Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
File: BEiJahxKydgBvx1rIL3vWXTVtPY.mft (raw, json)
Hash identifier: CIGarbIdEWoRcDo2G1p3UPVrrcaCz9pnF+SuZ3Q59B4=
Subject key identifier: 6E:64:7A:11:AA:CB:29:EF:57:80:22:3E:11:4E:1B:B5:0D:17:33:F8
Authority key identifier: 04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6
Certificate issuer: /CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6
Certificate serial: 0197CC839C59E64D8A1026F12769CE4DA02B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
Manifest number: 0550
Signing time: Wed 02 Jul 2025 19:01:06 +0000
Manifest this update: Wed 02 Jul 2025 19:01:06 +0000
Manifest next update: Thu 03 Jul 2025 19:01:06 +0000
Files and hashes: 1: BEiJahxKydgBvx1rIL3vWXTVtPY.crl (hash: VoAME2fhG4XSrRxfoDRP+ZVGZCwrpIzxMF6xeF5zb7U=)
2: QXhXOb69R-6LwMYFMKWZze76zPM.roa (hash: eIFuk3TcS1CKNj+kDqIT+aNwYSr4f3EMWJAijhvNXoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 19:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:83:9c:59:e6:4d:8a:10:26:f1:27:69:ce:4d:a0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6
Validity
Not Before: Jul 2 19:01:06 2025 GMT
Not After : Jul 3 19:01:06 2025 GMT
Subject: CN=6e647a11aacb29ef5780223e114e1bb50d1733f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:de:2d:f4:62:13:04:2f:cf:e7:50:ef:b6:5b:
a3:43:ca:8d:10:fd:05:01:18:e1:55:a2:3f:1b:08:
e1:35:98:7b:24:54:f1:16:c5:d5:a4:24:4d:a3:55:
8c:da:57:b7:a7:86:aa:ef:45:db:ea:16:28:e7:b0:
71:ed:8d:ab:5c:46:0b:4f:f1:1c:f0:d5:ca:ff:1c:
75:cd:d1:5e:1c:81:ab:e3:dc:cc:83:3b:ef:cd:85:
be:d0:aa:9c:57:d0:2b:25:11:a1:11:b5:b3:2c:f5:
6d:6d:f8:fe:b4:50:18:03:57:1f:31:7e:07:73:70:
1f:e6:6d:75:a1:47:17:ba:e2:e2:8d:7b:b4:ae:da:
bc:54:3c:21:19:1c:7c:94:1b:91:a1:a0:69:f1:c0:
c7:31:91:95:d3:40:f8:d0:7b:db:cb:3d:f7:a0:d0:
df:b9:03:db:aa:c8:de:51:45:f7:39:6f:d2:07:8b:
42:cc:c9:75:c4:34:87:d2:14:bd:22:90:23:3c:17:
7d:08:27:96:0d:98:27:27:f7:7e:c8:68:93:39:77:
b7:05:3f:2c:0e:63:e8:4a:63:5e:06:97:ee:58:35:
d7:c0:ba:43:dc:c7:94:be:b8:8b:4e:62:5b:ee:40:
9c:b5:83:0a:5a:b1:ba:ca:1b:7f:e8:f5:19:a0:ed:
0f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:64:7A:11:AA:CB:29:EF:57:80:22:3E:11:4E:1B:B5:0D:17:33:F8
X509v3 Authority Key Identifier:
keyid:04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e9:06:5d:24:0d:ec:0e:e4:8f:2d:62:40:14:ca:6a:41:38:
d9:07:18:0f:43:db:0d:61:dd:ea:a7:1e:ed:fd:29:d5:90:57:
80:33:8c:03:5a:23:10:b8:86:22:8d:c7:b6:99:ef:0e:2c:30:
69:69:e5:aa:d1:d4:a1:50:3d:f8:f8:3c:15:ef:4d:a1:3e:c9:
fc:10:1b:61:48:96:69:91:02:d4:99:27:31:bd:a6:05:be:33:
35:b4:69:ec:ff:ee:6c:61:dd:87:b2:e8:ce:fc:b3:17:98:95:
43:25:af:dc:1c:b8:bf:7c:19:2f:e6:97:35:5d:55:f7:cc:92:
c7:3c:ca:e8:9d:77:45:76:c2:b4:4c:86:e1:30:e8:60:6b:60:
e3:07:0c:d2:0f:39:62:38:09:91:0e:16:a8:1d:ad:7e:42:e9:
24:4e:a2:16:09:b8:d2:a9:77:ba:82:c6:cf:73:ad:39:50:81:
86:c4:d9:59:86:7c:8c:e4:cf:7f:ef:99:67:ee:be:4c:11:71:
38:a6:3b:0e:68:a5:1f:fb:a7:b8:67:10:49:46:61:92:04:e8:
c4:e2:9e:b5:f8:40:56:71:80:47:85:a9:77:33:2c:f3:19:cc:
80:3c:f2:33:29:76:53:20:5b:1c:c9:6a:83:d1:36:89:d8:9a:
d6:00:02:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 23:36:27 2025 by rpki-client