Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
File: BE-_fHvu77FSWiYU2c1jpCafn0o.mft (raw, json)
Hash identifier: PJbtsH7A+aQlxM3Fy16+tqr5Ms8OsmpsBUz5Izmf+FI=
Subject key identifier: 51:00:64:98:D0:83:9C:8A:5B:92:5C:FC:E0:1D:06:F3:55:A0:3A:86
Authority key identifier: 04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
Certificate issuer: /CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Certificate serial: 019A4FD05478147FF345D2CAC78704751C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
Manifest number: 08CD
Signing time: Tue 04 Nov 2025 17:00:44 +0000
Manifest this update: Tue 04 Nov 2025 17:00:44 +0000
Manifest next update: Wed 05 Nov 2025 17:00:44 +0000
Files and hashes: 1: BE-_fHvu77FSWiYU2c1jpCafn0o.crl (hash: R0B57Kjnxcc6j3n366/uNg/SKr2DfRGY9jGr9ZvWioI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:54:78:14:7f:f3:45:d2:ca:c7:87:04:75:1c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Validity
Not Before: Nov 4 17:00:44 2025 GMT
Not After : Nov 5 17:00:44 2025 GMT
Subject: CN=51006498d0839c8a5b925cfce01d06f355a03a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:60:e6:14:12:66:6d:37:4b:63:94:2b:1e:1a:
e2:d9:5e:09:22:ab:3a:57:8e:0b:1a:55:f9:9f:a1:
fb:be:85:a9:0c:4b:a2:e1:ab:85:e7:43:6e:57:9e:
cf:e2:d6:66:1b:8c:26:31:ea:a2:c4:42:fb:06:ff:
56:f7:91:0b:a2:24:f8:5c:6f:ba:a8:50:56:15:d3:
5c:95:39:be:a9:e7:6b:9c:30:2d:a2:2f:81:4d:e6:
9c:f7:88:d7:24:41:42:47:94:e1:48:c5:f6:6a:fb:
e2:b7:57:7a:41:1f:c2:af:f2:81:27:48:a3:18:2a:
3c:71:fc:57:b7:9a:39:59:91:7a:c0:f4:ff:fa:e7:
7a:27:3e:e6:32:bc:e0:ce:be:d2:49:90:35:71:05:
53:74:2a:b1:ec:d6:93:26:64:2d:65:2b:77:e7:02:
f1:2f:10:48:63:d8:4d:d4:f7:da:89:8b:d2:47:d0:
10:20:3a:ff:e2:89:58:5a:1d:c4:a5:d7:25:7e:93:
43:a5:f6:ab:b8:0b:2a:6d:95:c8:03:4d:12:f5:c2:
38:14:09:a8:5a:7d:59:19:19:44:32:f9:7e:c8:72:
d4:d1:e6:6b:17:be:e3:01:4f:38:19:cd:da:ca:48:
1c:15:43:93:25:fb:ec:bb:5c:55:9b:70:ce:83:8f:
0c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:00:64:98:D0:83:9C:8A:5B:92:5C:FC:E0:1D:06:F3:55:A0:3A:86
X509v3 Authority Key Identifier:
keyid:04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:6a:50:b2:bf:0b:46:ce:ed:1c:4d:69:f8:a5:46:f7:dc:cd:
e2:8d:eb:0e:8c:b4:78:ff:2c:42:18:01:27:20:24:f8:e1:b7:
bf:cc:ee:c5:16:e5:6b:2e:fb:28:13:6a:d8:fb:8f:d1:f2:6c:
