Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
File: BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft (raw, json)
Hash identifier: gjsP3GxGEDfe5IZSwm/T0x/YTN1VPw3C+ORzKGlssvg=
Subject key identifier: 4B:AF:26:EA:AC:66:A3:C1:10:BD:B2:DB:2C:BB:A8:4C:CB:E3:02:86
Authority key identifier: 04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
Certificate issuer: /CN=044aacab9a49e143de68979ad156b42dabddde8c
Certificate serial: 019A38A3C93E94C3F82B92B005423E2C661B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
Manifest number: 1706
Signing time: Fri 31 Oct 2025 05:00:49 +0000
Manifest this update: Fri 31 Oct 2025 05:00:49 +0000
Manifest next update: Sat 01 Nov 2025 05:00:49 +0000
Files and hashes: 1: BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl (hash: mVrViRvBBQTx+DlURdRE4VM0/E/8zLnI3M2sfxQtqjc=)
2: hXYgFaLhg1h4smB81OExsZ5kDYA.roa (hash: J1LdPvY1o2Z/PcEpdVjEoKRtwcTpNQB0rwhpVoUBM7k=)
3: xNMIWy2dS-kAK1ke_Y9FCAMH0bc.roa (hash: Ms6l/F8PW5KZFppFyiKlVq4OI4pGZuAHpYocAWIKp4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:38:a3:c9:3e:94:c3:f8:2b:92:b0:05:42:3e:2c:66:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044aacab9a49e143de68979ad156b42dabddde8c
Validity
Not Before: Oct 31 05:00:49 2025 GMT
Not After : Nov 1 05:00:49 2025 GMT
Subject: CN=4baf26eaac66a3c110bdb2db2cbba84ccbe30286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d0:4b:42:df:48:ca:3f:6b:4e:4c:0d:f7:b2:
6f:c2:7b:47:70:c8:ca:b1:2f:89:97:e7:70:a2:38:
32:8d:8d:b1:f2:07:2d:e8:01:07:41:a7:43:79:b5:
8e:81:f5:ab:a1:8a:1d:9f:f0:72:e8:b6:b3:78:00:
45:2f:b8:62:45:34:d3:dc:c6:d6:b6:e4:ef:56:69:
3d:bc:5e:0d:3b:a9:93:63:86:fa:c3:c4:40:33:6a:
a3:06:44:4e:ff:3a:e9:8f:7a:59:1c:2d:28:34:9d:
c6:93:4f:5c:e0:35:0c:2c:1b:5b:59:52:64:1c:63:
87:d8:92:95:36:d2:74:90:19:43:6e:51:74:f3:1b:
f9:6a:c8:11:5e:5c:db:3d:b7:1b:e5:a9:2f:b3:0a:
78:6f:b2:30:1f:e5:f3:de:b3:f1:bc:8c:b3:aa:d9:
92:94:f0:c0:23:4c:56:91:28:7c:4e:97:78:57:49:
da:67:8b:c6:43:19:98:5b:9e:1b:72:d3:ef:54:6e:
66:f6:6d:eb:cf:68:ee:ef:9d:a6:0d:09:d9:e1:6a:
c3:f0:f0:3b:4b:a2:c8:d6:85:b7:b0:ec:c1:d6:9d:
a8:91:b4:ba:61:ef:e2:fe:29:57:66:58:f7:f8:a9:
bc:0d:21:5c:66:26:b0:ce:d3:cd:f6:63:a3:c9:1f:
a0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AF:26:EA:AC:66:A3:C1:10:BD:B2:DB:2C:BB:A8:4C:CB:E3:02:86
X509v3 Authority Key Identifier:
keyid:04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:eb:69:3a:17:7d:69:ae:5b:4b:02:6d:69:f7:f1:6e:2c:ae:
ca:7b:34:b4:07:80:bb:78:6d:c4:ec:ec:36:40:38:94:8b:de:
33:e7:c8:4a:11:b7:4f:76:89:f2:9f:2e:a7:d6:6d:fd:55:3b:
bf:56:fd:eb:2b:ad:a2:a3:20:c5:b4:b4:08:28:c7:77:99:a5:
53:c2:f0:77:08:82:5f:cc:76:57:51:86:a0:08:c9:e9:71:7e:
1f:dd:a4:ac:e6:3f:85:35:98:89:93:ff:e5:23:0b:55:03:09:
f6:02:9c:9a:90:a6:7e:01:1b:85:cd:ce:93:89:43:f3:c8:65:
4b:87:39:6c:6b:aa:c3:49:28:bd:fc:60:e4:a2:75:bc:1b:99:
92:cb:82:3f:7d:18:4f:28:03:b5:d9:5c:a4:26:ed:ab:da:6d:
36:76:17:8a:29:f4:6d:fc:18:2e:a1:33:d4:f4:80:cc:b4:69:
cc:9a:82:8a:54:44:6f:7f:b8:8e:b3:ed:55:10:b5:20:f2:57:
0a:77:57:2a:dd:e7:e9:71:3e:f0:9d:3c:f3:72:5b:40:ef:58:
8c:72:4c:47:08:c8:1a:7c:bd:b8:46:31:ba:0a:86:43:f1:f0:
48:5c:af:14:25:6c:92:72:cb:9f:af:05:f3:09:bd:6f:26:cf:
9f:4f:18:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 07:45:11 2025 by rpki-client