Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
File: BE1l50JUsl_gDrjqBrtY--aKwZs.mft (raw, json)
Hash identifier: cBlv6Dqy6ZyuLEU5S9EJHaN8uG+j7ye9VoWkXapaYmY=
Subject key identifier: 09:20:30:04:33:A0:6F:B6:67:F6:29:93:58:AB:12:72:2A:88:C5:C5
Authority key identifier: 04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
Certificate issuer: /CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Certificate serial: 019A4FD046A0918263DE0B50C23A23211483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
Manifest number: 0D0E
Signing time: Tue 04 Nov 2025 17:00:40 +0000
Manifest this update: Tue 04 Nov 2025 17:00:40 +0000
Manifest next update: Wed 05 Nov 2025 17:00:40 +0000
Files and hashes: 1: BE1l50JUsl_gDrjqBrtY--aKwZs.crl (hash: hy5YrMiPJ/lY5vFrx68pcraewjB+kQoS6IRoqNkHM9A=)
2: rthTWvBWTldvCBC_jsm-IEkTBFQ.roa (hash: GkYmfEttYtLOHlLhDgqjd5V7UynvO3JpXV9H0/Hyyb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:46:a0:91:82:63:de:0b:50:c2:3a:23:21:14:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Validity
Not Before: Nov 4 17:00:40 2025 GMT
Not After : Nov 5 17:00:40 2025 GMT
Subject: CN=0920300433a06fb667f6299358ab12722a88c5c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:73:2d:10:2d:76:02:18:84:50:2d:aa:4e:e6:
7b:5d:76:bc:31:cf:f2:eb:b8:16:44:63:64:f4:ab:
fe:ae:81:e4:9e:0e:fe:ae:0b:d1:40:f9:e9:d4:5d:
64:55:5b:60:76:97:85:5c:d7:1e:15:ce:d1:28:17:
55:19:c8:f5:a0:87:14:93:e0:73:6b:bf:dc:90:2e:
1e:34:2d:7c:c5:d2:b6:71:04:04:fe:45:c9:7d:b6:
96:8f:76:ca:36:f1:12:85:3d:c7:16:22:44:dd:df:
3e:e6:63:40:49:0b:20:ba:28:f1:3f:af:3d:fd:7f:
18:dc:1e:a2:21:15:0c:b7:0b:2f:4c:ae:a0:c8:43:
ee:68:74:8d:57:51:32:76:8b:3f:35:6a:a7:19:49:
aa:cb:88:c7:da:d5:5b:4a:c9:6d:93:40:fe:f2:f7:
e5:df:23:0c:c8:bb:be:78:cd:dd:d8:ec:aa:da:26:
53:41:6e:aa:33:b5:2c:07:96:e1:76:c6:61:7c:45:
78:c4:67:c0:56:e2:06:b6:06:f1:c2:e4:5a:01:13:
b1:04:5c:80:fb:3c:eb:4c:aa:76:17:34:56:f2:67:
4c:83:c8:b4:89:ff:53:66:0f:e8:17:f0:4f:84:5f:
15:e8:69:f0:ec:55:f4:09:60:45:09:ae:1b:1d:7b:
3b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:20:30:04:33:A0:6F:B6:67:F6:29:93:58:AB:12:72:2A:88:C5:C5
X509v3 Authority Key Identifier:
keyid:04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:53:f0:e3:9a:bf:57:7e:52:dc:02:dd:09:e2:02:68:20:cd:
d4:1e:ad:82:f8:d4:17:10:64:67:3d:d1:98:7c:de:b8:4a:99:
29:1d:c5:ca:e9:bd:d5:d1:4a:2e:7c:a8:31:21:3a:51:91:d3:
d3:df:13:3e:b9:9f:15:58:94:5f:aa:49:4a:74:d6:58:4a:17:
42:fd:aa:91:e5:aa:83:0b:0b:d3:f3:1e:35:97:4d:67:0e:d9:
38:35:a6:e9:a7:29:39:6a:63:70:14:08:25:71:b3:e5:69:d4:
f0:6e:12:14:dc:3e:44:0a:9c:42:81:ea:1d:45:27:8f:1d:52:
d5:9c:1d:ff:8a:9b:a0:24:e5:d0:0c:69:c2:97:c9:60:09:b4:
b6:22:25:32:a2:3a:4e:43:69:e0:e6:d9:e7:49:1f:88:11:0e:
cc:13:6a:45:1f:7f:81:d8:8f:86:79:d4:01:76:d6:97:9f:aa:
61:ac:23:68:8a:4c:18:96:10:2d:74:3d:15:f1:9c:76:ff:10:
51:ce:3c:6f:ff:8d:f3:9d:a3:fe:7e:59:f2:12:2d:65:f7:0b:
9c:77:22:02:4c:c3:cf:2f:a7:76:1b:0d:35:eb:9a:3d:5a:a5:
01:ee:12:59:4d:ad:3b:8c:f2:b6:f7:95:7b:31:13:b7:c9:d9:
de:c5:a8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:55:55 2025 by rpki-client