Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
File: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft (raw, json)
Hash identifier: wGbIjVAiZW73Df1HXNXW/z3Eb1zKOLZDrmBBFaalSe0=
Subject key identifier: 5A:AF:51:FB:C6:8F:3D:62:76:C3:F6:E4:62:DC:FB:62:21:56:43:5B
Authority key identifier: 04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
Certificate issuer: /CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Certificate serial: 019A4FCFFDC7DE5A4E1541808EA2BB5F2074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 17:00:22 +0000
Manifest this update: Tue 04 Nov 2025 17:00:22 +0000
Manifest next update: Wed 05 Nov 2025 17:00:22 +0000
Files and hashes: 1: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl (hash: 16P8q74XNksvKuSvl7iUAltB2GChXhHm7KdznPd+reE=)
2: NmkuWisNNR7yCTNM4BUhyNRxVxo.roa (hash: qERY3AcVPARhb2r8P5F7KsbGo82n2f3qr7wO9B4TKno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:fd:c7:de:5a:4e:15:41:80:8e:a2:bb:5f:20:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Validity
Not Before: Nov 4 17:00:22 2025 GMT
Not After : Nov 5 17:00:22 2025 GMT
Subject: CN=5aaf51fbc68f3d6276c3f6e462dcfb622156435b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:53:43:9a:ab:ca:d2:34:eb:7b:bb:f8:fb:9b:
3a:d6:ce:ff:07:c3:2a:49:71:23:90:9c:e5:d9:8f:
9c:6f:8c:ef:e3:b8:fb:d7:74:fa:20:59:31:71:f7:
43:68:e8:92:4d:85:0d:4b:2f:6e:56:e2:52:f6:72:
91:e2:ae:57:d7:45:ec:2e:21:b7:68:01:30:b3:4d:
f3:47:43:af:bd:aa:af:e4:47:c8:c4:74:9c:0a:21:
a4:25:97:61:ea:15:3e:b6:4e:3d:56:69:19:fe:21:
2a:80:84:18:0a:d4:f7:6b:35:76:2e:24:c0:2e:0b:
f1:2e:8c:e0:bf:96:96:00:07:8e:b4:1f:08:93:e0:
be:2d:71:04:fd:06:62:00:5f:ea:2d:85:42:72:39:
7d:25:c3:3e:40:ec:3f:6b:94:ae:50:cb:4d:7e:34:
b0:cd:9f:41:98:a0:89:7b:5d:d7:a2:8c:e3:e7:88:
d9:93:72:b4:71:14:68:79:17:0e:8c:47:55:b9:0b:
44:58:bd:fa:10:b0:07:a3:07:ca:19:12:bd:b9:95:
7a:3f:e0:c8:92:76:d1:24:4b:58:9a:2f:1d:3b:ce:
55:c8:61:f2:3d:c2:2f:35:c4:48:7b:3e:a1:b3:7e:
ef:14:42:ef:7a:6a:6e:cc:ff:b7:a0:33:17:9e:8a:
34:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AF:51:FB:C6:8F:3D:62:76:C3:F6:E4:62:DC:FB:62:21:56:43:5B
X509v3 Authority Key Identifier:
keyid:04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:d9:a4:9d:70:04:64:a0:44:d0:ce:85:80:f7:7f:6c:62:0b:
76:06:b8:41:5e:14:8a:1e:c1:ae:fc:80:e9:5c:c9:74:10:6a:
09:e6:1e:13:f5:04:42:f0:e7:de:ff:11:39:f1:68:d0:37:8d:
b9:2a:e5:2d:44:7f:56:9f:b9:33:68:e8:94:63:39:ce:d7:bf:
6c:22:f2:d2:61:97:4e:ea:38:8d:0e:81:b2:cf:10:8a:bc:16:
5c:05:54:da:1f:ba:0b:7d:18:e2:d3:b3:3b:f9:c2:75:a5:43:
3a:de:77:d4:30:eb:62:ad:4d:91:6b:0b:34:a3:be:3b:1e:45:
a4:ee:1e:8b:a9:86:b5:0b:cb:93:22:29:e2:25:83:83:f5:76:
16:61:e7:f7:f7:0d:3e:ee:0b:19:2e:1f:ee:6c:81:84:5a:44:
cb:89:5b:dc:e1:f3:57:e4:a3:3a:ff:22:92:fc:e2:0d:5c:05:
d6:3c:96:69:40:39:26:03:32:12:1d:fc:54:40:44:c4:62:eb:
8d:a9:31:13:2a:58:1a:7b:fa:34:8d:12:ab:cd:a0:bc:ee:e0:
2c:65:1d:4d:d9:51:dd:3d:d8:db:ae:07:f3:ac:ec:57:d6:f2:
46:2a:e5:0a:7b:d4:8a:f6:00:c1:2e:d7:05:3a:ea:4c:b7:ca:
25:6e:09:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:54:51 2025 by rpki-client