Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
File: _BeVJZEZ7optEI6bXL4LuQwJjs4.mft (raw, json)
Hash identifier: apV/AzUXaPEcNDEfhWYTUIQxn7NvGDq4LZ6doKayU00=
Subject key identifier: 1E:A1:8C:6B:18:8D:86:A3:97:A5:31:30:F6:6A:0D:45:96:D9:1F:0A
Authority key identifier: FC:17:95:25:91:19:EE:8A:6D:10:8E:9B:5C:BE:0B:B9:0C:09:8E:CE
Certificate issuer: /CN=fc1795259119ee8a6d108e9b5cbe0bb90c098ece
Certificate serial: 01977007746AF432CCAC14E91785CCBB611E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
Manifest number: 0185
Signing time: Sat 14 Jun 2025 20:00:25 +0000
Manifest this update: Sat 14 Jun 2025 20:00:25 +0000
Manifest next update: Sun 15 Jun 2025 20:00:25 +0000
Files and hashes: 1: _BeVJZEZ7optEI6bXL4LuQwJjs4.crl (hash: iUflfg6qlNoNdP3A1CSKRKF0Lu6sHRek9SucIMAHH00=)
2: xP4juvpCJDFtIojDOBVk5IvnB08.roa (hash: 3K8HKqQzgZ9JbtKLhv6R2lpB9bOzQZ7S4dfHQle+caY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:74:6a:f4:32:cc:ac:14:e9:17:85:cc:bb:61:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc1795259119ee8a6d108e9b5cbe0bb90c098ece
Validity
Not Before: Jun 14 20:00:25 2025 GMT
Not After : Jun 15 20:00:25 2025 GMT
Subject: CN=1ea18c6b188d86a397a53130f66a0d4596d91f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:54:65:5f:d7:7f:66:91:93:68:6f:11:9f:bb:
42:23:33:b8:76:ac:64:62:e9:42:e7:c0:f0:96:bb:
a7:37:05:13:8a:e7:3f:ae:d4:af:44:36:5a:72:21:
41:74:d9:e1:07:50:c4:12:27:48:81:a5:cd:00:db:
c6:ed:fb:4a:e1:e9:2b:01:52:08:df:73:28:5c:de:
aa:06:f2:c1:39:23:56:61:7c:53:8f:fe:3b:9f:e1:
75:85:48:72:de:07:15:28:41:26:c7:d3:96:bf:3d:
35:85:14:b9:58:e9:cf:9e:b7:12:f8:d2:23:08:ec:
45:9d:02:de:0a:a3:e6:a6:51:a0:56:f4:30:2d:62:
15:17:80:06:7d:30:ec:e4:76:05:58:84:e0:82:3d:
7e:1a:b5:0c:6f:1b:34:b6:07:c6:cf:12:77:5f:b9:
fc:63:d9:5f:2d:8c:3a:8d:13:b9:34:45:b2:86:ed:
42:29:55:bb:30:7b:e2:f4:b7:58:f8:42:36:1a:e4:
b2:c8:76:c6:56:63:c6:26:11:a6:fe:61:88:e2:a0:
af:2f:e6:fa:24:49:5b:9a:c2:0b:3f:1b:7a:66:05:
07:e4:d3:f5:85:31:74:3e:31:6c:ee:0d:79:48:30:
e1:c3:0e:bf:c5:38:12:79:8f:ac:e7:a9:c6:92:c8:
65:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A1:8C:6B:18:8D:86:A3:97:A5:31:30:F6:6A:0D:45:96:D9:1F:0A
X509v3 Authority Key Identifier:
keyid:FC:17:95:25:91:19:EE:8A:6D:10:8E:9B:5C:BE:0B:B9:0C:09:8E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:dd:5a:45:47:f8:22:5d:55:d2:61:4c:09:e8:32:96:50:b1:
95:9f:01:ee:ec:2a:af:79:c2:ef:0e:8c:ea:12:e6:04:39:d5:
68:bf:af:53:fb:1f:f8:a4:4f:41:31:5a:47:26:9f:01:23:09:
a6:48:0c:ab:45:c2:13:b9:af:e4:7e:a7:b8:06:93:bc:aa:17:
67:a8:3e:05:06:03:5c:25:02:a1:dc:2c:89:37:e5:5d:b5:54:
42:47:35:63:94:84:3c:7d:1e:14:31:ce:87:ea:8f:fb:25:7a:
6a:99:a9:29:bc:b9:d0:d7:71:5e:13:a2:79:f1:8d:a3:8d:6d:
19:59:5a:43:06:20:29:20:e9:dd:0b:aa:13:b3:09:ef:c2:11:
c2:a3:f4:0f:bf:ce:6f:3a:a8:a5:ce:7d:a6:5d:1f:f3:59:2d:
4f:9d:86:78:f2:01:d2:50:0d:bb:c0:35:71:71:26:14:38:c3:
3e:4a:0d:95:50:da:9c:61:9e:e3:92:1f:65:26:18:2b:7d:30:
07:16:f0:bb:0c:05:54:f4:28:df:b7:68:d5:e9:9d:c2:ec:f7:
69:a9:19:23:b6:30:28:3c:be:ae:61:f4:7a:23:32:da:b8:09:
85:68:43:98:e4:45:7f:1e:3d:fd:48:62:50:ee:8c:4a:4c:84:
b1:33:94:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:51:25 2025 by rpki-client