Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
File: BEw2vtOpgR94Jg5_X0_S_V54jgM.mft (raw, json)
Hash identifier: +lTF01OdtAeEy8F5RTPvBwXoM36pYoRTtg37X2QOV4o=
Subject key identifier: C1:F6:66:65:78:A3:01:83:6C:E5:F2:26:D1:33:BC:DA:87:40:01:8D
Authority key identifier: 04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
Certificate issuer: /CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Certificate serial: 019A4F62BCE679E13C29F664AE247BC68081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
Manifest number: 0DA5
Signing time: Tue 04 Nov 2025 15:01:02 +0000
Manifest this update: Tue 04 Nov 2025 15:01:02 +0000
Manifest next update: Wed 05 Nov 2025 15:01:02 +0000
Files and hashes: 1: AqwTFt-qyr9ctfZVh_Lc-HmCLI4.roa (hash: 6o18WCqQ1vQmdpr+KgNhHjoy4zxFnk5Txpn2BtXndjc=)
2: BEw2vtOpgR94Jg5_X0_S_V54jgM.crl (hash: zVR6SObaHOJVY0xGvVsD9ozOlXHa5v/XZfzq5T+KAc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:bc:e6:79:e1:3c:29:f6:64:ae:24:7b:c6:80:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Validity
Not Before: Nov 4 15:01:02 2025 GMT
Not After : Nov 5 15:01:02 2025 GMT
Subject: CN=c1f6666578a301836ce5f226d133bcda8740018d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fc:f6:72:c2:7d:f5:37:68:e8:65:9b:7b:20:
4f:3e:81:cb:ca:c6:02:d9:dd:01:66:23:ea:85:7e:
09:98:36:4c:cc:02:65:cd:75:3a:90:03:17:d4:84:
10:be:58:34:13:a9:93:52:a5:e7:bb:95:b1:fa:61:
02:0e:62:ba:8f:22:bf:b1:94:21:77:b0:59:89:63:
9f:6d:b0:3d:27:dd:39:25:a8:c7:3e:27:47:d9:ef:
e0:2c:7b:e4:8a:d1:fb:01:66:94:2a:e3:6b:7a:8f:
c8:33:a7:04:d5:b1:1a:ec:74:bb:84:12:b1:20:e4:
ee:f3:f0:8f:d0:9f:1e:0d:2d:0e:96:44:16:54:98:
cc:d8:6c:cb:83:b0:b3:d9:f2:2f:d5:b1:09:41:7a:
32:23:84:a7:46:6a:06:03:97:d9:c4:b5:c3:ac:e8:
3a:df:96:db:d2:58:e7:20:a9:1a:d9:37:80:81:4d:
95:45:5f:4a:9b:4c:fa:d0:61:72:39:c8:3c:12:b0:
05:3e:31:c7:4a:9e:96:3c:8d:7b:68:bb:72:e5:0c:
0c:cf:b8:e9:f3:80:18:60:52:0a:fa:62:fd:2a:4d:
3d:c7:cc:d4:5e:a2:31:e8:ce:31:b2:50:6b:ef:a7:
60:b5:bd:d1:51:e2:17:dc:01:5d:17:23:b0:dc:50:
c8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F6:66:65:78:A3:01:83:6C:E5:F2:26:D1:33:BC:DA:87:40:01:8D
X509v3 Authority Key Identifier:
keyid:04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:96:e9:1a:22:62:6c:3b:d0:3a:74:29:6e:2f:48:7d:f2:6b:
17:d9:6f:03:00:1e:c7:b5:8d:62:8d:a6:06:36:93:b4:77:9d:
90:0a:bf:09:e6:5b:11:7d:1e:4e:c3:20:37:d3:be:83:05:44:
80:24:c0:68:7a:15:bb:1b:14:2c:21:67:3f:c5:d5:f0:ef:e5:
f5:24:21:01:d7:85:03:66:6b:a3:1c:ea:3d:00:10:88:4d:1c:
a0:4e:2d:de:36:d0:04:03:f4:ca:19:37:16:1c:81:6c:f4:14:
e9:51:d3:e3:72:c2:82:ba:ba:fc:d6:e5:f3:9d:e4:08:7d:b6:
63:f6:a0:c3:32:83:80:b4:4a:e7:1a:29:f6:03:ff:3d:37:49:
d7:7e:63:c7:44:8e:4c:b2:31:94:19:86:a8:2e:9e:22:12:56:
58:c8:b8:32:06:6b:75:cb:2c:bd:a4:97:e2:58:45:5a:e7:c9:
4f:0d:88:70:50:6a:3a:c7:0a:f1:f6:c1:65:70:88:b4:2d:eb:
fc:1b:5f:fb:1d:97:05:ba:0c:b4:b3:90:34:8c:74:92:c0:15:
12:34:20:d8:d5:a9:da:e1:69:46:ea:7a:c1:ea:2d:1e:d6:77:
66:a3:ab:3e:34:b4:66:54:f8:8f:14:db:32:f3:d7:e8:2e:03:
99:66:ca:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:43:00 2025 by rpki-client