Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
File: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft (raw, json)
Hash identifier: IbYrCFA2ePIoeIlvaBWrZYaE4kdKlhwIRoqzkD8GtGo=
Subject key identifier: AF:B0:62:B8:07:FE:31:B2:53:EF:13:CF:DD:4A:1E:97:41:28:D5:65
Authority key identifier: 04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
Certificate issuer: /CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Certificate serial: 0197B77C6BBD05C494FC1949565E282EE192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 17:01:13 +0000
Manifest this update: Sat 28 Jun 2025 17:01:13 +0000
Manifest next update: Sun 29 Jun 2025 17:01:13 +0000
Files and hashes: 1: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl (hash: QKDxrqCQ/B+PkEZn2KKWdBbXEPJUeJIn9/uc6lWRIqE=)
2: NmkuWisNNR7yCTNM4BUhyNRxVxo.roa (hash: qERY3AcVPARhb2r8P5F7KsbGo82n2f3qr7wO9B4TKno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:6b:bd:05:c4:94:fc:19:49:56:5e:28:2e:e1:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Validity
Not Before: Jun 28 17:01:13 2025 GMT
Not After : Jun 29 17:01:13 2025 GMT
Subject: CN=afb062b807fe31b253ef13cfdd4a1e974128d565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:65:f5:6a:b1:63:28:c0:13:5e:80:4f:be:8b:
74:f2:70:32:3f:51:f7:0c:e3:09:1f:4a:0a:97:a0:
f2:16:e9:b6:cd:62:e0:1b:ed:39:03:aa:5f:91:a7:
47:85:32:df:c9:ea:d2:ea:c2:8f:a1:93:60:37:dd:
b1:87:ab:f5:c2:41:ad:3c:01:a8:16:38:3c:73:57:
a6:14:62:dd:5c:68:6c:41:c9:1a:dc:e9:62:a5:3b:
82:7c:ea:da:6b:0f:99:12:9d:d0:82:cd:09:20:94:
2d:c0:2a:e7:78:35:21:35:38:7c:c6:88:0b:4f:e5:
99:41:3c:47:91:09:6b:e7:a7:7f:d6:a6:24:41:86:
b2:16:e1:f1:af:e6:89:11:fa:fe:5c:00:6c:f4:f0:
e6:a5:5a:64:73:6a:74:3d:05:0e:d1:22:a0:4d:12:
22:64:e0:17:13:d4:33:15:84:ab:f6:e1:cf:ff:9c:
c4:2f:98:9f:9f:b8:4c:a0:ab:77:4b:09:a0:18:a0:
50:4d:a3:e5:76:c3:34:27:3b:77:3d:d1:bd:11:95:
c2:51:ac:dc:0c:d8:65:ea:82:e4:6a:60:c3:04:d8:
01:d9:24:00:d4:d9:ad:23:89:9e:25:78:0c:8c:26:
03:9c:41:5e:94:ed:46:16:7e:a4:cc:a4:b9:18:43:
74:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B0:62:B8:07:FE:31:B2:53:EF:13:CF:DD:4A:1E:97:41:28:D5:65
X509v3 Authority Key Identifier:
keyid:04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:46:0f:14:95:12:84:02:a5:21:77:9c:e8:44:b8:2b:55:74:
bf:4e:73:93:82:cd:e0:90:4c:e0:11:8f:e0:bc:54:7d:39:48:
9d:36:78:ac:b8:1c:e7:32:bc:5f:f1:65:92:39:53:f8:fe:14:
0a:b4:53:77:a2:d1:8a:03:81:fa:99:53:5b:9a:2f:7d:9b:e2:
a0:85:07:07:ed:59:2f:9c:ae:ce:f1:67:94:f6:60:ae:14:5d:
0a:a3:a3:f4:c5:c4:d5:d2:14:1c:f0:54:d9:47:5d:92:d1:fd:
81:78:99:ac:1d:89:f1:3a:6a:e5:bf:6a:5c:13:4c:9d:2d:f2:
6d:be:d6:93:52:e5:e6:dc:19:82:ce:1a:22:8f:a7:38:72:01:
9b:44:7e:3a:b1:85:ac:74:8c:56:b2:a6:c6:4c:2d:09:e7:72:
2c:99:66:da:49:8a:f9:58:18:90:d2:4a:d9:37:be:8f:7f:e6:
23:c4:3a:4e:27:82:4c:c2:e3:62:e9:13:8b:d3:b3:dd:3f:3e:
85:f0:f6:27:02:84:0a:b1:c9:ec:6a:14:13:85:4b:f6:13:29:
13:84:73:fb:7d:01:18:b9:6d:e9:11:b6:71:e0:b8:fa:3a:ed:
17:f4:b1:4e:3b:e5:d0:39:65:db:b8:2e:80:32:66:68:f3:32:
21:4c:27:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:06:34 2025 by rpki-client