Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
File: BEiJahxKydgBvx1rIL3vWXTVtPY.mft (raw, json)
Hash identifier: TxsZF02QYGR/Rnlt98O1y9OqshlmyvhbKACV8sNidz8=
Subject key identifier: 89:62:E3:6B:9C:3A:A1:3C:13:39:B2:92:DE:22:1F:11:49:E9:01:BD
Authority key identifier: 04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6
Certificate issuer: /CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6
Certificate serial: 0199FC8FA2844417D9A479E5AB864189CB17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
Manifest number: 0672
Signing time: Sun 19 Oct 2025 13:01:35 +0000
Manifest this update: Sun 19 Oct 2025 13:01:35 +0000
Manifest next update: Mon 20 Oct 2025 13:01:35 +0000
Files and hashes: 1: BEiJahxKydgBvx1rIL3vWXTVtPY.crl (hash: 7Bew+t5tKylBYXB66xGt2ACj/DjGtPISdyvwEe4xSnc=)
2: QXhXOb69R-6LwMYFMKWZze76zPM.roa (hash: eIFuk3TcS1CKNj+kDqIT+aNwYSr4f3EMWJAijhvNXoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:a2:84:44:17:d9:a4:79:e5:ab:86:41:89:cb:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6
Validity
Not Before: Oct 19 13:01:35 2025 GMT
Not After : Oct 20 13:01:35 2025 GMT
Subject: CN=8962e36b9c3aa13c1339b292de221f1149e901bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:69:dc:4a:ff:28:f1:ab:51:b0:c5:60:aa:98:
e7:e1:c4:bd:1f:28:ac:46:ba:c5:16:05:4b:a2:c6:
b8:ef:11:54:87:aa:db:4e:08:c3:b0:4d:68:7f:fc:
83:1a:6d:db:d0:f7:76:63:61:b2:34:cc:cb:3a:1a:
29:7d:30:b8:d1:55:ac:63:08:a9:5e:71:35:6d:71:
70:6e:26:a6:2f:63:ec:f3:a4:04:49:2d:bf:96:94:
f0:eb:71:5a:de:db:e6:ec:7e:14:33:2b:a0:46:25:
5c:39:66:76:95:9b:ed:44:6e:e1:b8:9e:32:8a:ba:
3f:e6:e8:21:59:41:97:e9:a9:fe:e0:d2:5a:d6:cd:
e2:60:7d:a2:a3:6b:3b:66:fc:4d:da:53:3f:79:3e:
d3:ad:da:87:33:b4:b9:e2:ae:e1:02:7a:31:46:0f:
0e:70:31:02:41:60:66:fb:5d:cc:68:13:32:f5:36:
a4:02:91:1f:6b:10:34:c0:bf:67:04:d7:03:3e:e2:
17:b9:b5:6b:c7:41:c5:11:5e:a2:3b:a4:f2:a6:bb:
61:b1:31:33:76:d7:ed:24:65:c4:67:ae:ce:e1:10:
b0:f7:32:79:25:54:53:db:5b:77:81:0e:47:fa:de:
66:76:41:80:56:f0:0c:3b:78:c3:72:7d:8d:b9:41:
3d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:62:E3:6B:9C:3A:A1:3C:13:39:B2:92:DE:22:1F:11:49:E9:01:BD
X509v3 Authority Key Identifier:
keyid:04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f2:71:25:af:13:38:0a:e4:cd:c7:65:7d:74:3c:48:7b:3f:
d8:ff:dd:d7:a6:4c:28:23:c3:ed:85:e4:b9:ba:4b:2c:61:21:
17:90:e9:13:2a:08:70:90:25:71:20:d5:df:44:b0:7d:3a:5f:
26:f2:92:4a:b0:64:42:95:c3:db:5e:e2:e5:3e:ef:af:14:e7:
e4:e7:81:75:d8:7a:6e:8d:62:a4:23:de:3f:a6:50:ec:34:11:
a7:45:eb:4e:cc:6f:30:fd:6c:e3:e6:bb:04:3f:4f:3c:fc:89:
df:95:10:d9:46:8d:f6:08:5e:31:3f:3b:a8:81:42:8b:75:56:
e6:d1:09:ad:0e:83:cf:30:2d:ac:a6:e6:ee:06:15:20:2c:01:
d6:19:f5:9f:ce:f8:0a:45:16:80:1c:76:26:20:e6:b9:ab:ce:
d2:47:ab:e5:e2:b3:6a:9d:76:ff:df:5e:c1:fc:41:b9:ad:40:
53:f8:b1:1d:b1:a3:23:5e:33:32:1e:2f:39:29:2a:d0:bb:71:
d2:7f:59:e6:5f:f6:3c:ae:9e:24:84:9f:69:60:0d:f9:ea:d6:
7b:53:36:99:d4:3f:c5:24:c8:d6:4c:b3:b5:d5:24:eb:2b:4d:
fb:37:ae:f8:83:1f:4e:a8:93:c7:56:ec:11:7d:64:f2:08:dd:
ad:44:4a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:35 2025 by rpki-client