Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
File: 14BeHP_BOS59F2j48FVKHH9jRK0.mft (raw, json)
Hash identifier: b2wnCRFyfKAhIozWIewEN0rF5rsRxhimbCZwg8Gd4Lg=
Subject key identifier: FB:AC:6A:7D:6D:84:88:17:0F:A1:39:AE:9A:53:11:C1:17:D7:E0:94
Authority key identifier: D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD
Certificate issuer: /CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad
Certificate serial: 019A533F21AE99FDA668274EFB59C1156ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
Manifest number: 1447
Signing time: Wed 05 Nov 2025 09:00:37 +0000
Manifest this update: Wed 05 Nov 2025 09:00:37 +0000
Manifest next update: Thu 06 Nov 2025 09:00:37 +0000
Files and hashes: 1: 14BeHP_BOS59F2j48FVKHH9jRK0.crl (hash: KMg2ONLU+AhPkjSDa0vfYV1m1GDBGp0SwcAIMgJMEys=)
2: xcIstN59HOzGE1G9ty62N5JYD0o.roa (hash: BZxFBF1fX1zEMIn2hYmGhW7/ZSCk8wjGWMR8N700UvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:21:ae:99:fd:a6:68:27:4e:fb:59:c1:15:6a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad
Validity
Not Before: Nov 5 09:00:37 2025 GMT
Not After : Nov 6 09:00:37 2025 GMT
Subject: CN=fbac6a7d6d8488170fa139ae9a5311c117d7e094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e3:1d:55:1e:ae:5a:bf:39:a0:ca:67:9f:d6:
25:dc:3b:b2:9b:84:87:da:53:5b:f7:2f:97:c5:25:
74:8e:66:6a:f6:d1:73:85:bf:69:84:23:e0:f1:95:
a8:4e:ad:c9:0e:05:3b:8b:48:b4:c6:ce:cd:2a:c0:
26:7f:77:e2:fc:45:3f:48:0a:d5:12:bf:77:7c:43:
03:f1:53:7a:38:f6:5b:99:ca:f3:ba:c1:16:0b:de:
3a:52:b3:8c:ee:47:d2:82:c4:53:09:fa:96:b3:ce:
5a:70:11:57:96:26:1a:36:2c:89:50:49:37:c1:28:
f5:1f:e4:86:0c:c6:d0:15:32:d6:bc:a8:28:45:7c:
6a:8b:76:3b:23:4f:16:50:e0:3a:94:a4:33:d6:e4:
62:4c:3d:94:a8:f8:ad:e1:9e:d0:43:7c:2d:5a:e7:
e9:05:1a:4f:66:82:d3:f8:c4:e4:27:cf:39:e3:fa:
43:42:ea:88:2b:24:27:ab:e2:71:f6:72:3a:57:c8:
5c:ba:23:83:a9:55:04:99:5f:73:e1:c7:d3:22:af:
8a:82:b3:5d:6b:86:88:34:1b:6d:26:b2:8c:b7:c9:
7b:25:5c:e6:84:09:7b:61:17:32:8d:5e:c1:32:e9:
69:55:c2:db:ee:aa:aa:ca:75:78:ce:f0:66:15:b1:
2f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AC:6A:7D:6D:84:88:17:0F:A1:39:AE:9A:53:11:C1:17:D7:E0:94
X509v3 Authority Key Identifier:
keyid:D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:5a:23:66:36:8d:6a:a9:5d:ad:92:82:35:5a:8e:a8:16:e4:
01:f7:ca:dd:29:e9:51:f9:fd:89:cb:75:69:fd:f3:57:78:4c:
d8:5c:ab:a7:42:f0:4c:0c:ca:1a:3b:70:fe:0f:a1:7d:f0:98:
dd:6f:40:c2:68:3d:d6:3b:77:7a:b0:51:5e:d4:67:bd:39:20:
17:46:f8:d4:f3:64:1b:47:a7:fc:27:aa:7c:1a:43:69:c4:a4:
62:96:87:ff:98:26:68:87:ae:d8:a5:fc:30:fb:2e:00:59:b2:
0d:eb:d4:c8:31:2f:90:a7:f9:a6:01:79:04:aa:6a:93:ad:85:
17:29:e1:40:7e:5b:82:e6:8f:71:07:6d:c8:7f:43:40:87:a8:
2f:92:34:54:f4:cc:f5:e1:11:62:66:3b:7b:30:56:bb:9f:19:
ba:11:3f:b0:c5:c4:8c:71:22:a3:54:32:e7:81:11:c1:1d:e1:
24:75:0d:4a:69:ea:a9:ef:f3:15:58:cb:cc:e2:e5:f4:b3:e9:
06:d0:ce:94:1d:9a:b7:6c:d8:ee:37:d5:78:30:5c:d1:54:60:
2f:76:e4:fe:0b:fa:89:9f:2b:f7:e5:6c:ae:ee:15:ce:f7:de:
db:e4:a7:50:de:3c:22:0c:9b:f4:d4:37:c3:cd:69:57:7a:58:
a0:49:ef:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:07:01 2025 by rpki-client