Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
File: BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft (raw, json)
Hash identifier: 4n35hm+aqLZv6Y4x3Bc8s1ILzeL4BMArrbzE3QI5VQA=
Subject key identifier: CF:D5:87:A3:F9:18:F4:8A:85:E0:F4:98:8B:31:EB:58:D3:1C:8B:88
Authority key identifier: 04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
Certificate issuer: /CN=044aacab9a49e143de68979ad156b42dabddde8c
Certificate serial: 019A4FD03CAB2384F7AD5542D453820A894F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 17:00:38 +0000
Manifest this update: Tue 04 Nov 2025 17:00:38 +0000
Manifest next update: Wed 05 Nov 2025 17:00:38 +0000
Files and hashes: 1: BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl (hash: ScgdyMtA7sQPpAruWb3BZz+wBC+wPyPeQYSoOm+OiXw=)
2: hXYgFaLhg1h4smB81OExsZ5kDYA.roa (hash: J1LdPvY1o2Z/PcEpdVjEoKRtwcTpNQB0rwhpVoUBM7k=)
3: xNMIWy2dS-kAK1ke_Y9FCAMH0bc.roa (hash: Ms6l/F8PW5KZFppFyiKlVq4OI4pGZuAHpYocAWIKp4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:3c:ab:23:84:f7:ad:55:42:d4:53:82:0a:89:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044aacab9a49e143de68979ad156b42dabddde8c
Validity
Not Before: Nov 4 17:00:38 2025 GMT
Not After : Nov 5 17:00:38 2025 GMT
Subject: CN=cfd587a3f918f48a85e0f4988b31eb58d31c8b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2a:8c:24:fe:e7:40:09:cb:2a:60:15:22:35:
00:e5:67:5d:d1:0c:1d:7b:9f:04:9d:89:55:80:df:
d4:72:f9:63:f9:88:8a:49:c6:31:f2:89:ee:ba:4e:
c2:05:ff:26:a4:34:c2:bc:52:b9:26:74:89:95:a7:
0e:35:20:99:24:7c:c5:ed:73:69:dd:cc:5a:6c:55:
82:3e:82:32:cb:08:7a:6f:06:d4:fd:01:01:c2:2b:
67:5b:9b:f6:19:cc:4d:8b:15:11:02:d0:2b:32:b1:
c6:bb:91:57:44:69:fd:0c:85:d0:ce:3a:39:96:32:
b7:d7:d8:4a:7f:97:80:f9:9d:d6:03:af:e9:8b:3d:
75:e8:c1:18:11:6e:c0:4c:6e:85:e8:39:1a:1e:23:
98:14:0c:a8:94:fa:b7:ce:10:d6:9f:e9:5c:49:05:
6b:dd:6c:6a:70:84:6b:e1:0e:74:bd:bc:bd:ba:8a:
c3:d7:7a:59:ab:6a:5b:bb:d6:0a:73:0a:db:41:10:
87:84:4d:92:91:36:ba:fd:95:73:ee:6b:02:91:8c:
d1:54:a3:9c:10:2b:86:7b:6d:dc:93:ee:f6:b5:ed:
5c:b5:90:cb:31:52:4a:6e:2b:42:25:d0:d1:77:36:
79:cf:78:d6:b4:88:fc:95:6c:db:89:51:fa:db:00:
cb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D5:87:A3:F9:18:F4:8A:85:E0:F4:98:8B:31:EB:58:D3:1C:8B:88
X509v3 Authority Key Identifier:
keyid:04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:26:17:eb:b9:bf:90:37:a7:5a:64:b4:a0:48:8e:54:23:f9:
7d:9c:0e:6c:3b:2b:aa:11:24:ef:89:02:75:58:bf:af:0d:8c:
e2:f0:3d:8c:d5:6f:aa:be:17:27:f5:e7:6d:76:45:a2:b1:9f:
d5:1f:b0:fb:fa:3a:54:a9:03:d2:71:6e:f8:61:81:32:1a:53:
2a:9d:69:03:b4:a3:31:02:3f:28:f9:90:dd:27:b9:f6:e1:de:
14:54:6d:00:d9:18:6a:c3:c2:42:eb:1f:bb:3a:8e:46:61:27:
84:49:30:58:96:a7:f8:fb:1d:b0:04:6a:4b:90:71:d6:a5:98:
fd:94:97:e4:da:16:87:98:67:65:05:d4:c0:c9:4c:f3:e8:fc:
30:d0:43:4a:01:94:8a:85:a1:60:ed:eb:f5:49:21:ab:59:ac:
4b:46:5e:c0:8b:22:e7:a7:4e:72:38:cc:24:d4:bf:86:a9:34:
e2:a2:2c:87:51:23:30:7b:b2:95:b2:7f:ea:56:4f:9f:17:69:
b1:2d:49:57:e6:24:03:87:76:5d:50:d2:58:c1:89:fd:44:10:
2f:7b:6e:53:9b:60:b1:00:c0:ab:d0:0b:f4:3f:87:4f:d8:80:
0e:2f:1e:9c:83:80:21:f6:db:f4:6a:8c:16:72:71:4b:a3:78:
b7:90:93:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:06 2025 by rpki-client