Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
File: BEiJahxKydgBvx1rIL3vWXTVtPY.mft (raw, json)
Hash identifier: SYaseUwVD0F7NB4zQwWtZgJ6DPt1yDrPKe8BYF1k3v4=
Subject key identifier: EB:6C:42:41:C9:9C:13:52:D9:63:A4:4C:F1:B4:3E:44:97:D7:B4:F4
Authority key identifier: 04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6
Certificate issuer: /CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6
Certificate serial: 0198917E9B84C1DB0CC2392ED6A843CE2C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
Manifest number: 05B6
Signing time: Sun 10 Aug 2025 01:00:50 +0000
Manifest this update: Sun 10 Aug 2025 01:00:50 +0000
Manifest next update: Mon 11 Aug 2025 01:00:50 +0000
Files and hashes: 1: BEiJahxKydgBvx1rIL3vWXTVtPY.crl (hash: 3vHdwpb0xh791xMzjdNj1sY5BER9U4WcC3EZeUW/tlI=)
2: QXhXOb69R-6LwMYFMKWZze76zPM.roa (hash: eIFuk3TcS1CKNj+kDqIT+aNwYSr4f3EMWJAijhvNXoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:7e:9b:84:c1:db:0c:c2:39:2e:d6:a8:43:ce:2c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6
Validity
Not Before: Aug 10 01:00:50 2025 GMT
Not After : Aug 11 01:00:50 2025 GMT
Subject: CN=eb6c4241c99c1352d963a44cf1b43e4497d7b4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:70:f6:3b:0a:cf:ca:e3:01:45:4d:ad:23:5e:
92:a2:e7:60:d2:1b:5f:46:68:eb:e8:23:18:81:58:
85:d2:28:17:97:67:58:88:5b:de:fd:24:b1:0b:4a:
59:9b:7d:bd:99:b1:e7:0f:66:d2:b4:39:7d:a8:68:
2d:c8:ee:f4:b2:9c:cc:94:c6:0d:16:a3:05:e3:90:
14:e1:99:29:30:cf:b1:67:b3:2b:48:e5:a2:71:4d:
d5:64:61:7e:8e:c6:43:51:b5:7b:e4:21:e5:d4:0b:
6e:d0:68:58:d4:3f:d0:89:de:fc:d3:85:71:39:59:
56:d1:16:53:f9:a9:79:d2:0c:b6:c6:c9:a3:85:a1:
5c:86:48:27:e9:72:9d:60:8a:7f:af:43:2e:90:81:
43:65:2a:71:d2:25:8d:21:c8:57:4d:7a:f4:eb:8c:
92:47:c1:5c:33:c5:a1:cb:ed:1c:34:e0:75:30:25:
c2:be:37:a2:0c:96:20:ce:e9:68:f1:eb:55:d6:c4:
38:be:78:12:c1:a8:a9:16:1e:c6:f9:ab:23:4c:c6:
6d:73:be:a0:c2:a8:5c:24:44:55:90:4c:dc:2c:60:
43:9c:05:b5:2c:65:05:82:fd:2d:53:aa:d4:a2:d3:
29:32:24:1f:3e:7f:05:28:9a:55:36:f7:a0:68:a5:
6a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6C:42:41:C9:9C:13:52:D9:63:A4:4C:F1:B4:3E:44:97:D7:B4:F4
X509v3 Authority Key Identifier:
keyid:04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:fe:d9:0b:2e:c0:e3:fc:88:ef:fc:b7:81:6b:32:4b:42:74:
42:16:58:2d:4e:27:fb:f5:f4:07:60:7d:9a:a3:92:c6:fd:21:
3c:78:be:14:c8:95:9a:72:63:83:cd:43:a5:49:95:06:2d:9b:
fb:10:cd:cf:a5:7d:0d:7e:7b:63:4c:43:3d:88:d1:50:c1:a1:
94:e1:ca:4c:ed:ed:42:c3:35:c0:9c:71:28:0a:e9:71:f6:0e:
c3:f6:ea:da:13:b1:6d:33:0c:4b:32:6c:bd:0d:15:44:21:95:
98:b4:62:9c:29:35:e7:2b:08:ff:88:5b:63:b8:b8:66:1a:21:
ec:bb:34:9b:19:af:e4:4b:68:cc:4e:5d:a6:7b:32:6b:01:20:
bb:d6:d4:df:5d:5d:49:81:9e:d1:40:d5:4e:2e:0c:68:ec:aa:
5c:59:3a:61:49:ea:a7:11:9d:72:00:31:5a:0d:26:ec:45:27:
d0:dc:a3:c2:0f:61:49:a0:e2:e8:e7:f6:28:a6:9e:33:19:2a:
a2:d8:14:0e:61:ab:25:eb:6a:62:52:e0:9e:9d:b5:ac:20:02:
b8:51:14:fe:09:bb:6d:8a:5e:c7:e2:98:2f:7f:1e:12:d0:93:
d4:82:f7:78:b3:2a:7f:5c:34:75:2c:6b:13:08:f2:c6:af:13:
a5:b5:d3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:21:08 2025 by rpki-client