Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
File: BEw2vtOpgR94Jg5_X0_S_V54jgM.mft (raw, json)
Hash identifier: M9/1IAXeCeHcltbxTOx+DeMPd4zstmxC1dcbksoWAZs=
Subject key identifier: DB:36:29:2F:91:7F:BC:C1:C9:20:38:28:15:6C:B1:1F:CB:07:0A:66
Authority key identifier: 04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
Certificate issuer: /CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Certificate serial: 0197B70F2547115686D653F80E86BC4927EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
Manifest number: 0C4D
Signing time: Sat 28 Jun 2025 15:01:52 +0000
Manifest this update: Sat 28 Jun 2025 15:01:52 +0000
Manifest next update: Sun 29 Jun 2025 15:01:52 +0000
Files and hashes: 1: AqwTFt-qyr9ctfZVh_Lc-HmCLI4.roa (hash: 6o18WCqQ1vQmdpr+KgNhHjoy4zxFnk5Txpn2BtXndjc=)
2: BEw2vtOpgR94Jg5_X0_S_V54jgM.crl (hash: 7B6Tg9b9Ywlm0W4BJbSB7WoQknrH1SIj+KqCr4nCDp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:25:47:11:56:86:d6:53:f8:0e:86:bc:49:27:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Validity
Not Before: Jun 28 15:01:52 2025 GMT
Not After : Jun 29 15:01:52 2025 GMT
Subject: CN=db36292f917fbcc1c9203828156cb11fcb070a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:30:b2:4a:de:9d:62:a8:54:15:b5:7b:3b:e5:
60:9d:f0:c4:a0:f1:0f:fb:d0:13:40:d6:3e:6d:07:
ab:4a:a8:48:be:57:17:5b:79:15:5f:5b:57:37:a7:
84:25:2e:2e:bb:42:2f:63:4e:e1:99:d0:0d:1d:6c:
7c:a0:2a:97:c9:8e:a6:1d:66:08:31:17:8a:d7:c2:
5f:43:6f:e0:f2:75:a6:4a:fc:5c:30:c9:ba:a8:62:
90:37:17:49:58:57:31:2e:88:7b:8c:b7:62:a3:5d:
f1:fb:63:75:de:04:44:ce:b6:f4:e0:d1:f4:90:8b:
9d:dd:a1:62:ea:51:2f:9a:1e:55:2f:21:9a:12:8b:
74:8a:d1:13:34:b5:c2:62:87:99:58:b7:96:c6:46:
b2:e8:f5:f1:02:a3:4f:8b:78:56:ef:e9:19:23:8b:
cc:fa:86:0a:66:04:8e:b3:a5:2a:86:b0:9a:d7:ab:
4f:df:d4:f4:a6:39:98:8d:f7:d1:89:11:f8:97:8c:
5d:f6:ff:63:56:01:e7:b8:43:a4:75:b0:b0:56:0a:
5f:4e:11:1b:62:ea:9c:d8:7f:96:93:b1:ff:62:87:
5a:64:18:c7:78:7d:4e:72:98:e1:be:24:cb:5b:4d:
98:c6:1e:f0:ae:db:2e:1f:88:e2:18:ec:b4:34:0d:
20:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:36:29:2F:91:7F:BC:C1:C9:20:38:28:15:6C:B1:1F:CB:07:0A:66
X509v3 Authority Key Identifier:
keyid:04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:75:4d:df:0c:c3:c1:f1:e0:a4:92:a4:e3:83:67:56:55:b5:
19:55:b5:38:1e:f1:8e:ce:df:32:44:5f:e6:9c:c0:d4:36:05:
