Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
File: BEiJahxKydgBvx1rIL3vWXTVtPY.mft (raw, json)
Hash identifier: k/z2jikfpx3mw1lVCBr+lGubKSBvDfDY36wmmlN4spI=
Subject key identifier: 71:8E:AB:BA:20:96:08:2B:41:08:2F:57:01:0B:0A:02:60:BD:0B:50
Authority key identifier: 04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6
Certificate issuer: /CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6
Certificate serial: 0198D8F2528BF26C4861559B8AD4694A4B7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
Manifest number: 05DB
Signing time: Sat 23 Aug 2025 22:00:16 +0000
Manifest this update: Sat 23 Aug 2025 22:00:16 +0000
Manifest next update: Sun 24 Aug 2025 22:00:16 +0000
Files and hashes: 1: BEiJahxKydgBvx1rIL3vWXTVtPY.crl (hash: k1EBBuury2RgesSMBxbW7GYe4sdIu3dM19a1Uj50Y8E=)
2: QXhXOb69R-6LwMYFMKWZze76zPM.roa (hash: eIFuk3TcS1CKNj+kDqIT+aNwYSr4f3EMWJAijhvNXoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:f2:52:8b:f2:6c:48:61:55:9b:8a:d4:69:4a:4b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6
Validity
Not Before: Aug 23 22:00:16 2025 GMT
Not After : Aug 24 22:00:16 2025 GMT
Subject: CN=718eabba2096082b41082f57010b0a0260bd0b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:af:11:e6:58:8e:59:f8:f1:00:ec:5f:29:70:
54:bf:6e:78:69:ff:d6:7e:de:ca:c6:d1:ab:2b:e5:
3c:67:29:54:b5:c1:7a:2e:f0:07:ad:2a:39:c0:95:
41:10:9f:b7:0c:ec:eb:f6:5a:49:2e:50:ec:db:1e:
32:5f:73:98:0f:89:de:0a:eb:9a:ad:58:29:e2:1b:
9b:f4:84:40:4d:e9:f5:da:07:a7:da:30:df:44:fc:
ec:c2:b3:43:dd:2e:e3:46:d0:21:9a:f9:b5:aa:b2:
f7:85:65:47:0d:32:81:7a:7c:40:26:e7:9a:78:a8:
d5:3f:87:82:42:b4:59:8d:a9:00:06:c3:e1:9e:a8:
56:c9:42:e7:15:10:1d:85:78:9f:39:b2:5a:78:9d:
7f:51:29:0b:f2:2c:dc:dc:1f:89:70:7d:57:db:a1:
64:ba:a7:17:41:cf:a7:2c:36:19:21:36:69:fc:94:
b7:15:66:31:0e:ed:97:89:fc:7c:4b:62:29:1a:5e:
31:6f:c5:83:3d:46:d0:97:60:61:e5:cb:05:0d:cd:
8d:12:c3:3a:51:e6:77:ce:cd:c3:ef:da:3a:1a:e4:
b5:41:fd:15:c8:d0:50:3b:55:ed:cc:f8:9d:3f:d5:
c9:48:d8:a9:8f:90:32:82:72:e0:58:1b:95:d6:64:
59:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8E:AB:BA:20:96:08:2B:41:08:2F:57:01:0B:0A:02:60:BD:0B:50
X509v3 Authority Key Identifier:
keyid:04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:c8:c1:ad:bf:4d:a5:20:9e:fa:79:4e:e4:07:8b:a8:13:c0:
65:fb:57:fd:7e:94:24:cc:3c:3b:14:ab:83:78:a3:6c:4b:41:
15:c2:d8:fd:03:bd:4f:74:69:f3:2f:78:ce:b4:0f:b9:8f:3c:
0a:85:43:9d:e1:84:f4:47:c1:2c:90:e8:78:90:e9:cb:fa:b0:
21:8a:da:a1:68:c4:e1:d3:cb:03:2d:2d:56:b0:9a:f8:d3:4d:
e4:07:79:e3:83:5a:e9:29:70:77:40:23:20:ef:5e:cf:9c:c6:
c7:c2:59:6f:da:00:41:38:7d:a7:1a:69:bf:3b:80:81:32:4b:
cd:10:eb:8a:fc:98:b3:54:09:74:cb:48:0f:50:99:be:e0:a0:
c7:2f:81:d3:a7:ff:4b:69:e3:a3:db:53:72:dd:06:3b:f6:9b:
cd:81:11:74:64:60:79:a9:29:71:53:9a:f5:dd:90:f5:4e:53:
58:45:69:f2:b4:05:ff:5a:30:fa:f6:92:2b:15:8a:f0:01:c9:
05:4c:91:21:6e:73:38:33:57:0e:3b:a1:ee:cb:de:c4:30:dc:
2c:9d:32:41:c8:1c:12:f9:7c:72:a8:4d:c2:c2:d9:03:33:fb:
f9:82:c5:15:db:58:62:90:d8:38:bf:b1:eb:62:a4:13:56:3a:
aa:a0:27:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:12:44 2025 by rpki-client