Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
File: BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft (raw, json)
Hash identifier: 3ZH37hKt/4fTDMegU6MCtwy4x83P824H1NF1n4tCOOg=
Subject key identifier: 35:CF:FB:0E:9E:E0:6E:D2:63:AC:D9:51:1A:DD:C7:CE:D9:30:80:9D
Authority key identifier: 04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
Certificate issuer: /CN=044aacab9a49e143de68979ad156b42dabddde8c
Certificate serial: 0197458B2A6CD199421A7184A0DB6D2FE85A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
Manifest number: 157F
Signing time: Fri 06 Jun 2025 14:00:37 +0000
Manifest this update: Fri 06 Jun 2025 14:00:37 +0000
Manifest next update: Sat 07 Jun 2025 14:00:37 +0000
Files and hashes: 1: BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl (hash: TeatBUh1NawFgcwPQLQ7BDjeYA4EFniZ/dbQiz6ddng=)
2: hXYgFaLhg1h4smB81OExsZ5kDYA.roa (hash: J1LdPvY1o2Z/PcEpdVjEoKRtwcTpNQB0rwhpVoUBM7k=)
3: xNMIWy2dS-kAK1ke_Y9FCAMH0bc.roa (hash: Ms6l/F8PW5KZFppFyiKlVq4OI4pGZuAHpYocAWIKp4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:8b:2a:6c:d1:99:42:1a:71:84:a0:db:6d:2f:e8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044aacab9a49e143de68979ad156b42dabddde8c
Validity
Not Before: Jun 6 14:00:37 2025 GMT
Not After : Jun 7 14:00:37 2025 GMT
Subject: CN=35cffb0e9ee06ed263acd9511addc7ced930809d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:31:36:75:43:90:36:5d:c1:3a:d9:1b:a9:2e:
d2:16:44:30:67:8b:73:b7:ee:38:2d:0a:5c:2c:5a:
94:fb:ff:ad:88:67:f4:fc:39:0c:25:ab:88:94:82:
a3:3d:6e:3b:bf:67:b4:36:cc:db:fe:2e:b4:f9:94:
10:39:58:a6:d0:01:e3:0d:06:40:b3:21:40:ad:b4:
c3:9a:7d:17:ac:9b:f1:a1:c8:0e:50:33:ee:89:46:
a7:0c:ef:9f:8b:e3:a0:41:2a:ab:06:47:26:3f:e8:
e0:a0:59:ad:44:8a:ff:2e:cc:ac:59:07:44:15:e5:
07:04:fa:50:57:19:85:c3:c0:43:79:00:b4:f5:d3:
77:0c:b4:2a:79:9c:f9:95:e9:8f:9e:ce:28:98:a9:
cb:d7:ab:78:7b:87:aa:1c:41:ee:13:97:25:21:fa:
ad:9e:36:22:89:5f:ba:14:b5:a5:f0:b3:bf:ce:96:
26:e9:4e:8b:67:4d:8c:8b:88:b0:72:b5:af:b0:34:
6d:15:d5:12:6b:f6:09:0c:b2:9f:a7:a1:91:33:16:
71:f9:8c:79:8e:b3:c0:53:ed:8d:a6:f4:5d:0d:d3:
97:9f:d7:b5:cb:ab:af:e1:81:a3:fc:7d:2d:73:f2:
d9:04:18:be:c1:27:8a:0d:7e:dd:cb:8f:b4:92:e6:
29:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CF:FB:0E:9E:E0:6E:D2:63:AC:D9:51:1A:DD:C7:CE:D9:30:80:9D
X509v3 Authority Key Identifier:
