ad:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F1:BD:79:46:EE:C3:D6:86:DD:64:76:4B:F3:5A:26:8F:1D:7C:49
X509v3 Authority Key Identifier:
keyid:04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:a5:46:99:d4:51:a3:2e:18:bd:46:89:f0:35:cf:eb:51:5d:
a9:25:cf:e7:fe:ef:05:bc:57:29:33:8b:2c:b5:e5:6e:9d:d9:
64:9c:fc:48:64:d7:dd:70:82:fb:20:45:c2:05:e9:fd:33:7d:
28:6f:a0:82:9b:2d:b5:31:39:4e:cf:62:de:6f:17:cf:ca:2c:
f1:bd:c5:25:2d:0e:1e:38:35:46:7f:d8:63:80:c6:2d:5d:8e:
12:af:a4:3f:49:94:43:10:ab:c5:00:20:ea:19:d9:a1:2d:7a:
c6:ca:40:90:b7:2d:85:21:31:fa:d6:e8:df:98:89:3d:01:e4:
67:54:0d:5b:2e:49:4a:ae:b5:66:1d:e1:a6:7c:ec:39:d3:f1:
fc:57:da:2f:19:ee:c2:4a:25:e1:4e:94:b0:a4:00:b9:a5:da:
ad:46:28:ff:b0:32:a8:93:cd:a1:cd:a1:25:30:24:98:1e:b0:
67:e1:f8:47:ab:68:61:df:81:ce:fa:6d:75:83:84:db:3e:8c:
d3:64:ad:14:25:02:0b:02:93:d1:ca:cf:c8:9e:68:4a:5d:04:
13:93:1e:29:cb:40:dc:38:a7:d3:44:af:0e:e8:43:57:57:53:
6b:64:97:aa:b6:98:f3:94:3d:93:80:73:de:aa:bb:c8:e4:d8:
54:f3:69:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WElng4wF4wUsnWiFagahMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NGMzNmJlZDNhOTgxMWY3ODI2MGU3ZjVmNGZkMmZkNWU3
ODhlMDMwHhcNMjUxMDE5MTIwMTA4WhcNMjUxMDIwMTIwMTA4WjAzMTEwLwYDVQQD
EyhhZGYxYmQ3OTQ2ZWVjM2Q2ODZkZDY0NzY0YmYzNWEyNjhmMWQ3YzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJ5WDdfjSLLqZ4/PQKNxbYki/RRR
OFfAwjUhqm8ietNEGALzOzr+1Rzlwy5znrXzq9sG+SeJkfRE1LRfTlfr6AQy8dkB
6VbTVgqozk2QPGJYEcEN/08ejCrxbo2xUmtnyqGjijKNzZjNOS9CC7akgzUtChGC
EGe+mQql1NzrgicyHLF3nqbGnI67eFgSgF1EqA43o6CC+yxOKPZzAKJzqXJOUWqA
Wdo4HsyIn9blwKMfpc9tP1MkFkJlHdXhgx0WtSNmxZn3rdET0FgxLf4zFd82y/rt
xupLiBia/xI1UDQB0woFgN9zkllhzLk7JMSc672W3sgJIRUSXrWsjpWtGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3xvXlG7sPWht1kdkvzWiaPHXxJMB8GA1UdIwQY
MBaAFARMNr7TqYEfeCYOf19P0v1eeI4DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkV3MnZ0T3BnUjk0Smc1X1gwX1NfVjU0amdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9hZTc0MGItMTBjZC00ZjRkLThmNmMt
MzQxNGZkNTAyOWU5LzEvQkV3MnZ0T3BnUjk0Smc1X1gwX1NfVjU0amdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9hZTc0MGItMTBjZC00ZjRkLThmNmMtMzQxNGZkNTAyOWU5
LzEvQkV3MnZ0T3BnUjk0Smc1X1gwX1NfVjU0amdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs6VGmdRR
oy4YvUaJ8DXP61FdqSXP5/7vBbxXKTOLLLXlbp3ZZJz8SGTX3XCC+yBFwgXp/TN9
KG+ggpsttTE5Ts9i3m8Xz8os8b3FJS0OHjg1Rn/YY4DGLV2OEq+kP0mUQxCrxQAg
6hnZoS16xspAkLcthSEx+tbo35iJPQHkZ1QNWy5JSq61Zh3hpnzsOdPx/FfaLxnu
wkol4U6UsKQAuaXarUYo/7AyqJPNoc2hJTAkmB6wZ+H4R6toYd+BzvptdYOE2z6M
02StFCUCCwKT0crPyJ5oSl0EE5MeKctA3Din00SvDuhDV1dTa2SXqraY85Q9k4Bz
3qq7yOTYVPNpeQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:29 2025 by rpki-client