Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
File: _BeVJZEZ7optEI6bXL4LuQwJjs4.mft (raw, json)
Hash identifier: n5tWCl7utZl69bQ5PHSX2GND9bn/1NoE8B6+wESt1LQ=
Subject key identifier: B3:8C:57:8D:FB:DD:66:F7:F3:9C:87:FD:B5:4C:9E:7A:FF:3F:9C:16
Authority key identifier: FC:17:95:25:91:19:EE:8A:6D:10:8E:9B:5C:BE:0B:B9:0C:09:8E:CE
Certificate issuer: /CN=fc1795259119ee8a6d108e9b5cbe0bb90c098ece
Certificate serial: 019A4FCFEF60C9EFAFE9AF3A1EED5DF352A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
Manifest number: 0302
Signing time: Tue 04 Nov 2025 17:00:18 +0000
Manifest this update: Tue 04 Nov 2025 17:00:18 +0000
Manifest next update: Wed 05 Nov 2025 17:00:18 +0000
Files and hashes: 1: _BeVJZEZ7optEI6bXL4LuQwJjs4.crl (hash: hbe5NtutHv1VFPG2s1ZX9H2B5huNfpJTJDCGMIoEQr4=)
2: xP4juvpCJDFtIojDOBVk5IvnB08.roa (hash: 3K8HKqQzgZ9JbtKLhv6R2lpB9bOzQZ7S4dfHQle+caY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:ef:60:c9:ef:af:e9:af:3a:1e:ed:5d:f3:52:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc1795259119ee8a6d108e9b5cbe0bb90c098ece
Validity
Not Before: Nov 4 17:00:18 2025 GMT
Not After : Nov 5 17:00:18 2025 GMT
Subject: CN=b38c578dfbdd66f7f39c87fdb54c9e7aff3f9c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f5:3e:62:8d:2f:e4:53:bc:d9:c5:59:96:ed:
39:20:76:1d:2d:18:04:5d:58:9a:51:48:f7:b3:c0:
e1:80:b8:28:6e:e4:d1:b5:e8:dc:77:a2:2f:80:3d:
3f:27:e4:51:1f:d3:c0:9e:a7:4a:eb:9b:cd:49:09:
59:32:90:e0:e3:ba:f5:28:20:24:dc:77:65:10:49:
cb:8f:fd:ab:05:83:ca:3a:21:f6:17:05:1c:18:3d:
59:6d:31:e0:cd:e0:a4:39:ec:ba:59:39:37:36:aa:
65:f1:89:d4:b1:9f:1b:95:89:43:0e:6d:c5:85:6e:
9c:42:e6:7a:f0:b2:03:d6:8d:f3:72:f0:6a:99:bf:
69:d5:5d:66:79:9b:05:0d:5e:78:34:9d:b6:bd:ff:
45:f8:d7:0d:e7:d4:04:03:91:6e:e8:0c:28:35:b8:
d8:ab:b5:ae:a5:7c:91:38:1e:a6:45:e3:1f:d9:6d:
04:af:68:a5:44:cd:8e:81:88:f0:d7:64:9e:69:20:
0d:3f:84:fd:e0:3c:3d:92:fc:9e:de:f5:8d:64:90:
ae:62:48:c2:c9:ae:fb:83:96:4b:a3:ca:0e:3b:ce:
ba:aa:d1:bf:45:fc:0a:22:4a:db:60:a2:d2:1b:41:
c5:ba:3c:58:de:39:c1:f4:0f:35:f1:3f:ec:4d:20:
12:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:8C:57:8D:FB:DD:66:F7:F3:9C:87:FD:B5:4C:9E:7A:FF:3F:9C:16
X509v3 Authority Key Identifier:
keyid:FC:17:95:25:91:19:EE:8A:6D:10:8E:9B:5C:BE:0B:B9:0C:09:8E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:65:f7:a0:40:fe:c1:36:5e:f3:0b:2c:63:14:39:f0:32:ff:
03:d7:b3:e5:bf:20:df:ab:36:2d:74:60:70:8f:e8:3a:b7:d5:
a2:dd:f9:e2:55:d8:20:eb:a7:a3:b7:bf:7e:6f:30:86:18:d0:
a9:9c:a1:a6:22:d8:19:9c:ee:ea:0b:da:c2:1c:7e:aa:71:31:
85:64:f1:41:c6:53:4d:dd:a9:53:97:2e:21:a9:bb:13:f8:54:
05:59:9a:1d:2d:f8:5c:27:ea:34:d4:c5:7c:9c:48:94:ca:fe:
74:f0:2c:12:91:c2:86:69:e0:36:c4:eb:80:79:6c:d0:39:78:
93:0c:77:aa:4c:61:b3:ba:87:0b:78:21:38:d6:64:75:17:84:
3c:ff:89:81:b7:2e:56:c4:eb:7b:15:d7:18:22:5b:63:6b:0d:
35:12:a7:35:31:28:78:2f:df:ae:ec:3d:17:40:bc:14:3d:48:
ab:a6:e1:ad:54:07:94:ad:1a:3b:86:b0:84:eb:ca:6c:83:74:
90:7c:9c:3f:3d:01:5f:65:b6:6c:70:fb:fb:c7:37:a6:03:ef:
c3:30:18:80:41:50:6f:37:70:7d:22:d2:be:52:38:e7:31:89:
cf:10:5e:22:db:ca:b7:7c:8e:6f:0e:cf:6c:0a:08:59:ff:d8:
fe:64:d5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:54 2025 by rpki-client