Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
File: BeHQfebxKPRpxMOzAorfjU034tk.mft (raw, json)
Hash identifier: Vj60JP4S0U0zhw8fjlhxZKsPQPwdv4XIoLQn1C6ajXM=
Subject key identifier: C6:97:0F:07:B9:83:7F:B4:8D:24:53:3C:0C:8D:0A:C7:C7:E1:05:CF
Authority key identifier: 05:E1:D0:7D:E6:F1:28:F4:69:C4:C3:B3:02:8A:DF:8D:4D:37:E2:D9
Certificate issuer: /CN=05e1d07de6f128f469c4c3b3028adf8d4d37e2d9
Certificate serial: 019A4E8626D3B8F07829BEDB735048AB06BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 11:00:05 +0000
Manifest this update: Tue 04 Nov 2025 11:00:05 +0000
Manifest next update: Wed 05 Nov 2025 11:00:05 +0000
Files and hashes: 1: 5_4qOd1GTRdKd6DbyMT4VAzgn60.roa (hash: Q449y6NU5T0NgahXGNO0aRD91GR+m9cfLNErlQRiyf0=)
2: BeHQfebxKPRpxMOzAorfjU034tk.crl (hash: AwdNmTG41JWQjshFdXmF0Yl2DrtC1pASGjrF7EZUrzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:26:d3:b8:f0:78:29:be:db:73:50:48:ab:06:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05e1d07de6f128f469c4c3b3028adf8d4d37e2d9
Validity
Not Before: Nov 4 11:00:05 2025 GMT
Not After : Nov 5 11:00:05 2025 GMT
Subject: CN=c6970f07b9837fb48d24533c0c8d0ac7c7e105cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:df:f3:42:44:83:e3:c3:91:99:c3:cf:62:e8:
75:5d:9b:64:53:38:c7:66:89:87:ef:1a:e6:68:f4:
a4:12:64:0c:63:e5:45:f3:a5:e0:65:ff:af:de:37:
31:7a:dd:78:40:4d:b4:12:2f:7d:9a:3c:15:e3:6d:
25:15:5e:c2:bd:54:a5:02:bb:1f:4a:3d:f1:48:6a:
78:17:b2:6f:fa:26:de:25:8a:88:d5:73:41:79:dd:
dc:dc:d4:4a:14:bd:45:4d:07:4a:24:ff:b7:8d:9a:
88:d8:19:a8:1c:14:f0:ac:e3:71:e9:9a:b6:39:d2:
1c:57:be:c8:35:97:0a:3f:4c:85:ab:37:c7:14:63:
ff:74:c0:b0:76:f5:0e:d5:46:eb:59:17:85:16:55:
c1:82:88:ef:f3:b7:1c:9e:f3:60:ae:92:5a:e9:8c:
81:84:fc:b8:8e:01:a5:f3:73:27:72:9d:67:90:9c:
28:10:2f:7d:e4:fd:45:a4:a0:04:86:2f:5b:96:1b:
fa:cb:9b:1a:7a:8e:2a:a8:79:bd:a7:59:cd:ca:6e:
31:60:59:ca:4c:b2:d1:7a:d6:55:af:b5:0d:2d:e9:
e6:60:3b:ba:ce:a5:0f:48:5b:0e:ed:53:d1:d9:dd:
11:7f:60:6f:dc:3c:eb:bf:9f:59:85:17:7e:b4:ed:
11:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:97:0F:07:B9:83:7F:B4:8D:24:53:3C:0C:8D:0A:C7:C7:E1:05:CF
X509v3 Authority Key Identifier:
keyid:05:E1:D0:7D:E6:F1:28:F4:69:C4:C3:B3:02:8A:DF:8D:4D:37:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:bc:8f:c7:13:3c:8a:a1:f5:1e:8d:ba:ab:39:10:55:11:42:
b8:2d:7f:ff:e7:1e:f3:11:69:2c:39:fe:0f:88:3a:01:78:c3:
d9:1b:08:ed:9a:01:93:22:16:60:64:16:6c:7f:19:7f:58:e4:
79:e0:97:60:68:c0:6a:fe:ac:b7:da:71:cd:ce:96:98:27:fd:
e5:96:33:f8:74:00:c3:90:2c:f2:74:64:74:08:6b:1e:f7:c1:
01:8c:b0:52:c7:20:cf:3f:ff:87:c9:c4:55:a8:a6:f0:f8:70:
60:3e:de:b4:f2:d3:86:b7:a4:7d:3a:1a:1a:24:92:d4:72:95:
b8:b5:d5:e3:51:79:38:97:1f:d3:08:3e:4a:53:a7:1f:b1:06:
87:bd:5d:80:ce:51:d7:4b:e0:80:d3:d7:9f:e6:cf:05:47:04:
2e:37:2d:b4:ed:01:40:4f:28:d4:ef:69:b3:5f:b5:0b:b9:f9:
37:3e:10:f6:94:d3:5c:47:1f:1c:ac:e9:8f:83:ae:94:b9:72:
0c:a7:12:fc:2c:b1:7c:57:00:2f:70:11:02:cd:26:cd:95:5c:
2f:ea:cc:db:2d:5b:79:36:3f:be:ff:f5:de:95:11:6f:72:f2:
cd:80:72:aa:31:25:97:7b:01:cd:32:3f:ff:de:83:13:bf:07:
82:92:bf:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:51 2025 by rpki-client