Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
File: BEw2vtOpgR94Jg5_X0_S_V54jgM.mft (raw, json)
Hash identifier: sLva9IWbB+GMCrj6XwJoM9L0kmtNX5TtWHvAqO2SiTo=
Subject key identifier: 34:20:2D:FF:CF:5A:A4:86:12:11:61:DB:C7:35:50:84:F3:75:12:D9
Authority key identifier: 04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
Certificate issuer: /CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Certificate serial: 019859466B42DA7E947B6341D1275F1DB933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
Manifest number: 0CA1
Signing time: Wed 30 Jul 2025 03:00:43 +0000
Manifest this update: Wed 30 Jul 2025 03:00:43 +0000
Manifest next update: Thu 31 Jul 2025 03:00:43 +0000
Files and hashes: 1: AqwTFt-qyr9ctfZVh_Lc-HmCLI4.roa (hash: 6o18WCqQ1vQmdpr+KgNhHjoy4zxFnk5Txpn2BtXndjc=)
2: BEw2vtOpgR94Jg5_X0_S_V54jgM.crl (hash: 24YpEEGisPoOdRay0RHvBKeRIpF9a8kYaIlxa91C7Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:59:46:6b:42:da:7e:94:7b:63:41:d1:27:5f:1d:b9:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Validity
Not Before: Jul 30 03:00:43 2025 GMT
Not After : Jul 31 03:00:43 2025 GMT
Subject: CN=34202dffcf5aa486121161dbc7355084f37512d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d6:1a:4c:1c:18:c7:ad:75:e5:66:1a:04:0d:
f9:e7:27:5e:f4:ae:ea:46:7a:b5:39:be:9b:f5:f7:
3c:97:16:57:fd:4b:c9:b9:34:84:58:34:69:d4:24:
10:dd:6a:d1:bd:82:14:51:8e:db:8e:24:14:5a:61:
e3:e8:52:59:43:59:6f:bb:be:02:0e:9e:82:fe:45:
8e:97:f1:bb:42:d3:dc:82:ad:0a:ac:73:b0:e6:03:
32:15:c9:66:77:eb:fd:df:40:78:a1:4b:79:b9:c1:
cf:04:f9:88:33:b0:a6:2e:f2:83:8b:b0:27:a5:c3:
f2:67:86:5e:5a:30:b2:d4:e6:a5:f1:a8:78:b7:95:
0a:c0:c5:cf:3d:17:f2:56:1a:32:f9:9a:1c:0a:1d:
55:25:ac:ce:b8:12:21:ed:e0:7a:ea:60:77:af:7d:
a6:18:89:c4:36:52:e9:ca:1b:6b:aa:0a:1c:c1:81:
c7:ce:58:10:46:8a:11:e6:ba:7b:01:25:ca:74:52:
2d:ab:47:ba:f8:dc:5a:89:d1:1c:9e:cb:5b:8f:49:
ed:c0:91:1b:2f:8d:27:83:8f:23:4e:16:dc:48:b6:
37:08:f2:67:f2:d6:46:bc:f9:cd:6f:16:e2:44:04:
cf:e6:a1:8e:01:e2:a3:31:f8:ab:3c:d1:e6:99:39:
94:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:20:2D:FF:CF:5A:A4:86:12:11:61:DB:C7:35:50:84:F3:75:12:D9
X509v3 Authority Key Identifier:
keyid:04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ef:f8:4c:89:82:d2:44:02:19:6c:ba:01:f1:12:b8:4a:ea:
f2:f8:fc:9d:3e:a9:8a:c1:de:bf:9a:92:ce:46:21:fa:aa:9c:
b6:d7:35:e5:33:c6:9f:d6:9b:c1:c7:f1:e4:96:c4:ae:3f:d4:
53:1e:31:b1:85:dc:ca:02:f4:d3:1b:f7:41:cd:78:27:f9:87:
ce:8e:f5:02:1d:ec:bc:c5:12:b5:f6:ce:1b:ee:3a:ad:21:25:
b5:93:85:5a:9c:0b:e3:ea:5c:89:55:7a:b9:b5:de:f1:d0:b5:
30:4f:e4:bd:6a:cd:18:57:2f:65:c6:5d:98:cc:db:55:77:e5:
4e:c3:c8:0a:99:43:19:bb:f4:df:cf:8a:77:76:b9:84:83:cb:
3a:7b:d7:80:2f:ea:2d:9a:ca:a5:bc:0a:4b:e5:29:bd:74:28:
12:20:26:c6:8b:b9:5d:03:96:8a:7a:c4:f5:da:8b:62:7d:57:
37:0f:f5:51:01:af:c2:db:a8:d9:f7:51:00:85:df:61:42:31:
d4:ed:94:26:b7:2f:b7:a5:10:c6:ec:57:39:74:c4:60:7c:b0:
cf:4b:a6:4a:32:82:04:b8:9b:a2:cf:d4:14:ae:4a:d2:81:c8:
4c:3c:29:f7:81:23:e3:3e:77:81:c3:db:18:33:07:1a:41:d5:
9a:ec:40:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 08:01:16 2025 by rpki-client