Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
File: _BeVJZEZ7optEI6bXL4LuQwJjs4.mft (raw, json)
Hash identifier: aAGb5MFYJZ9Ufcla6D4GK44EGPTxhtJljgjFW0hfHkc=
Subject key identifier: 29:14:13:CB:B1:40:0B:90:C4:77:06:93:55:84:DA:6B:41:CB:D4:DD
Authority key identifier: FC:17:95:25:91:19:EE:8A:6D:10:8E:9B:5C:BE:0B:B9:0C:09:8E:CE
Certificate issuer: /CN=fc1795259119ee8a6d108e9b5cbe0bb90c098ece
Certificate serial: 019872CFF685EDB1F12CCB77D1E6532985BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
Manifest number: 020B
Signing time: Mon 04 Aug 2025 02:01:28 +0000
Manifest this update: Mon 04 Aug 2025 02:01:28 +0000
Manifest next update: Tue 05 Aug 2025 02:01:28 +0000
Files and hashes: 1: _BeVJZEZ7optEI6bXL4LuQwJjs4.crl (hash: awDUZnmrtk/4bPZF7Z8jFO+H9Qcd4Wt1hUVTiRtAQ6I=)
2: xP4juvpCJDFtIojDOBVk5IvnB08.roa (hash: 3K8HKqQzgZ9JbtKLhv6R2lpB9bOzQZ7S4dfHQle+caY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:f6:85:ed:b1:f1:2c:cb:77:d1:e6:53:29:85:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc1795259119ee8a6d108e9b5cbe0bb90c098ece
Validity
Not Before: Aug 4 02:01:28 2025 GMT
Not After : Aug 5 02:01:28 2025 GMT
Subject: CN=291413cbb1400b90c47706935584da6b41cbd4dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:eb:8b:0d:c6:16:5c:27:7b:c0:1f:4a:ac:14:
e7:b1:46:64:b6:ff:ea:08:42:51:47:5b:76:ae:24:
6f:7c:d3:79:32:00:6c:76:34:4e:9f:f7:6f:01:f7:
3f:21:1c:3c:56:da:15:2a:77:ba:ef:8b:e1:c9:48:
37:60:b5:ae:f3:ce:a9:d0:59:18:b2:37:49:22:05:
f0:32:12:74:15:1b:f3:4c:bf:61:28:a1:c0:93:30:
1e:56:4c:b2:e3:be:a6:d7:c1:d3:c4:e4:04:8c:b8:
7b:f1:dc:49:71:8a:07:08:08:78:a3:a4:64:03:49:
c2:71:99:aa:9a:0f:56:66:f3:7f:ad:2c:ca:c3:2d:
07:3c:eb:5d:04:23:9b:2d:25:28:f6:81:35:c2:25:
e8:2a:33:84:08:fb:1d:9a:5a:8d:4f:7d:8c:f1:fa:
fc:a9:91:0e:38:f3:ca:4e:b3:02:61:56:82:a9:bc:
e3:79:6e:dc:ef:2d:94:55:37:ae:28:58:11:0c:79:
f3:a2:43:90:43:bf:98:8a:06:a3:31:01:ba:0d:42:
d7:72:e8:0a:9c:32:38:af:79:5a:43:38:71:44:a7:
88:0f:76:22:91:2d:ef:ce:ad:86:24:f9:ba:8c:33:
40:be:fa:38:9c:00:64:84:47:93:1c:07:64:ee:7b:
93:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:14:13:CB:B1:40:0B:90:C4:77:06:93:55:84:DA:6B:41:CB:D4:DD
X509v3 Authority Key Identifier:
keyid:FC:17:95:25:91:19:EE:8A:6D:10:8E:9B:5C:BE:0B:B9:0C:09:8E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:99:40:1d:0b:45:e1:99:44:49:65:ac:ff:fd:3e:63:20:e4:
eb:14:01:79:24:fa:a1:57:83:c6:d9:52:04:3b:fc:94:c8:47:
da:45:8f:17:09:c5:e9:0c:03:e0:b6:25:19:a3:bc:3f:f9:39:
c2:d2:34:b9:b2:63:b2:b8:3c:a6:b0:17:9e:29:b5:2c:f6:08:
75:8e:8c:ea:bd:55:18:b8:36:63:9c:d3:9e:eb:96:ad:2e:35:
11:c6:fd:b0:32:c0:aa:be:30:4c:2a:70:4f:12:09:cf:a8:d8:
4a:da:c4:8a:c1:57:19:b2:a9:bf:96:22:1e:43:df:f7:8a:61:
df:58:bb:58:8f:b6:65:94:25:f7:8a:d0:ce:39:55:ee:cf:70:
80:f9:5c:4a:ca:fc:3e:b2:59:9d:2a:6a:88:77:d6:d7:fe:f0:
9d:80:d8:72:04:73:db:db:35:b6:d3:f5:86:6a:89:c9:c8:d3:
83:9c:14:68:d3:e3:20:99:8f:87:16:d6:d7:ba:11:56:d4:ec:
8c:bf:6b:75:83:70:40:06:cc:0c:09:88:32:97:f9:38:df:80:
5a:7a:c4:be:a7:1e:02:8b:ba:59:16:c4:0e:1a:9e:57:a4:ec:
fb:a7:75:4d:f9:b9:88:c0:64:81:b0:4c:31:c5:f0:4d:4a:98:
2b:b6:7e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:46 2025 by rpki-client