
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
File: BE-_fHvu77FSWiYU2c1jpCafn0o.mft (raw, json)
Hash identifier: nDlTR76RIFBxqBVRxudtwu1KYqjcO2cpb+wBRnk1E7A=
Subject key identifier: 8F:37:28:0C:74:E8:CA:8F:B9:83:07:BD:5D:F0:6F:E9:98:51:4F:9E
Authority key identifier: 04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
Certificate issuer: /CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Certificate serial: 019872CFA5C489CDAA783425434989B67EDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
Manifest number: 07D6
Signing time: Mon 04 Aug 2025 02:01:07 +0000
Manifest this update: Mon 04 Aug 2025 02:01:07 +0000
Manifest next update: Tue 05 Aug 2025 02:01:07 +0000
Files and hashes: 1: BE-_fHvu77FSWiYU2c1jpCafn0o.crl (hash: pTMbQVRMZcAAZugwkDl7F8HhHBgk93LKhbVuf+mCPJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:a5:c4:89:cd:aa:78:34:25:43:49:89:b6:7e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Validity
Not Before: Aug 4 02:01:07 2025 GMT
Not After : Aug 5 02:01:07 2025 GMT
Subject: CN=8f37280c74e8ca8fb98307bd5df06fe998514f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:12:fe:51:7b:2a:11:9e:b6:55:eb:1a:5a:2c:
5b:73:a8:31:ca:22:f1:2d:a1:d1:c2:48:ee:c3:8f:
12:e1:6c:c4:93:70:44:f1:4d:94:70:78:d6:ba:64:
24:1d:43:ce:07:95:42:66:fa:73:5e:62:5b:0e:ce:
40:72:7c:83:9a:c2:02:ed:b4:aa:60:8c:77:ea:15:
c0:4b:de:e6:2e:6b:31:a7:79:9b:04:83:ab:1c:4d:
e8:10:ac:d8:9b:ef:f9:c4:01:b8:49:fd:3e:bb:17:
d8:99:52:a7:0b:ec:44:0f:06:7f:1b:30:c4:03:ea:
c1:27:60:3a:84:b5:d9:41:1a:93:9e:d5:cd:3a:fe:
9c:d8:4d:40:16:52:40:4b:f9:47:7c:99:9d:91:3a:
23:be:99:9b:eb:f9:bd:4c:dd:c6:b7:a3:f1:b2:01:
e0:2b:4c:87:1f:df:7d:94:5c:a9:d1:3a:ae:e3:ba:
df:95:fc:08:fa:27:33:93:6f:d4:9a:01:ad:a8:0a:
e3:cc:96:f9:d1:7b:97:8b:3c:6f:a9:c6:94:6d:93:
2b:3c:9e:4f:59:63:1f:df:13:3e:6d:72:e8:bd:1c:
24:a5:0a:13:a3:41:e6:30:a2:07:ba:7e:ba:9e:6b:
8a:7b:f9:7a:6f:7f:91:20:4d:72:70:06:de:37:d7:
af:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:37:28:0C:74:E8:CA:8F:B9:83:07:BD:5D:F0:6F:E9:98:51:4F:9E
X509v3 Authority Key Identifier:
keyid:04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f8:6c:fc:30:f5:d7:fc:67:d2:1c:91:ab:33:be:78:f6:df:
95:61:87:74:eb:78:3f:c1:eb:58:3b:fa:50:7f:3b:9f:88:c7:
1a:dd:5e:34:dd:36:91:8f:0e:82:70:6e:7a:3a:10:38:e1:2d:
c4:d2:9e:0f:3d:99:a3:3d:94:bc:51:1b:f1:1a:63:b5:16:f1:
9a:95:aa:ee:0c:80:76:5f:43:a0:49:56:0a:f1:1b:2d:fa:79:
57:20:11:03:d3:23:2b:0c:76:34:73:38:e9:92:73:e8:6a:10:
ec:7b:ab:64:ce:e2:7b:0d:94:46:24:f9:7d:4d:94:11:7f:5d:
8a:e6:c1:a5:21:a2:f5:d7:b8:a6:58:4a:0b:83:5d:4d:71:36:
88:e4:0a:a2:93:58:67:e5:bd:b4:f9:ec:64:1a:3d:f2:06:8e:
f6:98:60:1e:1f:c0:c4:31:ef:c9:7b:79:1b:a0:31:e5:b1:90:
d0:87:5d:79:36:8e:dc:95:20:21:96:d9:8c:f0:c3:ea:36:7e:
d0:4f:34:91:7f:0d:60:b8:26:a4:55:9f:bb:cf:64:4e:42:1b:
5e:03:c3:40:26:33:48:ec:5b:50:bd:cc:40:61:45:22:38:61:
9d:c5:96:61:87:f0:77:ac:b5:d8:cf:1e:d1:01:23:dd:0b:9a:
48:1a:ec:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz6XEic2qeDQlQ0mJtn7fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NGZiZjdjN2JlZWVmYjE1MjVhMjYxNGQ5Y2Q2M2E0MjY5
ZjlmNGEwHhcNMjUwODA0MDIwMTA3WhcNMjUwODA1MDIwMTA3WjAzMTEwLwYDVQQD
Eyg4ZjM3MjgwYzc0ZThjYThmYjk4MzA3YmQ1ZGYwNmZlOTk4NTE0ZjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BL+UXsqEZ62VesaWixbc6gxyiLx
LaHRwkjuw48S4WzEk3BE8U2UcHjWumQkHUPOB5VCZvpzXmJbDs5AcnyDmsIC7bSq
YIx36hXAS97mLmsxp3mbBIOrHE3oEKzYm+/5xAG4Sf0+uxfYmVKnC+xEDwZ/GzDE
A+rBJ2A6hLXZQRqTntXNOv6c2E1AFlJAS/lHfJmdkTojvpmb6/m9TN3Gt6PxsgHg
K0yHH999lFyp0Tqu47rflfwI+iczk2/UmgGtqArjzJb50XuXizxvqcaUbZMrPJ5P
WWMf3xM+bXLovRwkpQoTo0HmMKIHun66nmuKe/l6b3+RIE1ycAbeN9ev+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI83KAx06MqPuYMHvV3wb+mYUU+eMB8GA1UdIwQY
MBaAFARPv3x77u+xUlomFNnNY6Qmn59KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkUtX2ZIdnU3N0ZTV2lZVTJjMWpwQ2FmbjBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iMjNhOWItNWNkZC00YzQxLWJmMjYt
NTEzNjI2OTVkMDg1LzEvQkUtX2ZIdnU3N0ZTV2lZVTJjMWpwQ2FmbjBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9iMjNhOWItNWNkZC00YzQxLWJmMjYtNTEzNjI2OTVkMDg1
LzEvQkUtX2ZIdnU3N0ZTV2lZVTJjMWpwQ2FmbjBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdPhs/DD1
1/xn0hyRqzO+ePbflWGHdOt4P8HrWDv6UH87n4jHGt1eNN02kY8OgnBuejoQOOEt
xNKeDz2Zoz2UvFEb8RpjtRbxmpWq7gyAdl9DoElWCvEbLfp5VyARA9MjKwx2NHM4
6ZJz6GoQ7HurZM7iew2URiT5fU2UEX9diubBpSGi9de4plhKC4NdTXE2iOQKopNY
Z+W9tPnsZBo98gaO9phgHh/AxDHvyXt5G6Ax5bGQ0IddeTaO3JUgIZbZjPDD6jZ+
0E80kX8NYLgmpFWfu89kTkIbXgPDQCYzSOxbUL3MQGFFIjhhncWWYYfwd6y12M8e
0QEj3QuaSBrsOg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:48 2025 by rpki-client