9d:46:a8:21:f3:d0:a5:12:0c:be:a8:63:55:7c:41:ed:c7:a1:
17:56:2e:2c:37:34:42:44:28:36:eb:0a:7b:4a:4d:49:0f:08:
af:cb:f3:cd:46:f2:b3:a4:8c:60:a2:78:19:ab:70:e6:9b:19:
2f:6e:bc:05:19:35:f0:ca:18:3a:b3:28:df:c3:1d:b5:fc:fa:
8e:8e:25:9d:6d:6e:12:66:d9:50:4b:73:d0:52:13:d0:36:8c:
9e:5b:9b:cf:8c:f8:61:d5:39:a9:4e:a7:de:1d:9d:57:5e:33:
3c:43:2f:02:63:82:8d:ca:e7:a7:64:72:46:30:fa:97:52:1b:
aa:fa:83:f2:ce:90:c8:7a:40:e8:79:b4:c8:10:ff:19:c3:f5:
75:2d:68:6e:c1:0c:70:14:76:a4:dc:5e:98:1c:bd:9d:93:41:
e1:d0:07:18:f1:65:13:a4:60:37:fa:9b:8d:e2:b3:eb:58:f8:
f7:b8:0d:d9:d1:7b:dc:57:53:ca:35:22:d3:21:c6:1a:22:e4:
d4:17:8f:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpP0FR4FH/zRdLKx4cEdRx+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NGZiZjdjN2JlZWVmYjE1MjVhMjYxNGQ5Y2Q2M2E0MjY5
ZjlmNGEwHhcNMjUxMTA0MTcwMDQ0WhcNMjUxMTA1MTcwMDQ0WjAzMTEwLwYDVQQD
Eyg1MTAwNjQ5OGQwODM5YzhhNWI5MjVjZmNlMDFkMDZmMzU1YTAzYTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWDmFBJmbTdLY5QrHhri2V4JIqs6
V44LGlX5n6H7voWpDEui4auF50NuV57P4tZmG4wmMeqixEL7Bv9W95ELoiT4XG+6
qFBWFdNclTm+qedrnDAtoi+BTeac94jXJEFCR5ThSMX2avvit1d6QR/Cr/KBJ0ij
GCo8cfxXt5o5WZF6wPT/+ud6Jz7mMrzgzr7SSZA1cQVTdCqx7NaTJmQtZSt35wLx
LxBIY9hN1PfaiYvSR9AQIDr/4olYWh3EpdclfpNDpfaruAsqbZXIA00S9cI4FAmo
Wn1ZGRlEMvl+yHLU0eZrF77jAU84Gc3aykgcFUOTJfvsu1xVm3DOg48MHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEAZJjQg5yKW5Jc/OAdBvNVoDqGMB8GA1UdIwQY
MBaAFARPv3x77u+xUlomFNnNY6Qmn59KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkUtX2ZIdnU3N0ZTV2lZVTJjMWpwQ2FmbjBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iMjNhOWItNWNkZC00YzQxLWJmMjYt
NTEzNjI2OTVkMDg1LzEvQkUtX2ZIdnU3N0ZTV2lZVTJjMWpwQ2FmbjBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9iMjNhOWItNWNkZC00YzQxLWJmMjYtNTEzNjI2OTVkMDg1
LzEvQkUtX2ZIdnU3N0ZTV2lZVTJjMWpwQ2FmbjBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2pQsr8L
Rs7tHE1p+KVG99zN4o3rDoy0eP8sQhgBJyAk+OG3v8zuxRblay77KBNq2PuP0fJs
nUaoIfPQpRIMvqhjVXxB7cehF1YuLDc0QkQoNusKe0pNSQ8Ir8vzzUbys6SMYKJ4
Gatw5psZL268BRk18MoYOrMo38Mdtfz6jo4lnW1uEmbZUEtz0FIT0DaMnlubz4z4
YdU5qU6n3h2dV14zPEMvAmOCjcrnp2RyRjD6l1IbqvqD8s6QyHpA6Hm0yBD/GcP1
dS1obsEMcBR2pNxemBy9nZNB4dAHGPFlE6RgN/qbjeKz61j497gN2dF73FdTyjUi
0yHGGiLk1BeP1g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:34:14 2025 by rpki-client