Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
File: beKqsHfJ7vED-XmE8wnYkeWhmYM.mft (raw, json)
Hash identifier: O28xPsKXu0C6hjMucw1SCydjvxZ2Uch5zQ6DXbNlJdk=
Subject key identifier: 87:87:D6:B4:94:00:5D:8C:76:10:F9:A7:E5:B3:AE:1A:B5:25:49:E2
Authority key identifier: 6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
Certificate issuer: /CN=6de2aab077c9eef103f97984f309d891e5a19983
Certificate serial: 019687DB7AB27CCEEC4BD576FAE398C2ACA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
Manifest number: 151D
Signing time: Wed 30 Apr 2025 18:00:30 +0000
Manifest this update: Wed 30 Apr 2025 18:00:30 +0000
Manifest next update: Thu 01 May 2025 18:00:30 +0000
Files and hashes: 1: 48IOS32yvZQcDKOVIMZ6daf-9KA.roa (hash: HmF8WESoe3mmtI22Berk7+aTu/j0V86FjOKvEurztNM=)
2: beKqsHfJ7vED-XmE8wnYkeWhmYM.crl (hash: EmCP23Ap3+1NDxNl4Ozq91YEDDYPmZiDY+HVUGWMPi4=)
3: tmeZ0Ov1HvxadlJQTOHPYduqrcA.roa (hash: 5a1G608q0BN2ymFOZ4ty/8IB/CrBTEemrLvT6asz5iY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:db:7a:b2:7c:ce:ec:4b:d5:76:fa:e3:98:c2:ac:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6de2aab077c9eef103f97984f309d891e5a19983
Validity
Not Before: Apr 30 18:00:30 2025 GMT
Not After : May 1 18:00:30 2025 GMT
Subject: CN=8787d6b494005d8c7610f9a7e5b3ae1ab52549e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7b:58:e9:86:c3:eb:2b:c2:d5:45:07:30:f8:
57:22:08:18:39:52:6f:dc:79:eb:b6:34:f5:68:86:
c1:42:25:cb:eb:f2:65:3a:c0:bc:f9:50:d4:32:2a:
16:19:3a:05:cb:eb:f1:e8:38:96:3d:ac:be:10:a6:
15:80:9b:12:cf:95:db:0a:e7:4a:d8:54:e5:5a:4b:
c6:7d:d6:12:da:89:73:92:30:75:1b:21:ab:25:e1:
6a:52:0e:49:e8:48:c9:e4:c7:42:23:cb:d6:1c:4d:
1d:03:b1:31:22:ad:f2:b1:cc:7b:2d:10:78:b0:70:
49:72:99:bf:1c:94:0a:ba:f6:30:b5:5e:08:da:40:
e6:5f:37:26:aa:2f:fe:52:92:db:c6:7a:4b:12:62:
aa:e1:8f:b5:9d:78:b2:50:8d:69:0b:1f:91:cb:ab:
e5:9a:60:2c:d7:8f:1d:95:92:2c:35:c7:09:97:1d:
43:e7:19:83:ba:1c:5d:4b:3a:97:3a:07:69:2a:98:
a2:08:52:93:a5:80:8f:09:d9:b8:c1:56:46:91:03:
13:75:8d:ce:2a:a4:50:c6:98:b9:2e:b2:06:83:3f:
b8:e0:3a:0d:0d:e3:8f:11:2e:d0:6c:e4:ad:16:66:
1f:b8:ca:b1:24:38:df:86:bc:51:82:d5:d6:0f:33:
a8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:87:D6:B4:94:00:5D:8C:76:10:F9:A7:E5:B3:AE:1A:B5:25:49:E2
X509v3 Authority Key Identifier:
keyid:6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:20:0c:8f:45:1d:63:7c:ba:8f:28:a4:37:7e:41:c4:85:53:
