Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
File: 14BeHP_BOS59F2j48FVKHH9jRK0.mft (raw, json)
Hash identifier: Gxg9KvQvqdOqEzTDED4zjBci2E5v7IZ9qonp+GHRPFU=
Subject key identifier: A2:0A:D0:84:58:DD:04:AD:72:A3:2A:93:42:CC:54:98:9E:68:2C:9A
Authority key identifier: D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD
Certificate issuer: /CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad
Certificate serial: 0199FC58933F924502D3F8AFBF6A5341EC6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
Manifest number: 141A
Signing time: Sun 19 Oct 2025 12:01:27 +0000
Manifest this update: Sun 19 Oct 2025 12:01:27 +0000
Manifest next update: Mon 20 Oct 2025 12:01:27 +0000
Files and hashes: 1: 14BeHP_BOS59F2j48FVKHH9jRK0.crl (hash: SJAH4S7TYmg6gpbaqaGDYDWmZ0AU02pW7GZ2svguOi8=)
2: xcIstN59HOzGE1G9ty62N5JYD0o.roa (hash: BZxFBF1fX1zEMIn2hYmGhW7/ZSCk8wjGWMR8N700UvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:93:3f:92:45:02:d3:f8:af:bf:6a:53:41:ec:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad
Validity
Not Before: Oct 19 12:01:27 2025 GMT
Not After : Oct 20 12:01:27 2025 GMT
Subject: CN=a20ad08458dd04ad72a32a9342cc54989e682c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ff:e4:90:8b:97:d2:d1:00:e4:14:dc:63:26:
e2:4d:bb:33:3b:f3:33:48:89:67:a1:5f:eb:e5:38:
73:fa:e7:b0:59:c6:c7:de:3f:e2:77:b9:3f:a3:f1:
e5:69:a1:14:6a:73:62:81:a6:98:65:aa:b6:05:a4:
cf:22:4f:c3:17:9d:85:ca:6f:90:1c:39:5b:b0:23:
21:32:3e:c4:6c:10:35:e4:c3:7d:81:11:23:83:7a:
7c:29:03:5b:36:70:41:03:10:b2:eb:0e:a9:cf:03:
f9:7a:00:b5:15:ad:3b:1d:a3:53:7b:fe:03:9d:97:
71:9e:4b:e5:61:d0:55:83:d2:3d:8e:09:16:72:c8:
0d:e7:f5:ed:eb:c1:c0:cd:69:bc:18:6e:47:f0:cb:
0e:08:1a:b9:f9:76:b0:cb:25:46:7f:2d:b2:2f:a3:
a6:40:e5:53:db:dd:0a:e8:76:29:0d:bd:1c:39:07:
ff:73:6e:2a:e5:3d:70:bf:00:2b:c8:38:d4:35:9d:
09:f5:03:ca:45:57:c7:e4:74:e8:16:e4:bc:be:a1:
ab:27:b6:09:9b:15:4a:3e:6f:5c:2c:28:1d:9d:15:
7a:5d:4d:19:c9:58:8a:b7:b6:fb:40:c6:cc:0c:e7:
b0:3e:6a:66:21:75:80:b2:40:8e:a5:67:c2:c2:62:
bc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0A:D0:84:58:DD:04:AD:72:A3:2A:93:42:CC:54:98:9E:68:2C:9A
X509v3 Authority Key Identifier:
keyid:D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:34:75:95:ed:b0:f8:1a:06:aa:69:45:8e:89:d7:53:ce:e9:
97:08:5d:66:7e:4b:a3:6c:67:28:3e:30:10:17:8c:6d:19:d0:
d0:58:e2:f4:4e:35:2a:1d:f3:8e:0b:78:b7:12:bc:1e:5c:c8:
16:5f:64:5b:13:74:6c:b6:9a:5c:44:79:dc:b7:29:84:a9:75:
78:59:e7:a7:61:41:b8:88:55:3a:52:db:2b:ce:3a:dd:72:61:
94:00:e6:36:7f:a1:aa:8a:c2:a6:8b:07:74:bc:07:4b:e2:aa:
ab:df:22:8b:b6:6e:48:ce:98:e2:b4:d3:77:7f:70:00:6c:27:
cd:9b:4a:bd:65:63:70:cf:8d:d0:a1:a3:00:7b:5a:66:d9:be:
6a:63:71:1d:92:62:e2:4b:e8:df:ec:31:5e:48:83:8e:c2:da:
c7:f4:42:9a:d5:08:0f:7e:5d:d1:5d:42:19:b7:d0:e5:78:84:
af:ca:76:1b:a8:a5:87:42:5e:3f:a1:ed:b3:5d:ca:15:c6:cc:
90:42:c3:c1:fe:c4:ae:12:f2:1e:a4:16:ee:52:bb:e0:cc:58:
33:95:d7:a3:bf:5d:7f:ca:7c:35:95:4f:67:c6:be:0b:1d:48:
0a:74:d0:df:03:7c:d6:71:9e:a8:e5:cf:3c:88:ca:e5:5f:d8:
21:98:51:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:38 2025 by rpki-client