Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
File: Be02xlZG2ssRSqcsG7y3QYG3_0M.mft (raw, json)
Hash identifier: QIAGmd6xo0YUc28NAtHbYlIshW0rN7PpfRxKdbr913s=
Subject key identifier: 8B:CE:50:A4:C4:0F:4A:AD:A7:43:F9:33:C9:B7:2F:10:FB:94:47:FB
Authority key identifier: 05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43
Certificate issuer: /CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43
Certificate serial: 019A4DAAFEAFF1E039BF16AA47858EB7B929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
Manifest number: 1239
Signing time: Tue 04 Nov 2025 07:00:43 +0000
Manifest this update: Tue 04 Nov 2025 07:00:43 +0000
Manifest next update: Wed 05 Nov 2025 07:00:43 +0000
Files and hashes: 1: Be02xlZG2ssRSqcsG7y3QYG3_0M.crl (hash: Fz6ZespYhYNU0w/c+rwHEtbP4nj9CHNRmrIBzjhK4TM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:fe:af:f1:e0:39:bf:16:aa:47:85:8e:b7:b9:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43
Validity
Not Before: Nov 4 07:00:43 2025 GMT
Not After : Nov 5 07:00:43 2025 GMT
Subject: CN=8bce50a4c40f4aada743f933c9b72f10fb9447fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:35:b5:d4:2e:bf:b3:4e:25:65:55:7b:af:ab:
fd:1b:df:46:c9:34:e5:30:0b:8a:36:65:62:e4:76:
13:3e:8f:0d:e3:5e:f9:b7:75:0f:a2:da:b5:eb:6c:
2b:f7:bf:66:89:5f:c2:fb:a3:5e:b2:67:66:37:ec:
ae:63:70:98:e2:94:8e:ab:c3:50:8c:e4:aa:d8:ca:
c8:31:03:46:ec:3d:0e:48:74:b4:cc:03:58:a8:e6:
5f:91:35:a1:e7:4f:5b:ed:3c:66:e1:8b:c6:01:0d:
ca:23:ac:c1:ee:2d:b5:96:e9:87:23:44:0f:3d:52:
f5:57:c4:3c:ef:5b:ef:63:17:7a:98:a8:03:37:1b:
f9:be:72:26:68:11:66:25:ee:bf:4f:b9:06:a8:49:
f3:26:df:36:51:22:9a:37:5e:62:ee:5f:33:99:b6:
d9:e0:4b:19:54:de:96:19:5a:d6:38:02:9a:ae:57:
52:18:d5:b3:58:e6:8c:7f:28:f0:45:d2:6a:40:ab:
30:87:85:e7:37:cd:85:77:3e:0c:44:a2:0a:10:f9:
73:03:5c:1f:95:f5:af:dc:36:9b:6b:35:f1:32:8e:
6a:fb:58:ba:94:ec:59:ee:66:3f:c8:21:d8:7b:f4:
5d:e7:1e:46:18:c7:10:16:72:80:4a:9b:ab:eb:73:
ff:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CE:50:A4:C4:0F:4A:AD:A7:43:F9:33:C9:B7:2F:10:FB:94:47:FB
X509v3 Authority Key Identifier:
keyid:05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:41:8f:1c:8b:06:79:a0:37:9a:77:6c:be:24:bd:e9:3f:1f:
a7:27:3c:ec:e7:1c:de:78:1e:3f:f6:7d:fc:c9:4a:c2:fc:fe:
9c:36:48:66:18:22:71:88:b3:d7:54:91:07:77:bd:70:63:14:
5e:ae:93:f9:e8:15:88:01:a6:a8:5e:f3:74:cd:97:dc:7e:cf:
2b:3e:c5:36:8c:86:b1:2f:95:d5:78:d0:21:f8:58:2c:8d:29:
6e:e6:a0:76:68:0b:82:30:54:12:96:80:6d:97:4d:14:e0:82:
e6:7a:b6:21:fe:51:c0:ec:ab:d9:7a:54:ed:08:ae:1b:40:64:
1d:e1:e1:b2:b8:7b:ff:56:2d:e9:38:21:0c:8c:36:bb:4b:7b:
d3:6a:7c:ed:45:90:9d:0a:e6:ee:cd:b1:a6:26:f8:d6:ca:6f:
b7:e5:61:f3:2e:52:12:56:9b:bd:a8:fd:35:71:c4:bf:c2:f7:
7b:66:45:28:e9:04:7c:82:ca:aa:4a:a2:26:5d:73:58:0f:e3:
6b:e9:a0:6a:91:07:d6:21:cc:6d:93:fc:b5:01:80:20:37:9a:
0a:4b:17:77:b2:d0:bd:e9:3b:f7:8e:38:91:53:a9:5c:73:19:
9d:36:48:ef:bb:f1:ec:fb:30:1e:84:21:a6:e3:dc:98:94:c1:
69:b5:a8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:49:05 2025 by rpki-client