Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
File: BEw2vtOpgR94Jg5_X0_S_V54jgM.mft (raw, json)
Hash identifier: Co/d/3IxP/s9fnzuW+3Y8TXDO4E5/3oh+/o0Q9OiqfQ=
Subject key identifier: 73:99:55:3C:55:8A:F5:24:3D:CD:4C:49:7A:E7:7A:4B:D7:EA:27:D2
Authority key identifier: 04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
Certificate issuer: /CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Certificate serial: 01987DF78823A5CAD1BA70071BA497CC60D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
Manifest number: 0CB4
Signing time: Wed 06 Aug 2025 06:00:30 +0000
Manifest this update: Wed 06 Aug 2025 06:00:30 +0000
Manifest next update: Thu 07 Aug 2025 06:00:30 +0000
Files and hashes: 1: AqwTFt-qyr9ctfZVh_Lc-HmCLI4.roa (hash: 6o18WCqQ1vQmdpr+KgNhHjoy4zxFnk5Txpn2BtXndjc=)
2: BEw2vtOpgR94Jg5_X0_S_V54jgM.crl (hash: c+AbZkoWm9tiP+0O3z5SJXzSFxwtLz3ndjHEN79gU8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f7:88:23:a5:ca:d1:ba:70:07:1b:a4:97:cc:60:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Validity
Not Before: Aug 6 06:00:30 2025 GMT
Not After : Aug 7 06:00:30 2025 GMT
Subject: CN=7399553c558af5243dcd4c497ae77a4bd7ea27d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ff:fd:f9:4e:59:60:88:f4:80:be:82:9c:af:
be:58:7e:9b:54:99:05:e0:cd:1a:89:9d:d5:53:7d:
4b:c6:20:9a:f3:60:7b:3c:42:de:a8:3b:c8:84:99:
92:a1:0c:13:ff:69:7b:5a:f6:4f:ba:78:65:37:54:
6b:60:62:f2:34:d5:be:24:80:fb:51:a0:a8:81:9e:
16:e6:ad:51:45:07:69:2b:9e:5f:f7:79:4d:6b:5b:
68:f0:52:7a:5f:9e:ff:16:ba:33:a8:59:43:85:58:
5a:df:85:44:2b:41:c8:ad:2d:72:23:9f:0e:c9:8a:
a1:a0:0e:0a:62:01:ef:1e:44:04:19:20:08:a2:05:
6e:b9:f6:6b:81:e3:ab:b4:28:a1:76:3c:d1:3d:1e:
ed:00:4a:e9:a9:2c:80:bf:d1:d7:e8:70:bc:8e:65:
04:2a:58:cc:30:ab:b9:6a:96:e0:0b:75:57:f4:69:
95:dc:b4:43:69:9c:23:fd:73:71:06:17:c8:54:02:
04:3f:5e:56:92:cb:57:c5:98:cd:a3:30:82:8a:76:
0c:6b:b5:30:13:17:a2:2c:6c:f3:2b:b7:c1:92:4d:
41:04:fb:83:df:6b:38:77:bb:d8:8b:cb:ed:4b:00:
c7:45:f5:0f:85:7f:b8:12:59:e4:ca:07:0d:47:ae:
0f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:99:55:3C:55:8A:F5:24:3D:CD:4C:49:7A:E7:7A:4B:D7:EA:27:D2
X509v3 Authority Key Identifier:
keyid:04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:83:ef:49:c8:d3:7b:9e:18:a3:27:e0:92:bc:b6:a1:c5:8c:
9a:f9:36:2a:bb:46:a1:3a:f7:fb:ec:39:66:93:5c:c3:84:da:
24:41:4e:e3:4f:6f:0e:94:55:b7:b8:56:76:f6:ab:b3:92:db:
87:05:63:07:78:41:24:9d:c0:88:6f:fd:d0:4c:04:c0:98:ef:
a8:87:24:47:72:97:a6:53:e9:15:98:5d:18:f8:b0:9c:3b:05:
72:74:95:59:07:90:41:bc:1f:05:46:02:2b:1a:5b:47:6d:9e:
55:aa:b0:4b:7e:8c:99:01:c3:58:9e:8e:7a:e8:44:ef:3d:4a:
21:8b:46:e3:e5:ab:17:27:52:5f:64:e4:18:88:99:61:1c:d6:
d4:69:e7:b2:12:fa:88:5a:62:4c:c3:de:ad:cf:6f:f3:d8:a0:
e3:57:72:0f:93:91:0f:9c:26:75:9b:75:c4:cd:6b:10:a5:04:
ba:19:bc:0b:72:5c:7f:85:c1:5c:eb:f2:60:91:d8:23:57:7b:
96:f0:d4:f2:d0:9b:1e:dd:b6:3f:b8:2d:4c:9b:69:7e:d2:e0:
ae:70:7d:0f:c4:62:b6:d9:03:71:68:70:21:62:61:25:83:47:
e1:ed:26:31:71:46:ee:f2:f5:d1:ea:1a:54:2f:b6:12:1e:d8:
91:5e:79:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:54:54 2025 by rpki-client