Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
File: Be02xlZG2ssRSqcsG7y3QYG3_0M.mft (raw, json)
Hash identifier: 9GsXGfo5moGyTHkJtQzl2WXn84UJwgSL5sGK7y682zk=
Subject key identifier: 40:03:36:BB:52:5C:4F:AD:72:B8:26:C9:48:40:9B:17:ED:63:D0:FF
Authority key identifier: 05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43
Certificate issuer: /CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43
Certificate serial: 019A725C421F8C9DA4DF745693494DE6AC04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
Manifest number: 124C
Signing time: Tue 11 Nov 2025 10:00:40 +0000
Manifest this update: Tue 11 Nov 2025 10:00:40 +0000
Manifest next update: Wed 12 Nov 2025 10:00:40 +0000
Files and hashes: 1: Be02xlZG2ssRSqcsG7y3QYG3_0M.crl (hash: UARNIGld2gY5XZmtJkc71rCF0xaB7eItU0ueZXg0ark=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:42:1f:8c:9d:a4:df:74:56:93:49:4d:e6:ac:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43
Validity
Not Before: Nov 11 10:00:40 2025 GMT
Not After : Nov 12 10:00:40 2025 GMT
Subject: CN=400336bb525c4fad72b826c948409b17ed63d0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:72:df:41:58:56:d0:d1:5b:cc:65:d8:2a:60:
ad:5b:43:70:c1:9d:c5:4f:ac:02:8e:26:31:4c:ee:
e6:a6:d3:3f:fb:3f:49:b8:0f:91:bd:db:78:fc:98:
59:4f:7d:e5:33:ea:5f:19:ed:cb:00:39:e1:e0:8f:
75:d4:00:1e:87:61:32:fe:19:80:3c:24:40:e6:15:
74:68:b5:41:fc:ba:56:c7:97:af:ae:47:bb:53:9f:
19:d4:53:e2:d9:8f:df:1d:d7:69:a3:df:17:7b:c7:
b1:c5:07:7a:37:45:c9:e9:9f:21:b1:7a:f6:9c:f0:
1d:e1:cc:65:3d:c3:c0:bc:77:c9:d5:94:4f:ad:f1:
8a:37:f6:ab:b1:78:92:1f:cf:69:eb:b1:08:92:01:
8a:7a:fe:b0:fe:ad:bc:82:d7:bc:ae:15:9b:57:9e:
05:86:56:db:48:7b:f5:da:0c:cd:8b:00:0b:f3:00:
fe:bd:04:df:38:02:db:55:a8:3e:2b:39:f7:b2:08:
be:fb:34:17:85:14:99:12:f8:07:73:b2:9c:e5:cf:
39:d9:8a:c1:0c:24:3e:17:99:6e:25:ca:ca:e1:3c:
c4:4b:0c:0b:f7:4d:84:50:82:19:c5:6f:d4:b2:77:
78:12:7c:40:70:46:cf:da:8e:8c:25:b2:e6:45:1e:
06:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:03:36:BB:52:5C:4F:AD:72:B8:26:C9:48:40:9B:17:ED:63:D0:FF
X509v3 Authority Key Identifier:
keyid:05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:50:7b:a0:fd:eb:63:42:5d:a1:a7:e7:72:a8:47:7e:5f:8f:
9e:56:0d:e9:56:3e:e3:5f:62:ac:fd:c6:47:cb:0d:e5:51:6f:
68:62:c4:97:a5:82:ce:35:58:fe:53:3e:ce:08:af:41:40:62:
63:26:b0:9e:c0:cd:1b:7a:75:27:e2:f4:88:b2:c4:41:8b:e4:
2d:f0:7f:d0:da:ff:37:50:21:8b:54:fb:9a:bb:0f:63:ec:0d:
80:58:8d:10:96:b2:eb:ea:fc:0c:3e:54:f7:0c:23:a6:9b:6f:
63:fd:06:24:96:96:7a:1c:a8:ad:3e:4c:33:03:ce:1c:0d:43:
77:73:61:d4:7d:7f:e6:6d:17:81:b9:3a:5f:08:4d:87:2c:af:
fe:31:1a:49:98:cb:d0:7b:30:f9:1b:ea:1b:8b:8e:0e:d4:42:
dd:ca:05:74:f6:4f:21:ba:72:e3:62:81:ac:2f:5f:9f:d9:63:
41:13:8a:a8:90:a3:4f:15:21:9f:4e:8a:21:8e:2a:b4:3c:ed:
2f:c2:48:2a:4b:1f:e8:d9:95:f8:58:a3:e9:91:2d:6b:e3:90:
e4:a3:1f:0b:72:50:9d:23:ab:e6:bc:fd:fe:27:a8:25:71:80:
3e:96:6b:27:ce:ed:55:4b:89:f1:ce:20:e0:1f:2c:4f:c8:4b:
fc:79:9c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:13 2025 by rpki-client