Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
File: beKqsHfJ7vED-XmE8wnYkeWhmYM.mft (raw, json)
Hash identifier: YAVJOLT1KlDwSbGprlSTRPFNpIuo8H8SDbMGO0eJiu0=
Subject key identifier: AB:A6:B3:FA:22:E9:13:E6:DD:0B:E4:40:46:62:E6:83:56:41:C8:67
Authority key identifier: 6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
Certificate issuer: /CN=6de2aab077c9eef103f97984f309d891e5a19983
Certificate serial: 01977D1E964C18416E71DBAC1D7B5C464699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
Manifest number: 159C
Signing time: Tue 17 Jun 2025 09:00:45 +0000
Manifest this update: Tue 17 Jun 2025 09:00:45 +0000
Manifest next update: Wed 18 Jun 2025 09:00:45 +0000
Files and hashes: 1: 48IOS32yvZQcDKOVIMZ6daf-9KA.roa (hash: HmF8WESoe3mmtI22Berk7+aTu/j0V86FjOKvEurztNM=)
2: beKqsHfJ7vED-XmE8wnYkeWhmYM.crl (hash: YEapss0aSVhHpxKFdyRreF6W0SdsMoLhIN9BcWP+1so=)
3: tmeZ0Ov1HvxadlJQTOHPYduqrcA.roa (hash: 5a1G608q0BN2ymFOZ4ty/8IB/CrBTEemrLvT6asz5iY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:1e:96:4c:18:41:6e:71:db:ac:1d:7b:5c:46:46:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6de2aab077c9eef103f97984f309d891e5a19983
Validity
Not Before: Jun 17 09:00:45 2025 GMT
Not After : Jun 18 09:00:45 2025 GMT
Subject: CN=aba6b3fa22e913e6dd0be4404662e6835641c867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:da:f9:08:fe:18:38:1e:b6:dd:3d:02:8a:2a:
95:6e:56:67:6e:66:d8:72:da:ae:46:77:c7:cc:78:
e4:05:35:10:9d:e5:c1:a7:ca:69:19:1a:58:a6:fb:
70:0b:e2:79:10:c4:05:54:14:af:60:8e:59:82:b6:
4b:99:35:59:6a:7f:3f:ee:96:e6:8d:ef:ec:d7:2a:
36:fe:b8:dd:73:7a:5b:4a:62:ec:56:31:18:48:49:
aa:e2:ed:46:a6:13:e2:66:5f:a3:ab:1c:37:60:21:
c2:e5:e3:29:28:d9:74:a7:cd:d5:20:98:59:8b:8a:
70:b3:06:7c:7d:44:ba:91:59:7b:ac:f9:92:bc:a8:
01:0f:87:09:2e:60:13:b9:0e:0f:c4:7f:1d:f7:b3:
c8:fe:cf:f4:d3:4a:b8:99:1a:f3:19:32:e0:af:f0:
f1:c8:e7:c9:69:c0:12:b5:bc:df:e2:62:b5:0e:51:
71:ec:ca:9d:16:12:51:7b:cc:96:47:a6:e9:be:fd:
cb:85:aa:8b:ea:5a:fc:6f:cf:2b:4a:b8:05:44:e7:
3f:20:34:c8:ff:4a:2d:ca:7b:27:00:11:2c:a4:76:
c3:a1:fb:9c:14:3c:e0:2f:61:aa:e5:24:30:99:43:
e2:7a:de:7f:9c:cf:34:e2:38:03:35:8a:11:1d:1e:
a5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A6:B3:FA:22:E9:13:E6:DD:0B:E4:40:46:62:E6:83:56:41:C8:67
X509v3 Authority Key Identifier:
keyid:6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:07:8c:f5:e9:99:35:06:63:50:67:7b:1a:a6:a4:74:55:89:
6c:f1:e0:ea:5d:40:fc:8e:cd:49:51:61:b7:f2:80:4d:04:a4:
0a:74:22:51:bd:52:80:a9:e2:a4:c8:80:d8:7e:3f:81:e5:06:
7e:1d:29:40:f2:69:78:93:06:64:55:48:60:4a:c4:20:21:52:
5f:8f:6f:38:c4:5f:33:5b:96:fe:38:e8:2d:d5:52:4a:16:6a:
64:6e:f8:5e:56:e3:a7:49:f0:ac:fb:a2:57:61:24:84:a0:d6:
df:f4:82:8b:90:95:30:8e:cb:c3:b7:c5:19:bc:e5:db:36:f7:
ab:d5:a3:e9:a5:26:d2:00:2f:23:5d:c2:18:79:b1:67:9f:9d:
dd:ac:ff:85:a9:f3:4b:df:28:c6:92:2f:a6:41:35:29:6b:b5:
90:06:90:32:41:76:10:68:6f:9b:12:ba:fe:85:e9:fc:d7:58:
a9:a1:a8:c1:75:32:c0:2b:b1:60:56:35:2e:ba:17:01:80:a3:
08:93:7b:f3:87:9a:c8:c6:14:0f:c0:16:87:d6:ce:0d:8e:da:
09:33:b5:8b:56:71:4a:b4:43:61:38:ef:1c:de:c0:42:32:ce:
62:ac:0e:1a:be:8d:fe:95:53:eb:9c:85:a4:55:9c:9d:64:80:
23:aa:20:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:53:31 2025 by rpki-client