Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
File: BE1l50JUsl_gDrjqBrtY--aKwZs.mft (raw, json)
Hash identifier: N7RYIg9krzEsJ5R8up0IzuwxyjXwvkVUyLAxN87Ia9I=
Subject key identifier: 7B:72:04:99:0D:DC:DE:9F:1C:72:51:7E:7F:B5:9C:E8:B9:0A:ED:4D
Authority key identifier: 04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
Certificate issuer: /CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Certificate serial: 019A7293B3C31542D4040257F9EA09C8968E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
Manifest number: 0D20
Signing time: Tue 11 Nov 2025 11:01:13 +0000
Manifest this update: Tue 11 Nov 2025 11:01:13 +0000
Manifest next update: Wed 12 Nov 2025 11:01:13 +0000
Files and hashes: 1: BE1l50JUsl_gDrjqBrtY--aKwZs.crl (hash: wt7UuTUJMJDzOEczlvk5opU1v32KLRdUnzkLtKA0Rl0=)
2: rthTWvBWTldvCBC_jsm-IEkTBFQ.roa (hash: GkYmfEttYtLOHlLhDgqjd5V7UynvO3JpXV9H0/Hyyb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:b3:c3:15:42:d4:04:02:57:f9:ea:09:c8:96:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Validity
Not Before: Nov 11 11:01:13 2025 GMT
Not After : Nov 12 11:01:13 2025 GMT
Subject: CN=7b7204990ddcde9f1c72517e7fb59ce8b90aed4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:79:42:4a:43:72:3a:55:da:1c:7b:6f:23:91:
db:ab:c7:fd:b6:fb:39:31:7c:1a:05:d5:5c:4d:92:
49:29:b9:5a:4f:ac:24:e0:99:85:8c:f7:72:bd:0c:
b6:a8:1a:0f:83:cb:65:e9:27:9c:7a:10:be:0a:95:
27:5f:ee:02:05:58:cd:cb:48:b5:89:e7:8b:42:19:
79:24:ab:95:2b:32:b8:eb:ae:d4:7f:7c:4f:7a:b0:
ff:4e:4f:b3:9f:25:83:38:8a:66:26:5a:81:df:c0:
5b:37:4d:66:43:dd:3d:c4:de:e4:4b:28:fd:5c:41:
17:f5:03:a6:83:b0:e6:58:d7:fd:af:98:55:c6:9e:
e2:5e:c8:7f:61:69:37:88:cd:f4:21:9f:77:32:2a:
59:98:57:2a:ab:f1:1e:ec:94:10:99:63:60:aa:89:
b5:8d:12:7a:08:9a:ca:28:f6:6d:37:88:f1:58:ac:
a0:76:99:87:d9:f4:15:46:3d:cf:98:f3:61:e8:9b:
31:3a:3f:78:67:b7:b5:2c:e5:a5:1f:7e:61:b4:53:
5a:ca:20:a8:0f:60:c9:a0:83:14:ef:66:b6:5c:59:
c7:6d:00:ee:6c:48:88:e1:ef:67:95:f0:a4:0f:76:
be:28:da:c5:61:b1:ef:5c:76:3a:e3:03:cc:29:8a:
a6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:72:04:99:0D:DC:DE:9F:1C:72:51:7E:7F:B5:9C:E8:B9:0A:ED:4D
X509v3 Authority Key Identifier:
keyid:04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:52:c3:11:2b:e5:29:97:ab:48:43:67:76:4b:97:55:cd:34:
37:22:c6:0d:7a:cd:1d:7a:09:fc:90:84:92:1e:f4:26:ba:71:
86:f3:68:34:a6:17:e0:4a:e7:9b:73:f8:2c:8c:e5:64:70:56:
a1:b3:5f:85:a7:19:93:73:22:24:b8:4f:aa:4b:f9:5d:86:53:
3b:ef:e9:c6:d7:a2:f9:03:65:0f:45:b1:e8:2a:48:ef:53:11:
ff:80:71:43:f8:3c:b5:df:78:14:27:55:06:d9:33:2f:c1:a0:
53:51:b2:dc:bc:61:3d:9e:58:01:98:e5:72:90:a5:54:cb:a4:
f2:05:ff:6a:8b:a7:f9:e7:32:b2:32:2e:1e:98:e3:c4:6b:46:
fb:f0:05:2f:f5:91:7d:f9:05:a4:c7:3c:3b:76:ab:01:b7:c7:
74:ce:33:1a:56:5e:39:3b:04:59:a9:a6:33:b6:d4:17:ca:8a:
24:0f:9d:2a:0c:b8:c1:db:da:73:f1:46:76:92:21:da:96:24:
5b:ca:32:82:4f:8d:a9:76:65:5d:5d:88:4b:80:f2:23:96:50:
e9:16:fc:d4:04:9b:a8:20:5e:39:d0:91:f3:14:a4:04:db:fe:
f7:bf:a2:d4:d8:87:38:89:80:1e:bd:5e:7b:8b:01:32:bc:e8:
a3:92:84:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:17:41 2025 by rpki-client