Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
File: BesSFXMXvsWP1B2S_xBbNhhkpvI.mft (raw, json)
Hash identifier: Bs2vHT4rLs1gA+L710nZozgSc9ZIOXirP2xOzP01dDQ=
Subject key identifier: D2:4C:7B:EE:58:83:4D:AC:4E:27:A8:3D:10:4C:EC:AD:B5:47:42:AB
Authority key identifier: 05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
Certificate issuer: /CN=05eb12157317bec58fd41d92ff105b361864a6f2
Certificate serial: 019A515079FF32B4A45B8D1669196B39AF92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
Manifest number: 09ED
Signing time: Wed 05 Nov 2025 00:00:19 +0000
Manifest this update: Wed 05 Nov 2025 00:00:19 +0000
Manifest next update: Thu 06 Nov 2025 00:00:19 +0000
Files and hashes: 1: BesSFXMXvsWP1B2S_xBbNhhkpvI.crl (hash: Y/yrO/y+QnJ7WUOfHEq6dEjv+INJrvJI8I0fvuyjzzk=)
2: GmOEGytdPBI0M6M4F6yAHlQDNk4.roa (hash: rCxXhyimVf47IInvL9Aht6Onq89mIZd51JHlO7lZEGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:79:ff:32:b4:a4:5b:8d:16:69:19:6b:39:af:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05eb12157317bec58fd41d92ff105b361864a6f2
Validity
Not Before: Nov 5 00:00:19 2025 GMT
Not After : Nov 6 00:00:19 2025 GMT
Subject: CN=d24c7bee58834dac4e27a83d104cecadb54742ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e6:9d:8a:a2:08:1a:dc:69:44:39:f9:91:b1:
ae:a0:60:ad:1d:3c:6c:f0:c6:28:14:33:30:19:26:
50:69:39:67:4f:41:49:dd:f5:dc:10:b1:bf:31:03:
59:ec:60:8d:ed:de:29:73:60:84:7e:7b:5a:af:85:
d6:59:98:35:62:37:e6:83:ce:09:e1:e4:5a:db:b5:
4c:92:27:c0:8e:5c:8d:30:20:fc:2f:05:02:b0:61:
47:ff:c4:fb:1e:5a:44:5a:03:d6:3d:d6:78:98:85:
57:a7:6a:07:17:a9:e2:19:3d:bb:79:a3:f1:73:35:
89:b5:c7:e1:88:12:22:a0:42:b0:2b:1a:31:75:c9:
97:51:36:80:16:4b:6a:e8:94:c2:8b:8a:83:8f:75:
09:68:fc:80:60:54:81:4f:da:07:53:93:48:41:c8:
3e:87:ce:90:70:6f:27:14:0a:ea:ee:b0:98:73:07:
e6:3f:13:f0:c0:c7:1d:f3:42:ed:b6:a7:74:2b:54:
2b:0b:e8:4a:97:2e:9e:e6:0c:27:ad:65:9f:2e:ec:
08:db:85:0f:d5:57:b2:0f:fc:b6:f1:54:63:0c:e2:
f6:3c:0f:c0:5f:b3:d4:3a:de:f7:a4:3e:f9:3c:11:
31:d0:d4:f9:ea:29:28:65:bc:23:8c:82:61:02:bf:
7d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4C:7B:EE:58:83:4D:AC:4E:27:A8:3D:10:4C:EC:AD:B5:47:42:AB
X509v3 Authority Key Identifier:
keyid:05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:dc:ff:1e:9d:ee:44:17:11:30:4e:83:06:2f:80:b6:18:63:
2d:38:db:2b:a0:41:93:50:f8:e7:e0:4e:db:49:6f:25:4a:e6:
5a:7b:01:ed:20:80:db:fe:48:1a:3b:e2:b6:cd:79:b6:da:a8:
15:d1:04:fb:c8:ba:f1:a2:5c:bf:9d:9b:89:ba:4d:1d:69:58:
9f:12:dd:ee:1c:0b:ee:27:4c:24:dd:3e:ac:c5:b6:3b:0b:a2:
c4:7a:33:61:a8:7c:a7:67:26:f6:37:06:b3:e2:b1:7a:05:7b:
fd:46:16:ce:b3:3d:6d:65:33:44:5e:f7:10:80:7b:7e:69:44:
68:23:7b:e7:22:6a:70:7f:6e:6e:2b:4a:7c:04:19:31:ab:99:
72:83:58:57:78:93:ba:1b:6f:6c:f0:58:23:c9:3d:35:70:cd:
1c:b2:5a:2d:ad:1c:5c:48:43:97:75:ca:bb:4e:d4:05:43:50:
34:af:c9:91:ff:fe:22:c7:23:0e:f7:c4:d3:e1:aa:13:d2:1f:
65:a2:21:93:2a:d3:46:93:21:69:90:85:15:da:99:7f:a9:d6:
9d:f7:f8:dc:c5:a1:f4:e8:db:a8:7d:7c:73:6e:83:90:69:43:
0d:eb:13:e6:b2:87:5b:9b:f6:c8:25:13:87:0a:e4:21:0d:cb:
4d:ba:50:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRUHn/MrSkW40WaRlrOa+SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZWIxMjE1NzMxN2JlYzU4ZmQ0MWQ5MmZmMTA1YjM2MTg2
NGE2ZjIwHhcNMjUxMTA1MDAwMDE5WhcNMjUxMTA2MDAwMDE5WjAzMTEwLwYDVQQD
EyhkMjRjN2JlZTU4ODM0ZGFjNGUyN2E4M2QxMDRjZWNhZGI1NDc0MmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+adiqIIGtxpRDn5kbGuoGCtHTxs
8MYoFDMwGSZQaTlnT0FJ3fXcELG/MQNZ7GCN7d4pc2CEfntar4XWWZg1Yjfmg84J
4eRa27VMkifAjlyNMCD8LwUCsGFH/8T7HlpEWgPWPdZ4mIVXp2oHF6niGT27eaPx
czWJtcfhiBIioEKwKxoxdcmXUTaAFktq6JTCi4qDj3UJaPyAYFSBT9oHU5NIQcg+
h86QcG8nFArq7rCYcwfmPxPwwMcd80Lttqd0K1QrC+hKly6e5gwnrWWfLuwI24UP
1VeyD/y28VRjDOL2PA/AX7PUOt73pD75PBEx0NT56ikoZbwjjIJhAr99aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJMe+5Yg02sTieoPRBM7K21R0KrMB8GA1UdIwQY
MBaAFAXrEhVzF77Fj9Qdkv8QWzYYZKbyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmVzU0ZYTVh2c1dQMUIyU194QmJOaGhrcHZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yMGM4NDItYjQ5NC00ZGI2LWFhNzUt
M2RkMzZhMjlmYTI4LzEvQmVzU0ZYTVh2c1dQMUIyU194QmJOaGhrcHZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8yMGM4NDItYjQ5NC00ZGI2LWFhNzUtM2RkMzZhMjlmYTI4
LzEvQmVzU0ZYTVh2c1dQMUIyU194QmJOaGhrcHZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAddz/Hp3u
RBcRME6DBi+AthhjLTjbK6BBk1D45+BO20lvJUrmWnsB7SCA2/5IGjvits15ttqo
FdEE+8i68aJcv52bibpNHWlYnxLd7hwL7idMJN0+rMW2OwuixHozYah8p2cm9jcG
s+KxegV7/UYWzrM9bWUzRF73EIB7fmlEaCN75yJqcH9ubitKfAQZMauZcoNYV3iT
uhtvbPBYI8k9NXDNHLJaLa0cXEhDl3XKu07UBUNQNK/Jkf/+IscjDvfE0+GqE9If
ZaIhkyrTRpMhaZCFFdqZf6nWnff43MWh9OjbqH18c26DkGlDDesT5rKHW5v2yCUT
hwrkIQ3LTbpQmA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:58:34 2025 by rpki-client