
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
File: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft (raw, json)
Hash identifier: sF0QWBfJPKXiw2Ho5JaGciD84Wpgwr642SdsVllHtLA=
Subject key identifier: 57:B0:39:73:F1:A4:C1:76:CE:79:C2:C2:46:A3:89:10:47:F8:6A:96
Authority key identifier: 04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
Certificate issuer: /CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Certificate serial: 019872CF6F4FF3A4C7BE81423C1B4FE1FD39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 02:00:53 +0000
Manifest this update: Mon 04 Aug 2025 02:00:53 +0000
Manifest next update: Tue 05 Aug 2025 02:00:53 +0000
Files and hashes: 1: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl (hash: ZzR3GSNmcP4jP+RqA7FdnEWMvbEOsUc1x4NQVdXY3dw=)
2: NmkuWisNNR7yCTNM4BUhyNRxVxo.roa (hash: qERY3AcVPARhb2r8P5F7KsbGo82n2f3qr7wO9B4TKno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:6f:4f:f3:a4:c7:be:81:42:3c:1b:4f:e1:fd:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Validity
Not Before: Aug 4 02:00:53 2025 GMT
Not After : Aug 5 02:00:53 2025 GMT
Subject: CN=57b03973f1a4c176ce79c2c246a3891047f86a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:02:eb:1d:b5:bd:8d:0f:dd:cb:e3:ea:dc:a8:
fd:50:42:77:60:ea:03:09:dc:18:64:22:77:e5:3b:
50:dd:51:39:a3:4a:33:76:ac:d0:3d:b2:52:c9:ba:
2e:eb:13:42:65:05:e8:7b:3d:d1:82:39:a6:22:aa:
46:93:e9:79:56:c4:21:4c:31:37:12:19:c6:70:96:
84:2d:35:68:33:a6:78:27:c5:85:08:a4:4d:93:28:
e6:64:48:da:7d:e0:df:fc:ad:3b:15:40:30:34:96:
f6:70:98:da:62:a2:11:83:5a:35:7a:43:8f:66:23:
4e:b0:d0:1e:3a:6c:82:10:23:4c:2c:95:17:86:95:
57:be:9f:f4:97:80:df:e0:d1:30:c1:63:2c:2b:eb:
5d:09:71:80:63:f8:5b:c7:aa:e1:17:05:9c:b8:ab:
38:e3:b1:80:75:ab:e9:50:97:c8:d0:f9:5d:b7:07:
2e:3e:c3:36:a4:05:b8:49:d8:49:06:38:4f:39:98:
3f:d0:3b:c1:3b:72:bf:5c:4d:98:55:33:a4:9d:73:
9e:9c:11:10:9c:e1:ae:78:70:f7:33:fd:0c:36:ea:
4e:5f:80:68:54:1b:cd:ac:d0:a1:92:b5:ee:51:ca:
68:e0:cd:94:5f:17:cb:6e:54:06:b5:c8:95:3e:9c:
b4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B0:39:73:F1:A4:C1:76:CE:79:C2:C2:46:A3:89:10:47:F8:6A:96
X509v3 Authority Key Identifier:
keyid:04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:bb:54:15:98:b6:a9:86:99:5a:4a:8f:2e:77:d9:2e:2e:02:
3d:ad:e5:3c:0b:3d:ea:c5:52:ca:a7:c9:08:19:28:7e:2e:ff:
63:a1:8b:7f:65:e3:3e:7a:6c:5d:ea:ec:4a:81:c6:08:c4:41:
3d:25:00:17:03:7d:8b:81:3e:b4:39:1f:24:71:b7:9e:54:65:
7a:a1:a5:c1:8f:cf:0b:aa:d8:dc:10:0c:bb:f1:f2:2e:53:6f:
2a:9f:7d:c3:9e:a5:83:81:75:2e:42:ae:c6:48:71:14:2e:12:
c4:d7:28:96:9a:e0:ef:26:74:5b:af:d4:76:f0:5e:cb:52:eb:
62:a5:e5:e9:90:f0:e9:0d:89:b2:10:8e:cc:da:aa:ca:96:f6:
3e:7f:81:4b:a0:50:f6:8f:70:05:9e:ad:50:f0:b3:52:7e:05:
4d:a4:f2:8b:bc:4d:57:14:8b:59:e5:96:b9:06:77:56:70:ac:
a2:e5:30:d6:e0:45:36:22:41:25:58:b3:d1:7b:eb:b2:a5:aa:
71:77:fc:1b:df:2b:89:56:17:61:5c:9f:ef:09:8c:eb:b0:34:
6d:91:36:29:b2:31:14:54:41:a3:ff:e4:4a:4c:d8:23:0a:6e:
96:aa:0c:6c:68:6a:8b:33:82:25:80:cc:2a:df:b6:a6:82:7d:
a6:41:2f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:41 2025 by rpki-client