bb:89:20:e4:1d:61:51:7d:c4:f6:e2:2b:7c:80:90:85:08:54:
82:f2:5d:39:58:ea:a5:c0:58:fa:1e:b1:7d:5a:d3:c4:4e:29:
83:e7:48:02:84:ec:0d:79:d8:92:86:78:50:04:f2:88:9e:48:
ff:23:84:4e:b7:a3:8c:20:ca:0e:38:45:f3:ab:57:19:0b:0c:
ba:36:27:4b:da:57:b9:3d:be:18:41:c7:01:9f:18:6f:b8:d8:
50:b7:df:bc:45:7a:e6:d9:11:7f:ac:c8:2b:62:d3:80:dc:0a:
19:ac:a9:d4:40:71:f2:38:8e:14:0e:ad:12:db:54:f6:a4:60:
16:25:7e:fb:e3:70:55:bd:c2:69:a5:7b:12:6b:37:ad:84:f9:
fe:24:72:25:56:5a:4b:af:ac:b2:df:c8:6b:d9:ed:48:cb:4f:
5d:f7:fb:0a:80:c1:79:fb:b7:4a:8e:63:52:d2:2e:65:2c:0c:
8e:7e:eb:ef:10:2a:e2:87:00:c4:05:79:7c:f9:02:5c:38:e5:
ad:05:75:e4:ff:76:76:e2:e7:9a:c8:30:d4:2c:6c:0f:c3:80:
f1:df:34:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DyVHEVaG1lP4Doa8SSfsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NGMzNmJlZDNhOTgxMWY3ODI2MGU3ZjVmNGZkMmZkNWU3
ODhlMDMwHhcNMjUwNjI4MTUwMTUyWhcNMjUwNjI5MTUwMTUyWjAzMTEwLwYDVQQD
EyhkYjM2MjkyZjkxN2ZiY2MxYzkyMDM4MjgxNTZjYjExZmNiMDcwYTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzCySt6dYqhUFbV7O+VgnfDEoPEP
+9ATQNY+bQerSqhIvlcXW3kVX1tXN6eEJS4uu0IvY07hmdANHWx8oCqXyY6mHWYI
MReK18JfQ2/g8nWmSvxcMMm6qGKQNxdJWFcxLoh7jLdio13x+2N13gREzrb04NH0
kIud3aFi6lEvmh5VLyGaEot0itETNLXCYoeZWLeWxkay6PXxAqNPi3hW7+kZI4vM
+oYKZgSOs6UqhrCa16tP39T0pjmYjffRiRH4l4xd9v9jVgHnuEOkdbCwVgpfThEb
Yuqc2H+Wk7H/YodaZBjHeH1OcpjhviTLW02Yxh7wrtsuH4jiGOy0NA0g+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNs2KS+Rf7zBySA4KBVssR/LBwpmMB8GA1UdIwQY
MBaAFARMNr7TqYEfeCYOf19P0v1eeI4DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkV3MnZ0T3BnUjk0Smc1X1gwX1NfVjU0amdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9hZTc0MGItMTBjZC00ZjRkLThmNmMt
MzQxNGZkNTAyOWU5LzEvQkV3MnZ0T3BnUjk0Smc1X1gwX1NfVjU0amdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9hZTc0MGItMTBjZC00ZjRkLThmNmMtMzQxNGZkNTAyOWU5
LzEvQkV3MnZ0T3BnUjk0Smc1X1gwX1NfVjU0amdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcnVN3wzD
wfHgpJKk44NnVlW1GVW1OB7xjs7fMkRf5pzA1DYFu4kg5B1hUX3E9uIrfICQhQhU
gvJdOVjqpcBY+h6xfVrTxE4pg+dIAoTsDXnYkoZ4UATyiJ5I/yOETrejjCDKDjhF
86tXGQsMujYnS9pXuT2+GEHHAZ8Yb7jYULffvEV65tkRf6zIK2LTgNwKGayp1EBx
8jiOFA6tEttU9qRgFiV+++NwVb3CaaV7Ems3rYT5/iRyJVZaS6+sst/Ia9ntSMtP
Xff7CoDBefu3So5jUtIuZSwMjn7r7xAq4ocAxAV5fPkCXDjlrQV15P92duLnmsgw
1CxsD8OA8d80SQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:25 2025 by rpki-client