Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
File: beKqsHfJ7vED-XmE8wnYkeWhmYM.mft (raw, json)
Hash identifier: 8AEGL+uq+CK4Id9M84UKgIXfadeX5pHpCHR0YYi5gFk=
Subject key identifier: 6E:2E:A3:F5:64:6D:72:7F:DB:8F:01:94:D0:A0:85:C7:10:C9:D5:DE
Authority key identifier: 6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
Certificate issuer: /CN=6de2aab077c9eef103f97984f309d891e5a19983
Certificate serial: 0197CA5EF320F22792C90B75F304136CD1F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
Manifest number: 15C4
Signing time: Wed 02 Jul 2025 09:01:49 +0000
Manifest this update: Wed 02 Jul 2025 09:01:49 +0000
Manifest next update: Thu 03 Jul 2025 09:01:49 +0000
Files and hashes: 1: 48IOS32yvZQcDKOVIMZ6daf-9KA.roa (hash: HmF8WESoe3mmtI22Berk7+aTu/j0V86FjOKvEurztNM=)
2: beKqsHfJ7vED-XmE8wnYkeWhmYM.crl (hash: NnOtxpeVWQoX0lpXDfqHdzL4G0sgPPSZkyyB55vZuWs=)
3: tmeZ0Ov1HvxadlJQTOHPYduqrcA.roa (hash: 5a1G608q0BN2ymFOZ4ty/8IB/CrBTEemrLvT6asz5iY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 09:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:5e:f3:20:f2:27:92:c9:0b:75:f3:04:13:6c:d1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6de2aab077c9eef103f97984f309d891e5a19983
Validity
Not Before: Jul 2 09:01:49 2025 GMT
Not After : Jul 3 09:01:49 2025 GMT
Subject: CN=6e2ea3f5646d727fdb8f0194d0a085c710c9d5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:77:8d:c3:54:83:28:b7:ff:83:a2:ec:2d:2a:
97:06:a8:73:b1:5b:de:5d:18:60:c3:c3:0b:ac:6d:
02:04:a0:76:68:8f:e7:b2:9a:9c:a1:ff:7c:fe:a0:
c8:4b:29:a7:17:1d:a3:71:87:b8:b2:ef:53:a6:2c:
0a:1b:94:9a:22:fd:13:aa:d5:e8:ea:04:7b:ab:a2:
da:32:d1:a3:26:75:73:7f:7b:1c:f5:6b:72:b4:5d:
10:63:a0:f5:45:fc:b7:5e:21:0a:e9:df:74:b1:8e:
cf:3d:c7:bc:2a:64:78:46:7b:ee:5d:3f:c4:f6:7e:
97:c6:6d:5a:9f:05:23:f0:ee:f6:28:53:1e:4c:e9:
a3:ee:24:de:f8:30:4a:5c:18:2e:99:4b:12:c2:c8:
f9:0c:cd:3d:fc:fa:0f:3c:02:76:91:f9:d2:39:03:
7f:38:b2:f0:43:b9:3f:c3:c1:c1:33:38:cd:a0:38:
55:cf:58:85:9d:7b:db:b4:1b:62:43:bd:5d:aa:83:
ee:42:58:02:ae:96:79:24:67:93:21:7f:bc:95:2c:
72:26:5c:6a:e2:e3:f2:1d:0e:87:ba:87:37:d8:4b:
9d:d4:9c:66:2b:29:34:18:20:b9:7f:4f:be:fc:5c:
ff:d1:83:1a:bc:1d:7f:b7:33:a3:4c:e7:23:f4:98:
03:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2E:A3:F5:64:6D:72:7F:DB:8F:01:94:D0:A0:85:C7:10:C9:D5:DE
X509v3 Authority Key Identifier:
keyid:6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:7e:f3:8d:4b:ca:e1:f4:31:fe:41:22:72:b2:e4:8e:a4:16:
3c:ff:ab:7e:6b:b6:e1:bc:68:1f:26:cf:f3:bc:a6:a8:18:af:
a2:1e:8c:57:df:c8:15:26:bd:44:9d:0b:80:14:13:1a:d5:97:
47:6b:68:c4:7f:32:50:eb:42:eb:eb:cc:e6:04:95:86:56:8f:
db:db:88:5d:7c:63:d4:63:a4:fe:88:bd:cf:26:8c:5a:9d:98:
d3:82:13:d5:b2:eb:7a:ff:f2:11:e2:66:a5:bc:07:e1:dc:ab:
9c:bf:2e:b6:45:42:6b:06:ce:8c:93:33:0f:7c:85:9e:35:8a:
03:81:bf:68:14:a5:2a:c7:cb:0c:28:79:4c:68:db:5f:2b:17:
00:60:3f:a4:36:ee:fa:e3:03:0c:b8:c3:c4:35:97:fc:82:ad:
8a:32:bf:c8:c1:6e:79:a3:09:f2:ab:fb:cc:f4:8c:d1:a5:36:
85:e1:85:d0:c2:84:6d:28:6b:cb:9e:ba:ef:e5:65:54:fb:45:
2b:a4:37:fc:31:27:f1:25:36:82:d1:44:6e:42:d6:58:ba:b7:
fa:85:b9:74:af:6f:34:69:68:97:df:60:c0:e8:8f:4d:2e:3b:
47:b2:35:cf:80:99:65:e5:70:6b:c2:90:01:03:e6:c7:40:91:
be:a2:99:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:43:56 2025 by rpki-client