
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
File: BE1l50JUsl_gDrjqBrtY--aKwZs.mft (raw, json)
Hash identifier: 6gOreeYqg+bhoyWBqTRzdDMnF+acBEBlqhr+ZeJz3Yk=
Subject key identifier: 37:1C:B7:95:D6:ED:F4:6E:D3:54:8B:09:8A:1A:F0:40:BD:5E:D7:4A
Authority key identifier: 04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
Certificate issuer: /CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Certificate serial: 01989780DEDC57C4C979989401A363123905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
Manifest number: 0C2A
Signing time: Mon 11 Aug 2025 05:01:01 +0000
Manifest this update: Mon 11 Aug 2025 05:01:01 +0000
Manifest next update: Tue 12 Aug 2025 05:01:01 +0000
Files and hashes: 1: BE1l50JUsl_gDrjqBrtY--aKwZs.crl (hash: 9hniT+M7Ajju4fuIJJv2xZrhowYUmn2OvAnIIAYxPv0=)
2: rthTWvBWTldvCBC_jsm-IEkTBFQ.roa (hash: GkYmfEttYtLOHlLhDgqjd5V7UynvO3JpXV9H0/Hyyb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:80:de:dc:57:c4:c9:79:98:94:01:a3:63:12:39:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Validity
Not Before: Aug 11 05:01:01 2025 GMT
Not After : Aug 12 05:01:01 2025 GMT
Subject: CN=371cb795d6edf46ed3548b098a1af040bd5ed74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4a:a7:d2:ab:aa:bc:1e:ad:41:52:36:4d:7b:
ec:21:d2:db:be:1d:f3:9b:8c:45:0f:33:3f:80:4e:
e1:b6:18:3a:8e:23:89:ed:cb:70:3f:55:a0:04:6f:
c4:48:3b:d5:dc:3f:22:16:48:b6:1c:24:4b:41:08:
f5:4c:45:26:1c:eb:19:8f:58:ae:a7:bc:19:32:2e:
cc:79:06:ea:41:88:d5:08:e2:26:d2:04:62:a3:ff:
39:8c:21:3b:14:54:26:af:4c:97:b7:25:c8:21:b6:
fb:66:10:0d:f4:e8:92:f6:4c:a4:05:44:01:b7:df:
ad:4c:24:15:72:9f:36:ba:f6:b1:71:fa:92:4d:6d:
6e:98:75:4f:33:25:56:89:8c:7d:17:10:15:bc:ed:
58:ba:11:a0:41:45:03:37:c7:87:07:20:84:cc:82:
ea:84:da:f7:b8:11:4a:f4:70:23:f0:b3:86:a2:57:
68:af:c4:1d:a1:0e:6e:34:17:32:6b:2a:b0:fb:44:
c8:64:ba:a6:a4:a4:d6:6d:dc:18:f4:d7:41:25:c5:
00:7c:b0:e0:62:6a:92:d2:6e:01:c9:38:ea:64:c4:
c6:09:fc:a7:88:95:14:a3:f8:f6:87:05:b1:eb:f0:
f2:12:0e:78:12:57:9e:f5:fe:47:e7:f9:fa:75:57:
bc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1C:B7:95:D6:ED:F4:6E:D3:54:8B:09:8A:1A:F0:40:BD:5E:D7:4A
X509v3 Authority Key Identifier:
keyid:04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e6:3e:f2:ff:fd:f7:a8:0a:33:72:62:b6:84:a4:13:be:12:22:
e2:cf:4a:18:a5:43:47:0a:bb:2e:29:c3:35:fc:2d:73:fa:3c:
55:81:45:c5:8e:bf:65:c0:ff:64:e6:b8:9d:97:00:e0:ae:53:
c7:fd:d8:bd:f3:1c:e7:cb:81:04:de:dc:9a:df:10:b6:6d:6a:
f7:0c:6d:f0:89:2c:87:c8:d2:3b:66:54:6d:69:c5:8f:c7:5e:
ea:ed:0e:b5:7c:45:df:bd:33:be:b7:83:ca:b9:51:3a:e6:dd:
21:d5:47:57:04:78:08:d4:9e:74:6c:55:fe:99:2d:0b:fe:87:
ff:f5:bc:af:f9:e1:e0:15:d0:b8:63:5b:7f:8f:d1:96:ad:7b:
81:a1:a9:20:fa:8e:e6:8b:2f:c4:84:d1:79:a2:10:e5:e5:c2:
60:e9:52:12:69:e0:3c:47:60:b4:04:93:e7:43:ab:7e:b9:38:
b1:62:08:9b:43:4b:7e:e2:3e:22:74:07:0d:4b:e2:a7:55:83:
7e:ba:db:ac:f0:ea:8d:eb:52:43:79:62:94:1b:e8:11:54:44:
52:c3:47:94:0b:2f:d0:24:a4:0a:2c:57:55:0f:6d:20:99:6a:
7f:6d:f4:0c:a4:4c:a9:0e:ab:6a:8e:f4:8c:04:42:ff:cc:07:
5e:2b:e9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 08:43:59 2025 by rpki-client