Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
File: BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft (raw, json)
Hash identifier: Ac6+CjomgQg3xSgX5tAtblr3fNhEQC8syGLcWT10ihc=
Subject key identifier: 52:C1:F3:B1:C4:F9:19:03:25:6F:6D:C4:96:1C:E8:DB:A6:07:CA:4B
Authority key identifier: 04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
Certificate issuer: /CN=044aacab9a49e143de68979ad156b42dabddde8c
Certificate serial: 0198485265D926E94B4B4A199520A1AD0B41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
Manifest number: 1605
Signing time: Sat 26 Jul 2025 20:00:16 +0000
Manifest this update: Sat 26 Jul 2025 20:00:16 +0000
Manifest next update: Sun 27 Jul 2025 20:00:16 +0000
Files and hashes: 1: BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl (hash: 01cXG9KNclNuk1snuN2kMLqB1r/manVTJnnkI0maX+E=)
2: hXYgFaLhg1h4smB81OExsZ5kDYA.roa (hash: J1LdPvY1o2Z/PcEpdVjEoKRtwcTpNQB0rwhpVoUBM7k=)
3: xNMIWy2dS-kAK1ke_Y9FCAMH0bc.roa (hash: Ms6l/F8PW5KZFppFyiKlVq4OI4pGZuAHpYocAWIKp4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:65:d9:26:e9:4b:4b:4a:19:95:20:a1:ad:0b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044aacab9a49e143de68979ad156b42dabddde8c
Validity
Not Before: Jul 26 20:00:16 2025 GMT
Not After : Jul 27 20:00:16 2025 GMT
Subject: CN=52c1f3b1c4f91903256f6dc4961ce8dba607ca4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c7:fa:33:ef:5c:80:2c:3f:28:1d:9a:a7:b2:
a1:39:f9:7c:73:98:31:80:75:cc:98:24:4a:60:bb:
3c:93:95:fa:0b:75:b3:7f:85:84:dd:3d:19:a4:14:
b1:2f:1d:9e:bd:c5:f9:b8:50:9a:3d:25:ab:84:8e:
24:7b:ac:79:9d:0d:15:69:d1:44:62:22:ee:b1:df:
4f:66:83:f9:8d:3a:4b:82:68:61:24:4b:05:b8:3d:
37:bd:95:5d:fc:69:56:dd:32:36:1d:c6:ec:55:64:
71:1d:55:4a:c8:3e:d9:f5:ec:09:06:60:0d:b6:0c:
94:88:a2:1a:a9:d9:56:de:da:24:42:de:df:e5:aa:
23:5c:d6:98:ad:de:c2:d3:31:ad:59:1c:82:82:b7:
ab:1e:21:34:d5:5a:b9:4a:53:79:54:7d:1b:a1:04:
a8:83:15:c2:76:56:48:99:9a:49:4c:c4:8a:81:b3:
c3:a6:b7:45:1c:3f:b5:42:c5:2d:72:19:e2:5d:74:
f9:ef:3b:dd:dd:20:5c:8b:07:b7:81:39:d8:9d:f2:
fd:36:52:09:2c:90:73:8f:0b:f4:12:b2:8e:32:9d:
69:69:b8:81:cf:fa:b1:a3:83:72:a3:c0:7d:d0:0e:
f8:b1:f0:f1:4f:17:07:5e:e4:ef:a6:7c:1d:fc:3e:
c8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C1:F3:B1:C4:F9:19:03:25:6F:6D:C4:96:1C:E8:DB:A6:07:CA:4B
X509v3 Authority Key Identifier:
keyid:04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c9:d2:2f:9c:f1:27:35:bb:70:03:8c:91:1e:75:dc:87:7d:
c7:e7:25:b3:42:f6:fd:cb:c5:55:df:e6:2a:1c:54:ea:a7:b5:
b7:f5:a4:ee:b0:62:12:b8:fd:14:a7:e9:b7:ae:a3:af:15:ed:
ae:c9:ef:b6:e7:33:cc:d2:9e:1e:24:89:89:f4:b9:4d:d3:ab:
d1:fa:2d:d4:0d:b1:9f:00:24:e1:bc:17:23:45:73:3d:3e:49:
ed:0c:04:41:e7:7f:07:3b:13:7f:76:47:1d:08:30:8b:e4:3f:
44:d2:47:54:9a:ea:af:fc:0f:7d:27:f2:f0:d4:4f:f9:c6:e6:
57:4e:95:68:03:89:98:6e:9c:72:d7:52:b4:af:20:01:28:e8:
ce:67:2c:c2:aa:ee:1a:c6:46:b7:1d:fe:7c:94:0f:af:61:91:
b4:5d:cb:a0:0f:e1:5b:cc:75:58:57:62:0d:54:3c:02:fd:fb:
c9:86:09:d3:0d:05:61:57:65:57:94:f5:85:74:11:94:55:3c:
07:a3:f5:bb:ad:c6:27:72:bc:04:47:7e:a7:4b:44:a3:e9:d3:
ae:f1:47:3b:2b:b6:26:6e:39:a5:81:a1:eb:a4:35:2e:92:e5:
a5:9b:35:06:34:20:dd:5b:d2:bb:98:2a:0a:cc:e5:bf:2a:8d:
95:55:79:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIUmXZJulLS0oZlSChrQtBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NGFhY2FiOWE0OWUxNDNkZTY4OTc5YWQxNTZiNDJkYWJk
ZGRlOGMwHhcNMjUwNzI2MjAwMDE2WhcNMjUwNzI3MjAwMDE2WjAzMTEwLwYDVQQD
Eyg1MmMxZjNiMWM0ZjkxOTAzMjU2ZjZkYzQ5NjFjZThkYmE2MDdjYTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcf6M+9cgCw/KB2ap7KhOfl8c5gx
gHXMmCRKYLs8k5X6C3Wzf4WE3T0ZpBSxLx2evcX5uFCaPSWrhI4ke6x5nQ0VadFE
YiLusd9PZoP5jTpLgmhhJEsFuD03vZVd/GlW3TI2HcbsVWRxHVVKyD7Z9ewJBmAN
tgyUiKIaqdlW3tokQt7f5aojXNaYrd7C0zGtWRyCgrerHiE01Vq5SlN5VH0boQSo
gxXCdlZImZpJTMSKgbPDprdFHD+1QsUtchniXXT57zvd3SBciwe3gTnYnfL9NlIJ
LJBzjwv0ErKOMp1pabiBz/qxo4Nyo8B90A74sfDxTxcHXuTvpnwd/D7IrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLB87HE+RkDJW9txJYc6NumB8pLMB8GA1UdIwQY
MBaAFARKrKuaSeFD3miXmtFWtC2r3d6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NmE3NGUtNGRiOC00ZmU5LTk4MDIt
M2JiOTI2ODc2MDJjLzEvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy84NmE3NGUtNGRiOC00ZmU5LTk4MDItM2JiOTI2ODc2MDJj
LzEvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsnSL5zx
JzW7cAOMkR513Id9x+cls0L2/cvFVd/mKhxU6qe1t/Wk7rBiErj9FKfpt66jrxXt
rsnvtuczzNKeHiSJifS5TdOr0fot1A2xnwAk4bwXI0VzPT5J7QwEQed/BzsTf3ZH
HQgwi+Q/RNJHVJrqr/wPfSfy8NRP+cbmV06VaAOJmG6cctdStK8gASjozmcswqru
GsZGtx3+fJQPr2GRtF3LoA/hW8x1WFdiDVQ8Av37yYYJ0w0FYVdlV5T1hXQRlFU8
B6P1u63GJ3K8BEd+p0tEo+nTrvFHOyu2Jm45pYGh66Q1LpLlpZs1BjQg3VvSu5gq
CszlvyqNlVV5Yg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:17:07 2025 by rpki-client