keyid:04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:1f:51:68:8d:d7:2b:8b:21:09:ec:78:3f:df:11:41:19:c6:
f8:50:42:7f:0f:c6:c4:42:ce:17:a2:ad:83:bb:4b:ee:b6:cb:
16:ef:3d:b8:65:86:73:af:ff:84:de:63:04:d9:d9:8a:b2:c2:
59:24:b3:7f:73:c8:ed:b3:a4:59:4e:09:d1:93:d5:e2:1e:67:
06:e9:79:03:48:e7:35:06:53:87:52:68:a1:60:4e:68:b7:c4:
50:be:8d:24:4e:76:c0:a9:b3:ce:78:e9:bc:0a:a5:b1:8b:0b:
38:da:98:83:55:09:e7:c5:e1:5e:3e:e5:9c:62:ec:bc:9e:24:
50:49:03:6f:96:25:3b:43:36:6a:08:73:84:7a:0b:6e:0f:44:
47:79:54:1f:fa:ca:3e:3d:4b:24:12:27:98:f1:2e:fa:28:ca:
67:3b:7d:7d:2b:73:17:b6:82:4d:48:c2:f6:c2:d8:55:21:b3:
8f:69:45:aa:de:d1:0b:cc:e4:9e:09:23:7f:b7:dc:75:8d:93:
4d:29:85:ff:36:bf:3a:64:23:32:f7:4b:98:89:4b:29:6f:49:
47:ea:90:c8:65:b5:92:e8:3e:9f:49:50:32:14:be:3b:53:5f:
bc:65:f7:17:77:ea:98:55:6f:9e:d7:67:24:e2:f5:c4:69:00:
ed:d4:94:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdFiyps0ZlCGnGEoNttL+haMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NGFhY2FiOWE0OWUxNDNkZTY4OTc5YWQxNTZiNDJkYWJk
ZGRlOGMwHhcNMjUwNjA2MTQwMDM3WhcNMjUwNjA3MTQwMDM3WjAzMTEwLwYDVQQD
EygzNWNmZmIwZTllZTA2ZWQyNjNhY2Q5NTExYWRkYzdjZWQ5MzA4MDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTE2dUOQNl3BOtkbqS7SFkQwZ4tz
t+44LQpcLFqU+/+tiGf0/DkMJauIlIKjPW47v2e0Nszb/i60+ZQQOVim0AHjDQZA
syFArbTDmn0XrJvxocgOUDPuiUanDO+fi+OgQSqrBkcmP+jgoFmtRIr/LsysWQdE
FeUHBPpQVxmFw8BDeQC09dN3DLQqeZz5lemPns4omKnL16t4e4eqHEHuE5clIfqt
njYiiV+6FLWl8LO/zpYm6U6LZ02Mi4iwcrWvsDRtFdUSa/YJDLKfp6GRMxZx+Yx5
jrPAU+2NpvRdDdOXn9e1y6uv4YGj/H0tc/LZBBi+wSeKDX7dy4+0kuYp8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXP+w6e4G7SY6zZURrdx87ZMICdMB8GA1UdIwQY
MBaAFARKrKuaSeFD3miXmtFWtC2r3d6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NmE3NGUtNGRiOC00ZmU5LTk4MDIt
M2JiOTI2ODc2MDJjLzEvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy84NmE3NGUtNGRiOC00ZmU5LTk4MDItM2JiOTI2ODc2MDJj
LzEvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdh9RaI3X
K4shCex4P98RQRnG+FBCfw/GxELOF6Ktg7tL7rbLFu89uGWGc6//hN5jBNnZirLC
WSSzf3PI7bOkWU4J0ZPV4h5nBul5A0jnNQZTh1JooWBOaLfEUL6NJE52wKmzznjp
vAqlsYsLONqYg1UJ58XhXj7lnGLsvJ4kUEkDb5YlO0M2aghzhHoLbg9ER3lUH/rK
Pj1LJBInmPEu+ijKZzt9fStzF7aCTUjC9sLYVSGzj2lFqt7RC8zkngkjf7fcdY2T
TSmF/za/OmQjMvdLmIlLKW9JR+qQyGW1kug+n0lQMhS+O1NfvGX3F3fqmFVvntdn
JOL1xGkA7dSUJw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:10:27 2025 by rpki-client