Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
File: beKqsHfJ7vED-XmE8wnYkeWhmYM.mft (raw, json)
Hash identifier: 19ry99W0iyVkk8COn+IwOyRO6p8bYTIywdD1BsFHPo0=
Subject key identifier: 89:7B:58:6D:88:DF:0F:57:5B:7F:1B:B1:D3:DC:F0:CD:F5:14:E2:64
Authority key identifier: 6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
Certificate issuer: /CN=6de2aab077c9eef103f97984f309d891e5a19983
Certificate serial: 01984407C8C95AA1A03FB48B46E8AFF9F675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
Manifest number: 1603
Signing time: Sat 26 Jul 2025 00:00:17 +0000
Manifest this update: Sat 26 Jul 2025 00:00:17 +0000
Manifest next update: Sun 27 Jul 2025 00:00:17 +0000
Files and hashes: 1: 48IOS32yvZQcDKOVIMZ6daf-9KA.roa (hash: HmF8WESoe3mmtI22Berk7+aTu/j0V86FjOKvEurztNM=)
2: beKqsHfJ7vED-XmE8wnYkeWhmYM.crl (hash: nAuUR0JVR/ciOkRHyB62hOYZ1hn9I2OXr5/1igYn40I=)
3: tmeZ0Ov1HvxadlJQTOHPYduqrcA.roa (hash: 5a1G608q0BN2ymFOZ4ty/8IB/CrBTEemrLvT6asz5iY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:07:c8:c9:5a:a1:a0:3f:b4:8b:46:e8:af:f9:f6:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6de2aab077c9eef103f97984f309d891e5a19983
Validity
Not Before: Jul 26 00:00:17 2025 GMT
Not After : Jul 27 00:00:17 2025 GMT
Subject: CN=897b586d88df0f575b7f1bb1d3dcf0cdf514e264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:86:d4:52:ac:35:54:05:77:da:9f:dd:81:ba:
38:93:ef:eb:ff:3f:f1:ae:01:66:9e:1c:c2:80:64:
43:94:95:15:47:f4:80:2e:4c:eb:1c:49:71:c2:e9:
0e:a0:41:b2:a3:c8:69:3e:7d:19:a3:cb:d5:c0:cb:
74:3e:e2:aa:5d:ae:6f:77:58:67:02:e1:98:d2:95:
bc:c2:9d:29:5d:b6:df:c9:a3:a0:58:f9:ff:16:c3:
24:32:a6:28:c6:a2:6c:69:2f:38:91:3b:b2:36:16:
af:86:9e:35:fe:cd:50:50:14:17:00:56:05:6c:1c:
6b:1a:31:b7:0e:91:97:14:9a:a7:13:34:a8:40:29:
1d:7c:8c:72:63:69:21:45:9c:f3:74:42:9d:67:ca:
db:50:a8:a1:99:51:51:2b:be:02:d0:7f:6e:66:a7:
ad:51:45:14:a6:c4:ba:9f:4c:c7:5e:a9:19:ab:0e:
17:85:9f:e4:74:eb:9a:7b:53:70:b6:45:10:b2:a7:
2f:22:ab:bd:99:e7:79:6c:39:ed:8d:24:6d:f6:98:
67:11:ae:e6:c6:3f:f0:b4:00:c3:ae:3b:62:09:41:
fe:79:02:49:06:a1:b5:ce:b0:c5:2b:73:3f:3e:c1:
85:24:01:38:ae:d1:28:9b:94:09:e2:45:be:bd:ee:
9e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7B:58:6D:88:DF:0F:57:5B:7F:1B:B1:D3:DC:F0:CD:F5:14:E2:64
X509v3 Authority Key Identifier:
keyid:6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:0f:de:34:7f:65:3c:70:bb:15:e5:0f:25:47:b6:f1:12:4f:
f0:e7:61:1f:08:06:ca:7d:73:9c:01:12:7a:a5:1e:05:bd:00:
d2:e5:2c:ae:9b:e6:32:ec:63:59:9c:a3:b9:1e:5c:a3:c1:e9:
e6:c9:33:f6:75:32:85:ad:d7:91:a5:fe:7f:3e:68:89:02:b0:
a5:de:c6:b8:c0:d4:53:36:6b:6c:35:7b:a1:18:17:ce:00:f5:
e2:02:77:ab:ca:d7:ef:b1:43:57:97:d1:98:e7:91:53:b2:94:
4d:bb:ce:ba:4a:71:b2:76:05:dd:9f:4e:e6:c9:2f:d4:73:84:
0b:2c:91:be:57:41:48:9e:d0:3d:86:32:74:b2:e8:e8:68:8d:
24:b8:a6:fd:66:6f:d9:a2:0f:1d:32:22:82:e7:5c:fe:66:1a:
92:57:3b:a9:d8:37:ee:6d:5e:d7:6a:1a:9b:ab:e4:48:ad:2c:
c5:1b:99:11:55:26:17:6d:a7:4c:fe:49:b0:31:c6:b1:77:9c:
8a:ed:44:84:7c:57:00:43:db:93:b7:13:de:4a:ac:aa:35:b6:
5a:b0:c6:d1:2c:b5:72:1b:9c:66:22:34:9d:44:c4:2b:7b:0d:
fd:76:a2:62:f7:f3:9c:54:77:fb:df:b8:31:1f:a5:4c:a2:b1:
52:9d:08:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhEB8jJWqGgP7SLRuiv+fZ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZTJhYWIwNzdjOWVlZjEwM2Y5Nzk4NGYzMDlkODkxZTVh
MTk5ODMwHhcNMjUwNzI2MDAwMDE3WhcNMjUwNzI3MDAwMDE3WjAzMTEwLwYDVQQD
Eyg4OTdiNTg2ZDg4ZGYwZjU3NWI3ZjFiYjFkM2RjZjBjZGY1MTRlMjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsobUUqw1VAV32p/dgbo4k+/r/z/x
rgFmnhzCgGRDlJUVR/SALkzrHElxwukOoEGyo8hpPn0Zo8vVwMt0PuKqXa5vd1hn
AuGY0pW8wp0pXbbfyaOgWPn/FsMkMqYoxqJsaS84kTuyNhavhp41/s1QUBQXAFYF
bBxrGjG3DpGXFJqnEzSoQCkdfIxyY2khRZzzdEKdZ8rbUKihmVFRK74C0H9uZqet
UUUUpsS6n0zHXqkZqw4XhZ/kdOuae1NwtkUQsqcvIqu9med5bDntjSRt9phnEa7m
xj/wtADDrjtiCUH+eQJJBqG1zrDFK3M/PsGFJAE4rtEom5QJ4kW+ve6ejQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIl7WG2I3w9XW38bsdPc8M31FOJkMB8GA1UdIwQY
MBaAFG3iqrB3ye7xA/l5hPMJ2JHloZmDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmVLcXNIZko3dkVELVhtRTh3bllrZVdobVlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9hNDAwNzAtYWExNy00MmZlLTg2ZGQt
YjlhZTU3Mzk0MTg5LzEvYmVLcXNIZko3dkVELVhtRTh3bllrZVdobVlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9hNDAwNzAtYWExNy00MmZlLTg2ZGQtYjlhZTU3Mzk0MTg5
LzEvYmVLcXNIZko3dkVELVhtRTh3bllrZVdobVlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUg/eNH9l
PHC7FeUPJUe28RJP8OdhHwgGyn1znAESeqUeBb0A0uUsrpvmMuxjWZyjuR5co8Hp
5skz9nUyha3XkaX+fz5oiQKwpd7GuMDUUzZrbDV7oRgXzgD14gJ3q8rX77FDV5fR
mOeRU7KUTbvOukpxsnYF3Z9O5skv1HOECyyRvldBSJ7QPYYydLLo6GiNJLim/WZv
2aIPHTIigudc/mYaklc7qdg37m1e12oam6vkSK0sxRuZEVUmF22nTP5JsDHGsXec
iu1EhHxXAEPbk7cT3kqsqjW2WrDG0Sy1chucZiI0nUTEK3sN/XaiYvfznFR3+9+4
MR+lTKKxUp0Ikg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 07:13:19 2025 by rpki-client