Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
File: BesSFXMXvsWP1B2S_xBbNhhkpvI.mft (raw, json)
Hash identifier: z6VMtYC18f8B9NRq21/5Fql5+1N1W1j5AvjKJ03dWLI=
Subject key identifier: 42:69:C6:C3:3E:49:45:51:DB:50:32:1E:E9:FE:9B:F3:BD:38:09:BA
Authority key identifier: 05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
Certificate issuer: /CN=05eb12157317bec58fd41d92ff105b361864a6f2
Certificate serial: 01987FE704072E16ECE51EE47CDEEDB232D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
Manifest number: 08FC
Signing time: Wed 06 Aug 2025 15:01:42 +0000
Manifest this update: Wed 06 Aug 2025 15:01:42 +0000
Manifest next update: Thu 07 Aug 2025 15:01:42 +0000
Files and hashes: 1: BesSFXMXvsWP1B2S_xBbNhhkpvI.crl (hash: Gs3V1bBFOpt75Tws26UVot5V17m15m9QonJAixfhx2A=)
2: GmOEGytdPBI0M6M4F6yAHlQDNk4.roa (hash: rCxXhyimVf47IInvL9Aht6Onq89mIZd51JHlO7lZEGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 15:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:e7:04:07:2e:16:ec:e5:1e:e4:7c:de:ed:b2:32:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05eb12157317bec58fd41d92ff105b361864a6f2
Validity
Not Before: Aug 6 15:01:42 2025 GMT
Not After : Aug 7 15:01:42 2025 GMT
Subject: CN=4269c6c33e494551db50321ee9fe9bf3bd3809ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6a:e3:1c:42:de:47:16:c1:56:47:1c:1d:f1:
a0:65:ec:13:e3:23:dd:53:ac:00:bc:8c:8e:db:93:
73:3e:82:f7:f2:11:97:79:bd:f7:7b:f8:d5:d2:24:
ae:9d:87:d5:05:06:67:7d:be:6f:1a:a6:91:f1:9c:
65:79:61:b5:70:b4:70:1a:dd:a6:46:01:6e:e5:52:
6c:89:21:3b:5e:f6:2a:8a:b6:b4:11:d2:c4:33:39:
d0:de:d1:c7:52:6f:2c:54:3c:8a:7e:1e:c9:94:81:
b0:d8:2a:5e:52:81:b1:8f:7b:8c:bc:01:ca:0e:eb:
12:c6:46:3f:4e:6b:48:8b:5f:6a:0f:50:9f:1e:8a:
e9:62:e6:88:c1:ad:63:d4:e8:54:35:01:c3:73:8e:
b5:60:9c:f1:ec:69:7f:bf:b7:03:8d:35:30:e6:94:
1a:5a:9f:23:9e:5d:b2:95:b4:8c:cd:08:22:19:ac:
c1:7f:f8:5a:2f:87:1a:e7:b2:18:dc:ef:fe:d7:97:
bb:d4:ac:b5:ca:9c:25:7b:46:6c:f3:f1:c8:64:0b:
ad:a9:4d:86:dc:11:40:96:6d:93:f0:50:11:e1:5b:
b8:8d:5a:62:bf:c9:a6:a2:93:cb:38:8b:f1:db:c7:
2a:7b:f1:04:01:dd:06:8e:e3:fd:a6:91:3e:f4:35:
58:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:69:C6:C3:3E:49:45:51:DB:50:32:1E:E9:FE:9B:F3:BD:38:09:BA
X509v3 Authority Key Identifier:
keyid:05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:18:d2:75:40:ca:f5:6f:26:f9:8c:27:9d:d7:5e:ab:ae:6f:
d5:ae:e9:b1:b7:04:fc:05:fd:8b:f8:d9:0d:20:5d:09:a7:5d:
2d:11:cc:13:34:10:67:a5:d0:1b:e3:43:a8:34:d1:b8:11:36:
6a:69:0a:62:6b:24:45:5a:59:a6:9e:76:76:02:40:97:93:68:
0c:65:47:7c:e5:c3:4c:a1:38:af:a1:0c:58:a6:02:d1:a5:b5:
67:c5:fe:b5:ed:8c:7c:a2:c4:a9:08:09:3f:56:d9:1e:ad:da:
bf:5d:5a:2d:e8:73:ec:bf:5f:d6:3a:3b:d8:09:16:52:7e:38:
80:01:a8:b5:cd:45:9d:5c:42:74:0d:7f:a2:ad:5a:bb:a9:3b:
f8:93:ce:ba:2f:8c:27:69:e9:93:e4:fd:4a:43:1a:ce:2e:0b:
9a:de:f9:54:a3:59:1f:f2:ae:ed:bd:5f:71:44:40:69:b3:a1:
1a:82:c5:48:24:98:91:53:b3:ec:71:c1:86:ab:86:a4:68:4b:
6c:96:34:e0:9a:37:4e:80:a2:62:d4:39:74:07:20:6d:87:9f:
29:ad:76:07:53:d7:1b:45:f9:d3:d9:e6:28:d4:4a:ed:56:cf:
ee:e7:6d:ed:4d:fd:3b:f1:58:d6:94:cd:78:2e:6d:57:0a:68:
7e:ca:cd:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:43:57 2025 by rpki-client