Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
File: beKqsHfJ7vED-XmE8wnYkeWhmYM.mft (raw, json)
Hash identifier: IUvwj8BzoWwzKD9ab9gm69PFZsyRh2Qqg/7CBVc4+oE=
Subject key identifier: 2B:07:5B:CD:5C:9E:5B:F7:08:12:12:41:C5:3A:6C:BE:6A:3B:3B:6E
Authority key identifier: 6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
Certificate issuer: /CN=6de2aab077c9eef103f97984f309d891e5a19983
Certificate serial: 0198D6CD0F5D04BCF1E7B84790C10FA496B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 12:00:19 +0000
Manifest this update: Sat 23 Aug 2025 12:00:19 +0000
Manifest next update: Sun 24 Aug 2025 12:00:19 +0000
Files and hashes: 1: 48IOS32yvZQcDKOVIMZ6daf-9KA.roa (hash: HmF8WESoe3mmtI22Berk7+aTu/j0V86FjOKvEurztNM=)
2: beKqsHfJ7vED-XmE8wnYkeWhmYM.crl (hash: k5yPQfK3vEN5lAS2tB5vp6IKzsXKhuBXLXam9nunxR0=)
3: tmeZ0Ov1HvxadlJQTOHPYduqrcA.roa (hash: 5a1G608q0BN2ymFOZ4ty/8IB/CrBTEemrLvT6asz5iY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:0f:5d:04:bc:f1:e7:b8:47:90:c1:0f:a4:96:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6de2aab077c9eef103f97984f309d891e5a19983
Validity
Not Before: Aug 23 12:00:19 2025 GMT
Not After : Aug 24 12:00:19 2025 GMT
Subject: CN=2b075bcd5c9e5bf708121241c53a6cbe6a3b3b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:71:5a:e6:08:06:b7:7c:8b:45:ff:69:53:ed:
45:14:4d:bc:92:49:02:1d:ad:77:f7:75:52:7f:6e:
1d:34:b4:f9:b7:d8:4b:dc:04:30:15:95:b9:82:b0:
8c:d3:d7:8c:6d:94:ba:4f:4b:a0:2d:76:72:72:0f:
bb:c1:c5:9f:e6:7c:f5:53:50:14:2c:9f:79:47:9e:
bd:dd:97:f9:3e:fb:16:be:2b:7f:a1:02:94:c4:ca:
80:b4:43:29:4c:e8:73:51:80:da:68:0e:29:8c:bc:
dd:bc:dc:a1:6c:5c:6a:9d:ca:c0:22:b0:77:34:b0:
10:08:78:69:6a:9b:12:6f:4d:00:e5:31:33:63:5f:
03:7a:6d:6b:37:1e:37:4b:07:0d:03:4a:f0:51:82:
45:a9:7d:c2:58:cc:c6:65:e0:d8:98:22:93:99:10:
af:92:70:ef:ca:bc:59:f8:11:72:8a:e1:17:75:f3:
a6:5d:10:27:a9:e8:91:ea:0c:77:b5:c6:e6:97:90:
d5:e3:a8:5b:eb:8b:c3:dc:cb:06:02:3d:95:7c:1a:
12:bc:31:c5:c3:5e:5e:11:90:08:21:e3:64:23:ed:
05:92:c4:9e:11:d5:dd:f9:2d:57:94:7b:29:8c:97:
f0:3b:9b:02:2f:93:28:ca:4e:6a:78:03:ee:11:c0:
2f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:07:5B:CD:5C:9E:5B:F7:08:12:12:41:C5:3A:6C:BE:6A:3B:3B:6E
X509v3 Authority Key Identifier:
keyid:6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:da:19:9a:fd:69:9d:0e:5c:a7:73:de:7e:de:3a:d2:3e:ed:
89:1a:58:cc:83:28:0a:16:f0:b0:4d:bb:3c:c4:9c:f3:ad:44:
fe:d7:34:97:08:98:ce:60:76:ab:9a:eb:ba:cb:5d:cd:cf:9c:
cf:21:e4:9a:d8:77:80:c4:18:3d:8c:e6:2e:8f:28:12:b8:69:
ae:8d:9c:37:9e:d6:65:2b:3d:45:c0:9f:b5:e4:1e:18:b2:6c:
77:4b:9e:9f:71:02:3b:28:b2:5e:09:b0:5a:29:98:c8:5d:8a:
12:1d:d1:56:66:02:f6:29:c3:23:27:86:da:60:e5:d5:ef:65:
07:0c:93:86:2b:87:a9:f9:54:b6:19:14:cc:87:f2:7a:94:fd:
e4:c7:6a:be:dc:c0:9d:ed:fc:2f:8a:f7:ea:09:c7:56:1e:e5:
66:af:52:f3:bd:67:42:19:8a:78:9e:d1:63:02:80:73:d9:45:
b0:05:1f:9c:dc:ce:09:f1:be:0d:1b:de:ba:07:81:42:e8:5b:
4e:82:de:85:39:74:d4:5b:ba:ea:cd:4c:68:9c:56:ed:e4:a6:
92:20:7f:79:c1:a9:41:88:17:8f:fa:28:34:c1:db:a5:6d:fe:
82:03:f9:6d:af:a2:fc:37:72:6c:fa:7f:98:0d:c4:78:d1:ca:
74:a1:48:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:25:55 2025 by rpki-client