Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
File: BE1l50JUsl_gDrjqBrtY--aKwZs.mft (raw, json)
Hash identifier: aW8Mz9wSUutQ1YwSarsWMJTzNgP5PZGcEcTyaD5fXqU=
Subject key identifier: 1D:8E:67:53:2D:C3:70:67:D6:49:53:06:A3:20:48:F6:DE:DB:A4:80
Authority key identifier: 04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
Certificate issuer: /CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Certificate serial: 019853E88F8732B49097CF4FE9C5B86F834A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
Manifest number: 0C07
Signing time: Tue 29 Jul 2025 02:00:06 +0000
Manifest this update: Tue 29 Jul 2025 02:00:06 +0000
Manifest next update: Wed 30 Jul 2025 02:00:06 +0000
Files and hashes: 1: BE1l50JUsl_gDrjqBrtY--aKwZs.crl (hash: gPnjQ6r+GQcdpNJPweSK/iU7AXyoL5ZZm2y31qKex9w=)
2: rthTWvBWTldvCBC_jsm-IEkTBFQ.roa (hash: GkYmfEttYtLOHlLhDgqjd5V7UynvO3JpXV9H0/Hyyb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e8:8f:87:32:b4:90:97:cf:4f:e9:c5:b8:6f:83:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Validity
Not Before: Jul 29 02:00:06 2025 GMT
Not After : Jul 30 02:00:06 2025 GMT
Subject: CN=1d8e67532dc37067d6495306a32048f6dedba480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:bf:4f:e1:a3:db:d8:0b:6e:6f:3c:00:38:d9:
34:f2:5e:9d:10:09:81:66:32:2b:ed:0e:60:e0:ac:
fc:ba:18:0e:1b:54:c8:c6:3f:b0:31:9e:c6:cb:b6:
44:e0:2c:6e:91:da:b5:49:72:c8:b0:d8:d0:14:af:
3c:b9:cf:cc:c2:df:15:66:6b:6b:b0:f9:97:0a:51:
94:e5:ab:d8:f1:bc:7c:38:4e:01:28:5b:64:37:3f:
01:b4:c5:9d:8d:fd:70:71:f1:d5:44:1a:60:68:0d:
d1:1b:25:2f:d4:84:28:4c:5e:19:ee:0f:3c:4b:55:
34:85:03:c1:33:4d:69:ec:dc:bf:36:2a:f7:51:a7:
5a:df:5f:7d:2c:76:e0:ec:76:ff:62:53:57:de:13:
3e:a4:cf:a9:39:78:fa:6b:02:1f:3f:f7:ce:59:85:
62:49:ff:48:f4:94:21:bb:a7:ca:95:55:31:fa:b4:
47:f7:ec:e0:f4:bb:91:30:70:93:1e:15:cb:1a:26:
6b:09:2e:98:98:03:d3:c1:e7:04:64:a0:49:71:36:
35:45:76:c7:29:3e:dd:2b:45:8e:08:7f:34:82:59:
4c:c5:91:8b:25:39:0d:5a:52:8f:d1:4f:1f:04:60:
ed:4f:de:bf:0e:2a:70:9b:44:4d:8c:c7:6b:16:31:
01:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8E:67:53:2D:C3:70:67:D6:49:53:06:A3:20:48:F6:DE:DB:A4:80
X509v3 Authority Key Identifier:
keyid:04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f2:23:65:0f:62:a4:3c:34:c1:73:00:03:f3:72:b7:be:2d:51:
15:88:27:fb:a2:cb:35:64:bd:af:d4:76:99:c7:76:a1:fc:11:
76:02:46:ed:c9:a0:f9:81:54:cc:a0:07:e1:ed:55:a7:db:3d:
96:ea:12:ca:13:4a:8d:47:00:86:50:84:3e:64:e0:65:6b:97:
b0:a7:69:60:3f:64:84:f1:07:97:e5:ed:f3:c8:b2:dc:48:94:
eb:d7:a6:68:be:bc:43:53:20:0f:7d:b3:15:cb:4b:c2:00:98:
db:8b:d1:24:53:dd:26:40:ed:08:23:1e:2b:af:c1:e1:6b:57:
0a:b1:46:81:45:3f:7f:ab:cd:b1:a8:d0:17:85:95:54:51:09:
3d:7c:f6:d0:73:38:bb:5a:34:58:c3:ba:57:22:2b:15:a1:f0:
71:ad:6a:07:bf:ec:10:2d:69:97:8a:d4:5b:79:2b:e1:6b:4f:
0f:9c:58:72:a2:f4:20:13:e9:a9:d8:bf:12:a4:5e:cb:a8:e2:
12:15:1b:0e:97:72:94:ad:df:1c:23:5c:07:e0:2b:ac:bc:91:
71:53:5c:91:2d:74:96:14:18:44:f7:bd:72:8b:63:ec:4e:74:
30:c3:7b:f6:1c:df:43:b6:c0:33:de:41:7d:59:f5:08:be:1b:
3e:7f:b1:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhT6I+HMrSQl89P6cW4b4NKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NGQ2NWU3NDI1NGIyNWZlMDBlYjhlYTA2YmI1OGZiZTY4
YWMxOWIwHhcNMjUwNzI5MDIwMDA2WhcNMjUwNzMwMDIwMDA2WjAzMTEwLwYDVQQD
EygxZDhlNjc1MzJkYzM3MDY3ZDY0OTUzMDZhMzIwNDhmNmRlZGJhNDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7b9P4aPb2AtubzwAONk08l6dEAmB
ZjIr7Q5g4Kz8uhgOG1TIxj+wMZ7Gy7ZE4Cxukdq1SXLIsNjQFK88uc/Mwt8VZmtr
sPmXClGU5avY8bx8OE4BKFtkNz8BtMWdjf1wcfHVRBpgaA3RGyUv1IQoTF4Z7g88
S1U0hQPBM01p7Ny/Nir3Uada3199LHbg7Hb/YlNX3hM+pM+pOXj6awIfP/fOWYVi
Sf9I9JQhu6fKlVUx+rRH9+zg9LuRMHCTHhXLGiZrCS6YmAPTwecEZKBJcTY1RXbH
KT7dK0WOCH80gllMxZGLJTkNWlKP0U8fBGDtT96/Dipwm0RNjMdrFjEB/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2OZ1Mtw3Bn1klTBqMgSPbe26SAMB8GA1UdIwQY
MBaAFARNZedCVLJf4A646ga7WPvmisGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkUxbDUwSlVzbF9nRHJqcUJydFktLWFLd1pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kMzljNmMtNDVlMS00MTI2LWE0ZTIt
NDA0MzhhOTk5NDE0LzEvQkUxbDUwSlVzbF9nRHJqcUJydFktLWFLd1pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9kMzljNmMtNDVlMS00MTI2LWE0ZTItNDA0MzhhOTk5NDE0
LzEvQkUxbDUwSlVzbF9nRHJqcUJydFktLWFLd1pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA8iNlD2Kk
PDTBcwAD83K3vi1RFYgn+6LLNWS9r9R2mcd2ofwRdgJG7cmg+YFUzKAH4e1Vp9s9
luoSyhNKjUcAhlCEPmTgZWuXsKdpYD9khPEHl+Xt88iy3EiU69emaL68Q1MgD32z
FctLwgCY24vRJFPdJkDtCCMeK6/B4WtXCrFGgUU/f6vNsajQF4WVVFEJPXz20HM4
u1o0WMO6VyIrFaHwca1qB7/sEC1pl4rUW3kr4WtPD5xYcqL0IBPpqdi/EqRey6ji
EhUbDpdylK3fHCNcB+ArrLyRcVNckS10lhQYRPe9cotj7E50MMN79hzfQ7bAM95B
fVn1CL4bPn+xhw==
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:36:15 2025 by rpki-client