Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
File: beKqsHfJ7vED-XmE8wnYkeWhmYM.mft (raw, json)
Hash identifier: 8uokbWMFWCUq2WVa5tUvsezsXbSFIT3jIwFqjnz0Zlc=
Subject key identifier: A3:06:0A:F9:45:65:57:87:88:E6:79:9A:8B:36:D8:A1:D4:94:6A:E4
Authority key identifier: 6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
Certificate issuer: /CN=6de2aab077c9eef103f97984f309d891e5a19983
Certificate serial: 0198898DF3C38997631E11E6A7248C2A6E21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
Manifest number: 1627
Signing time: Fri 08 Aug 2025 12:00:38 +0000
Manifest this update: Fri 08 Aug 2025 12:00:38 +0000
Manifest next update: Sat 09 Aug 2025 12:00:38 +0000
Files and hashes: 1: 48IOS32yvZQcDKOVIMZ6daf-9KA.roa (hash: HmF8WESoe3mmtI22Berk7+aTu/j0V86FjOKvEurztNM=)
2: beKqsHfJ7vED-XmE8wnYkeWhmYM.crl (hash: FfErZa3AQx99RXNH2q24AuFhY8xkqusV/mG8T03joVg=)
3: tmeZ0Ov1HvxadlJQTOHPYduqrcA.roa (hash: 5a1G608q0BN2ymFOZ4ty/8IB/CrBTEemrLvT6asz5iY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:8d:f3:c3:89:97:63:1e:11:e6:a7:24:8c:2a:6e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6de2aab077c9eef103f97984f309d891e5a19983
Validity
Not Before: Aug 8 12:00:38 2025 GMT
Not After : Aug 9 12:00:38 2025 GMT
Subject: CN=a3060af94565578788e6799a8b36d8a1d4946ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:52:53:ac:e8:74:82:8b:cb:0c:bc:13:7d:dc:
b0:b0:60:82:50:0f:4f:7f:91:01:ec:5b:03:b0:d9:
47:d0:68:30:63:7f:00:66:8d:72:bd:bb:b4:a2:8a:
0c:dd:4c:94:e6:5c:11:24:0f:4a:d1:c4:cf:bb:f0:
39:aa:bb:f6:9b:cb:25:cb:c3:f5:a5:d3:f3:5a:25:
43:c1:4d:1d:fc:0e:09:c5:35:98:6b:38:5c:9e:90:
d0:f4:5d:8a:29:9f:fa:c1:e0:7a:a4:1c:09:09:f6:
71:b2:ce:ed:76:46:51:0f:8c:85:0d:08:bc:04:88:
91:75:de:34:d4:c3:b5:8b:28:12:d9:57:56:e6:98:
0d:2b:a5:8e:7c:3f:03:a1:15:b7:d7:b1:a3:b4:14:
cf:db:66:8d:2a:5f:ba:e7:ad:0e:11:37:40:e8:86:
68:61:7d:0c:b3:d5:6c:34:6d:32:5c:f9:04:c9:c7:
e6:ed:fe:2f:1f:6a:2e:14:9c:24:96:bd:ae:2c:0a:
45:45:61:19:58:5e:14:bd:1e:9c:df:5c:a2:14:bd:
74:12:b3:ac:be:25:67:08:cc:5b:28:40:b8:f0:80:
8a:91:b5:51:55:ea:96:aa:fa:cc:08:03:b6:df:04:
9c:73:55:a2:7f:ca:8d:08:3c:82:ff:ea:d7:eb:72:
54:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:06:0A:F9:45:65:57:87:88:E6:79:9A:8B:36:D8:A1:D4:94:6A:E4
X509v3 Authority Key Identifier:
keyid:6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:45:f0:9a:f6:76:8a:4b:09:62:a1:c2:02:33:ba:88:3d:c6:
8f:0c:5f:f4:8d:bd:78:25:09:71:3a:c8:af:59:58:4d:f4:22:
e0:ac:89:99:39:12:d8:1f:49:9b:9e:ac:3e:fc:07:1b:42:67:
96:11:d3:37:51:01:48:99:f5:52:4c:31:ad:0c:f5:7c:ad:83:
aa:83:91:2c:74:35:91:55:ca:c5:2c:fa:38:0b:16:98:14:4a:
de:19:c1:ed:bc:3b:d5:ee:f7:70:d7:be:89:58:6e:14:50:92:
04:89:e0:d5:be:e0:08:b3:21:ff:4f:e4:0e:14:b1:96:bc:e4:
b2:e5:4b:1d:c9:e4:4a:b6:b4:e3:af:bc:3b:ef:43:cb:d7:de:
d8:26:76:16:6a:52:10:2a:d2:68:21:06:f9:b4:c0:17:76:16:
0d:3b:e5:53:b9:b4:d6:88:13:35:f3:86:d8:31:09:4c:da:0c:
6f:24:33:f7:ed:1b:33:9d:70:1f:46:84:02:a8:d9:9b:29:9e:
28:a0:a4:f8:4f:76:dc:ac:92:2e:4e:52:25:e2:09:5d:34:7d:
69:47:4e:6f:06:ef:18:cf:e5:91:4c:72:2a:5f:b4:05:9e:32:
34:d2:e1:bc:f0:b7:16:3d:9e:c0:f7:1a:a4:08:86:67:7b:cc:
1d:26:97:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:32:54 2025 by rpki-client