74:d2:7b:0f:75:e8:7c:6f:4a:ce:3f:af:bb:8e:d8:7d:66:a3:
32:f8:40:2d:25:d9:0a:bb:dc:c0:4b:71:39:bc:87:10:54:b2:
2d:7e:9a:7c:3d:92:ad:84:17:13:23:ce:13:7f:d9:e2:fa:3f:
a8:33:38:f4:cb:83:51:e0:48:98:3b:5f:ee:47:fe:03:ce:ef:
d0:96:82:22:d8:3a:c8:ec:f7:c0:22:ed:33:64:f3:8d:27:24:
94:11:6b:2b:c5:10:0f:b8:7f:68:ff:f0:de:9d:05:a8:ad:08:
7c:58:16:86:a7:b5:70:08:4c:2c:fc:9d:ce:50:1c:c4:d7:9d:
e6:43:07:f5:d3:af:bb:9f:dd:49:d7:59:85:b1:23:d3:28:9b:
c8:99:9c:ef:ff:b3:76:bd:1a:ac:72:06:ce:e9:29:52:e4:26:
26:0e:48:4d:7d:c9:11:88:73:9b:77:10:ce:c4:7e:75:39:c2:
b2:9c:f9:ab:db:34:95:2c:e2:a1:0d:f9:0b:bd:0b:e1:7b:a3:
af:52:bf:5d:18:2f:8b:5d:6a:db:78:fc:4d:f2:e7:46:9e:5b:
fa:57:44:e2:9c:10:0f:ed:c3:2e:6b:ed:a7:eb:1f:08:1a:0e:
65:f0:5b:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaH23qyfM7sS9V2+uOYwqykMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZTJhYWIwNzdjOWVlZjEwM2Y5Nzk4NGYzMDlkODkxZTVh
MTk5ODMwHhcNMjUwNDMwMTgwMDMwWhcNMjUwNTAxMTgwMDMwWjAzMTEwLwYDVQQD
Eyg4Nzg3ZDZiNDk0MDA1ZDhjNzYxMGY5YTdlNWIzYWUxYWI1MjU0OWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHtY6YbD6yvC1UUHMPhXIggYOVJv
3HnrtjT1aIbBQiXL6/JlOsC8+VDUMioWGToFy+vx6DiWPay+EKYVgJsSz5XbCudK
2FTlWkvGfdYS2olzkjB1GyGrJeFqUg5J6EjJ5MdCI8vWHE0dA7ExIq3yscx7LRB4
sHBJcpm/HJQKuvYwtV4I2kDmXzcmqi/+UpLbxnpLEmKq4Y+1nXiyUI1pCx+Ry6vl
mmAs148dlZIsNccJlx1D5xmDuhxdSzqXOgdpKpiiCFKTpYCPCdm4wVZGkQMTdY3O
KqRQxpi5LrIGgz+44DoNDeOPES7QbOStFmYfuMqxJDjfhrxRgtXWDzOo1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIeH1rSUAF2MdhD5p+Wzrhq1JUniMB8GA1UdIwQY
MBaAFG3iqrB3ye7xA/l5hPMJ2JHloZmDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmVLcXNIZko3dkVELVhtRTh3bllrZVdobVlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9hNDAwNzAtYWExNy00MmZlLTg2ZGQt
YjlhZTU3Mzk0MTg5LzEvYmVLcXNIZko3dkVELVhtRTh3bllrZVdobVlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9hNDAwNzAtYWExNy00MmZlLTg2ZGQtYjlhZTU3Mzk0MTg5
LzEvYmVLcXNIZko3dkVELVhtRTh3bllrZVdobVlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbyAMj0Ud
Y3y6jyikN35BxIVTdNJ7D3XofG9Kzj+vu47YfWajMvhALSXZCrvcwEtxObyHEFSy
LX6afD2SrYQXEyPOE3/Z4vo/qDM49MuDUeBImDtf7kf+A87v0JaCItg6yOz3wCLt
M2TzjScklBFrK8UQD7h/aP/w3p0FqK0IfFgWhqe1cAhMLPydzlAcxNed5kMH9dOv
u5/dSddZhbEj0yibyJmc7/+zdr0arHIGzukpUuQmJg5ITX3JEYhzm3cQzsR+dTnC
spz5q9s0lSzioQ35C70L4Xujr1K/XRgvi11q23j8TfLnRp5b+ldE4pwQD+3DLmvt
p+sfCBoOZfBb/w==
-----END CERTIFICATE-----
Generated at Wed Apr 30 22:14:18 2025 by rpki-client