Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
File: beKqsHfJ7vED-XmE8wnYkeWhmYM.mft (raw, json)
Hash identifier: Be8i0tKDVttKZwljrlZwR5bTXE1SEmlNKXwrTaCrP/o=
Subject key identifier: 4D:01:AC:33:5E:08:CE:24:5B:6F:AB:B8:E8:B8:11:B9:AA:1E:6D:79
Authority key identifier: 6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
Certificate issuer: /CN=6de2aab077c9eef103f97984f309d891e5a19983
Certificate serial: 0199FE469D93278A30A72901E6D703DC3B2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 21:01:04 +0000
Manifest this update: Sun 19 Oct 2025 21:01:04 +0000
Manifest next update: Mon 20 Oct 2025 21:01:04 +0000
Files and hashes: 1: 48IOS32yvZQcDKOVIMZ6daf-9KA.roa (hash: HmF8WESoe3mmtI22Berk7+aTu/j0V86FjOKvEurztNM=)
2: beKqsHfJ7vED-XmE8wnYkeWhmYM.crl (hash: 0RsMS3EWXtBNpSl1sqhRzLAsDh4mCetMsNl+gpWnkS0=)
3: tmeZ0Ov1HvxadlJQTOHPYduqrcA.roa (hash: 5a1G608q0BN2ymFOZ4ty/8IB/CrBTEemrLvT6asz5iY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:9d:93:27:8a:30:a7:29:01:e6:d7:03:dc:3b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6de2aab077c9eef103f97984f309d891e5a19983
Validity
Not Before: Oct 19 21:01:04 2025 GMT
Not After : Oct 20 21:01:04 2025 GMT
Subject: CN=4d01ac335e08ce245b6fabb8e8b811b9aa1e6d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e7:c3:a5:9b:9a:0c:8c:bd:a5:1e:ab:19:dd:
10:c8:3f:66:d1:09:df:fc:c3:5c:c6:89:50:8d:a3:
52:1d:bd:d6:62:a5:b1:67:01:80:13:60:5d:e2:0d:
50:06:94:a0:b4:db:7d:55:2c:93:f1:06:42:76:d8:
c0:db:5c:c1:e5:f6:1a:b3:2e:d4:6f:6d:77:58:6d:
d7:f7:e7:d5:e1:03:25:66:61:2a:2d:d5:57:01:f2:
3f:be:3e:c4:84:fa:96:85:ad:41:4a:5d:2f:b4:c5:
b3:80:83:21:87:af:a8:0e:b4:7e:08:e0:25:1a:22:
bb:08:03:3b:24:b9:a1:c4:fc:22:06:95:0c:41:96:
b7:f8:79:72:2e:e1:08:a1:b1:ef:0d:89:06:12:4b:
d9:7e:b1:0f:d5:ac:a4:9a:ec:47:be:c1:58:1e:b1:
01:a4:ee:84:67:7f:fd:b0:c5:2a:bf:c7:41:61:a4:
a1:df:96:43:a0:62:ad:85:b7:b9:cf:0c:a6:70:41:
ad:9c:bd:61:1d:44:4f:a2:e2:e2:7b:a6:b2:2b:4d:
32:fa:81:94:e8:14:8d:d6:89:dc:1c:57:a1:f5:3c:
fe:32:04:51:24:b7:d5:a8:77:ab:11:ee:9d:92:62:
ac:1c:50:4e:c6:52:c9:8c:7d:21:01:ef:ec:af:94:
a7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:01:AC:33:5E:08:CE:24:5B:6F:AB:B8:E8:B8:11:B9:AA:1E:6D:79
X509v3 Authority Key Identifier:
keyid:6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:57:de:47:fb:7e:07:e6:f2:c5:9e:cf:d7:56:98:da:50:76:
db:98:50:50:85:1d:09:46:5f:61:40:4d:1d:a7:5a:e5:a8:87:
73:ad:1a:e3:81:77:05:ea:1a:fe:95:4b:29:fd:f0:d1:dd:df:
89:39:e0:c8:5a:d3:e9:5b:b3:cc:83:97:92:56:59:51:58:d3:
ae:7a:19:01:7f:a1:84:de:8a:dc:5f:d5:57:75:b2:4f:17:3c:
69:eb:a7:9a:c0:6a:8d:ae:d0:c0:4c:31:c6:6a:e7:f9:de:a0:
f1:4e:f5:3e:a0:d2:78:5b:98:f4:2a:5a:38:f2:4b:d0:8b:c5:
16:84:25:11:d5:b9:24:4f:e5:d5:ca:0d:e4:da:f3:d0:b8:dc:
f3:58:09:81:ce:7f:37:3a:2d:33:fe:14:9a:18:48:0b:5f:a4:
16:2f:4f:30:14:26:d6:41:85:82:21:2a:f4:3a:8f:fa:aa:43:
d5:85:66:f2:f0:31:a1:0a:2a:67:d2:18:4b:d8:43:58:26:31:
67:b8:fc:73:77:c3:0d:00:d4:80:f0:1d:a2:f0:f1:1d:8a:72:
44:87:b8:09:84:78:12:d6:b6:ad:23:2a:85:a0:a1:c6:4a:b7:
2d:b9:2d:34:17:92:ae:11:99:fd:79:4b:22:ac:f3:69:66:e6:
ed:94:79:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:15 2025 by rpki-client