Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
File: BesSFXMXvsWP1B2S_xBbNhhkpvI.mft (raw, json)
Hash identifier: CN2C6UOlCVwQv17P8Ev6LRuepAqt3fWhUVPsUDxaBk0=
Subject key identifier: 97:47:A5:44:EF:E6:AB:FB:49:A5:8E:5E:DB:9A:C5:35:96:BF:64:B0
Authority key identifier: 05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
Certificate issuer: /CN=05eb12157317bec58fd41d92ff105b361864a6f2
Certificate serial: 019847E4EA09205DECAC2614F60769B673DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
Manifest number: 08DF
Signing time: Sat 26 Jul 2025 18:00:41 +0000
Manifest this update: Sat 26 Jul 2025 18:00:41 +0000
Manifest next update: Sun 27 Jul 2025 18:00:41 +0000
Files and hashes: 1: BesSFXMXvsWP1B2S_xBbNhhkpvI.crl (hash: Ewi301IE/7yoQmXFhVO+OouyqNdlKGNnWOi4bVLwIOw=)
2: GmOEGytdPBI0M6M4F6yAHlQDNk4.roa (hash: rCxXhyimVf47IInvL9Aht6Onq89mIZd51JHlO7lZEGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:ea:09:20:5d:ec:ac:26:14:f6:07:69:b6:73:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05eb12157317bec58fd41d92ff105b361864a6f2
Validity
Not Before: Jul 26 18:00:41 2025 GMT
Not After : Jul 27 18:00:41 2025 GMT
Subject: CN=9747a544efe6abfb49a58e5edb9ac53596bf64b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:95:cf:f5:41:eb:82:f8:98:f3:60:4f:b6:21:
2f:d8:c1:08:4b:83:64:ac:61:ea:db:f0:98:59:cb:
26:44:d4:07:11:c4:f8:82:cc:cc:19:13:14:11:e7:
a5:a0:5b:74:a4:e7:15:ba:66:6a:85:4a:04:74:04:
2d:b0:30:b7:79:f1:50:f5:94:de:b6:f8:50:79:ea:
b9:c7:b0:f7:e5:f9:32:66:b1:89:51:97:aa:29:a5:
25:4f:f1:38:bd:8b:47:f9:eb:c2:d5:9e:fd:b6:38:
bf:b6:57:ec:1f:7a:9f:45:26:c8:ed:74:e1:a5:62:
f7:d5:88:e5:9d:49:92:e5:23:53:ca:20:82:9e:38:
40:07:a3:83:50:40:48:8d:69:07:73:a9:32:ff:7f:
ad:af:3d:a0:9e:ab:45:0f:02:4e:e7:7a:79:4a:9b:
b2:b1:2d:5d:76:86:3e:12:95:c8:60:81:8d:05:8b:
57:fe:a3:9c:83:4a:95:21:5a:8b:a7:c5:c3:c4:83:
d5:cb:df:7e:97:e9:42:4e:de:a3:68:22:96:78:f8:
79:96:59:a2:21:78:4b:6a:76:21:ef:05:57:1e:6c:
fb:79:93:c4:46:ce:f6:03:22:1f:47:8e:b7:60:42:
91:c3:7e:6c:65:bf:b2:d6:a9:c2:ad:ab:1e:4c:5b:
57:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:47:A5:44:EF:E6:AB:FB:49:A5:8E:5E:DB:9A:C5:35:96:BF:64:B0
X509v3 Authority Key Identifier:
keyid:05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:55:02:df:c8:52:92:c6:17:ea:15:c7:dc:ac:57:e4:69:16:
83:39:9c:9f:7d:bf:d2:22:fa:7e:6b:66:59:4a:df:9a:98:4b:
12:de:03:f7:52:b1:4e:ed:05:77:ad:37:74:a3:30:cc:38:74:
57:c3:57:4a:71:29:fa:f3:8d:aa:60:03:ac:05:03:1e:72:42:
06:92:83:81:a9:99:16:ea:db:6f:bf:b8:3e:c1:10:06:dd:e2:
82:be:9d:54:88:73:bd:33:11:2f:be:8c:35:78:ee:1f:83:1a:
21:c2:c9:b2:c4:4b:ca:44:a5:27:58:7b:d8:d2:ae:01:4b:ce:
ea:c3:1b:7d:08:3c:e9:48:ac:87:0c:bd:79:fe:af:0f:af:ab:
6e:90:4e:9a:b9:af:c9:82:21:3a:fd:10:da:ba:a5:e7:05:05:
75:69:65:e1:8c:71:55:12:20:96:0e:ef:5e:df:a6:85:e8:60:
3d:e7:ba:3d:4d:d4:7c:b8:28:a5:0b:87:7d:ed:87:16:e4:b7:
32:95:91:23:b5:97:5b:c8:f9:1b:b8:6f:b5:8b:33:98:e9:b1:
38:39:90:ba:8b:b1:68:75:9a:66:f4:0c:6a:37:aa:ab:ec:3f:
04:10:68:9c:e5:99:7b:66:7d:f1:3b:8a:bb:97:93:fb:03:7e:
f1:9e:d7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:48:59 2025 by rpki-client