Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
File: BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft (raw, json)
Hash identifier: 0DAPXiXasks2OeW3195Ipdh1LjRPFWjEFYd84wq/0Zo=
Subject key identifier: 55:00:A1:80:C0:CD:0A:87:E1:46:D7:72:5D:F9:B2:8A:BB:27:84:94
Authority key identifier: 04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
Certificate issuer: /CN=044aacab9a49e143de68979ad156b42dabddde8c
Certificate serial: 019933EE34899EAAEA75D55E261BE03C56C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
Manifest number: 167F
Signing time: Wed 10 Sep 2025 14:01:12 +0000
Manifest this update: Wed 10 Sep 2025 14:01:12 +0000
Manifest next update: Thu 11 Sep 2025 14:01:12 +0000
Files and hashes: 1: BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl (hash: +ob7/ufkKaH30VKycvcuKhTUDAQZ5BlNWiDuZUfp+QA=)
2: hXYgFaLhg1h4smB81OExsZ5kDYA.roa (hash: J1LdPvY1o2Z/PcEpdVjEoKRtwcTpNQB0rwhpVoUBM7k=)
3: xNMIWy2dS-kAK1ke_Y9FCAMH0bc.roa (hash: Ms6l/F8PW5KZFppFyiKlVq4OI4pGZuAHpYocAWIKp4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:ee:34:89:9e:aa:ea:75:d5:5e:26:1b:e0:3c:56:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044aacab9a49e143de68979ad156b42dabddde8c
Validity
Not Before: Sep 10 14:01:12 2025 GMT
Not After : Sep 11 14:01:12 2025 GMT
Subject: CN=5500a180c0cd0a87e146d7725df9b28abb278494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cb:99:a3:e9:55:8a:31:d9:76:f2:ba:74:db:
ce:21:42:3e:b2:3d:43:2d:45:14:90:c0:bc:c7:d9:
f7:0d:a0:55:48:37:71:29:1f:f4:2a:86:5f:82:d0:
5c:7b:a7:ee:ad:71:bc:cb:99:da:32:ef:30:0f:59:
1e:b3:b0:f5:f8:ad:a6:3c:7f:13:d5:e3:1a:5a:b2:
19:29:19:0e:d1:3e:95:4e:dd:8d:ad:ae:d8:f4:e9:
a3:07:59:57:83:79:5f:66:3a:dd:40:50:97:88:d7:
71:c0:ca:70:dc:47:ec:14:e3:2e:c3:d0:ba:6f:65:
0d:a0:12:fa:14:8f:63:13:4c:45:6c:a3:c1:2f:0a:
81:42:d9:70:4c:b5:d4:f3:f7:a9:3e:da:8e:b9:66:
6d:32:2e:af:39:9e:67:0a:00:50:8d:61:b7:3f:ff:
ec:1e:d5:1e:1f:7e:a4:af:1f:1d:2b:49:6f:10:51:
8e:1f:4e:bd:8b:eb:3c:d7:e9:e6:cf:25:97:92:87:
06:67:a3:5b:0a:35:9b:a3:01:36:b9:cc:f2:30:04:
b0:81:c2:59:14:0a:a7:a4:35:6c:05:72:41:42:86:
e7:f3:04:9b:c2:76:77:10:80:91:c9:70:e2:56:0d:
0f:45:cf:19:b1:79:5e:05:83:af:03:60:12:4b:d9:
6d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:00:A1:80:C0:CD:0A:87:E1:46:D7:72:5D:F9:B2:8A:BB:27:84:94
X509v3 Authority Key Identifier:
keyid:04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b0:7d:c2:a5:bd:41:c3:81:ae:26:f4:19:2d:6b:d9:fa:55:
8b:26:d6:0c:5e:dc:7c:3a:e7:51:33:4e:c8:56:65:e1:d6:87:
1f:32:e8:e8:41:5c:cb:49:ef:99:62:6a:d0:e7:c8:fd:28:7b:
88:79:1c:8a:f2:73:9b:31:a0:6e:a4:2e:e0:a3:53:ca:12:45:
9d:4f:e7:45:2d:84:86:d6:8d:50:49:fb:58:71:9d:9c:74:2a:
10:00:7e:42:4f:ac:fb:a9:fc:09:75:32:2d:08:85:82:bd:81:
14:26:16:8f:85:15:b8:7b:f3:49:4f:24:f8:90:fb:b9:6f:45:
a9:4e:93:c9:33:e7:9d:11:90:e0:32:8d:f8:ba:6f:b9:bf:69:
db:6d:af:57:12:be:a3:77:92:e7:da:99:e5:73:50:86:a8:57:
3a:c1:60:8c:cf:6f:bc:ef:81:cd:81:04:de:fe:04:c0:c8:b4:
8e:58:25:4d:20:a9:e1:f2:33:1c:98:a0:f0:3e:c8:ff:be:24:
ce:0d:1b:12:0e:0b:25:60:5c:ac:81:8f:8d:d4:83:cf:63:ca:
3d:99:dc:de:4b:a1:0d:b6:b1:5d:fc:f1:60:d2:03:46:8f:38:
01:1a:bb:c9:73:08:5c:3a:43:25:99:8e:1b:1e:05:ea:30:fe:
45:64:d6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:54:30 2025 by rpki-client