Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft
File: BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft (raw, json)
Hash identifier: pshPkIKnUEaWDnkw8mA8cEnmWIYS1LTR29BVBHr0O+Q=
Subject key identifier: B1:80:2C:EB:0C:DD:8F:FF:9A:BE:D9:A8:7C:30:7E:EC:3C:DA:6C:9D
Authority key identifier: 04:4D:A5:B7:E2:DB:F7:C7:6F:CC:66:C9:6F:FE:64:8F:EA:D4:B0:60
Certificate issuer: /CN=044da5b7e2dbf7c76fcc66c96ffe648fead4b060
Certificate serial: 01984B553C972396AA82F587487DF0A77838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE2lt-Lb98dvzGbJb_5kj-rUsGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft
Manifest number: 06C6
Signing time: Sun 27 Jul 2025 10:02:13 +0000
Manifest this update: Sun 27 Jul 2025 10:02:13 +0000
Manifest next update: Mon 28 Jul 2025 10:02:13 +0000
Files and hashes: 1: BE2lt-Lb98dvzGbJb_5kj-rUsGA.crl (hash: xRW+dRHBz1z1UFe8U/rum1P757WgybLK9iCMy+zSlnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE2lt-Lb98dvzGbJb_5kj-rUsGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:55:3c:97:23:96:aa:82:f5:87:48:7d:f0:a7:78:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044da5b7e2dbf7c76fcc66c96ffe648fead4b060
Validity
Not Before: Jul 27 10:02:13 2025 GMT
Not After : Jul 28 10:02:13 2025 GMT
Subject: CN=b1802ceb0cdd8fff9abed9a87c307eec3cda6c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:38:f9:30:98:b7:dd:85:30:38:f9:8f:38:7c:
ae:8b:80:8a:74:2d:9c:7e:d9:73:62:11:d6:99:0f:
0c:9c:15:e9:6b:64:79:01:6b:52:d6:72:2c:7b:a0:
e5:4c:3f:21:fc:f7:53:28:89:ee:73:d5:3f:5f:75:
9c:22:e7:1e:7c:5e:e0:da:78:0d:78:f7:a3:2f:60:
12:2c:07:2b:42:5f:9b:43:98:6c:05:83:fb:38:10:
15:2e:8a:fb:27:7f:ea:1b:72:6d:4f:b4:d6:5d:15:
fb:9e:32:45:15:d2:5b:a2:a2:8a:be:6c:b1:b4:e4:
64:77:c0:ee:9f:ad:3b:bc:f3:53:86:f2:cd:e9:8d:
9f:7b:ea:22:72:fc:c6:9f:30:99:33:e3:eb:14:7c:
f4:f3:23:87:3e:d9:19:6e:4c:3b:31:92:28:a4:eb:
13:7e:bc:19:13:20:7e:9f:06:79:dd:68:36:ca:de:
4c:3d:fb:0c:9d:1d:d9:dc:cc:d8:a0:6a:19:30:46:
c0:e8:87:a2:96:f1:43:0c:34:63:11:cb:85:f4:69:
f5:68:9a:eb:e5:0f:69:ec:3d:d1:6f:d0:a0:1f:cf:
4c:9c:2d:91:ae:3e:22:73:73:3b:d7:80:f9:40:2f:
c7:c5:9e:39:22:8f:59:e7:a2:d4:e2:cf:b1:37:da:
05:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:80:2C:EB:0C:DD:8F:FF:9A:BE:D9:A8:7C:30:7E:EC:3C:DA:6C:9D
X509v3 Authority Key Identifier:
keyid:04:4D:A5:B7:E2:DB:F7:C7:6F:CC:66:C9:6F:FE:64:8F:EA:D4:B0:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE2lt-Lb98dvzGbJb_5kj-rUsGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:2e:97:e4:82:4b:62:2a:fa:41:7f:22:52:e7:20:6b:4d:7b:
a1:95:f4:70:8b:be:ce:4c:93:8a:b8:df:bb:e1:7b:09:cb:f7:
59:7c:21:dc:a9:e4:7f:e8:46:11:4d:92:8b:f3:8c:ea:df:eb:
b9:89:4f:00:ff:cf:b1:d2:48:97:b6:49:bc:3b:44:db:de:8e:
f5:54:a6:14:3f:39:3a:cb:35:23:d5:d9:bf:11:d7:45:b2:5a:
7b:c5:41:43:0d:a7:62:36:93:fd:60:de:f8:8d:fd:e0:4d:46:
1b:1e:a9:af:30:18:f5:e3:64:b1:8d:aa:69:be:ab:a1:7a:1c:
fc:58:78:f0:58:4b:f4:76:a2:7f:9c:21:12:d7:ef:0f:7a:3e:
ba:c8:4f:26:ba:9d:02:97:79:f7:2d:21:7b:70:82:55:fc:a3:
18:42:3e:84:18:e7:7e:37:50:bb:f9:ba:a1:19:52:c9:7c:75:
1b:7e:10:1c:af:ac:7a:32:22:53:c6:5f:35:06:9a:c6:22:20:
35:13:e7:29:ef:fa:4d:22:89:69:52:0c:d8:a7:a7:1a:db:38:
8c:9e:a9:dd:1b:14:21:84:dc:53:5c:8a:ca:8c:0c:7d:4e:ad:
1a:92:20:d8:56:9b:d7:fb:15:3e:ec:40:bc:7d:1e:1b:65:9f:
57:d0:79:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:00:43 2025 by rpki-client