Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
File: BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft (raw, json)
Hash identifier: xzWG0zzIFG2HhVUSmRHvyqWn6ShZoTDJC3enmeeCnek=
Subject key identifier: 1F:D1:91:68:6A:78:FC:51:E9:DB:6C:B1:6C:CA:BC:A6:95:8B:96:2F
Authority key identifier: 04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
Certificate issuer: /CN=044fa3808c2d28c577f9976c61cd226e188695d8
Certificate serial: 01974967CAAB2ECBAB0CAF57DEC09BA5B589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 08:00:28 +0000
Manifest this update: Sat 07 Jun 2025 08:00:28 +0000
Manifest next update: Sun 08 Jun 2025 08:00:28 +0000
Files and hashes: 1: BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl (hash: rMEF1wwB+F+SP9tyeczusivE2qHAeIJRjKgZerNnsJA=)
2: ocNn2w6Qfls2fXDA9ntZYfLZt0I.roa (hash: 0P14UFeOgFvduGdV+w87JypAmwcr0ZfM6CCLMevWZPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:ca:ab:2e:cb:ab:0c:af:57:de:c0:9b:a5:b5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044fa3808c2d28c577f9976c61cd226e188695d8
Validity
Not Before: Jun 7 08:00:28 2025 GMT
Not After : Jun 8 08:00:28 2025 GMT
Subject: CN=1fd191686a78fc51e9db6cb16ccabca6958b962f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4c:69:eb:1f:f5:e7:69:38:48:1f:37:3d:34:
3c:db:17:e6:e4:49:2f:46:7c:a8:ad:43:bc:f5:18:
f0:87:87:ed:78:bc:57:a2:a8:db:01:c7:64:c0:98:
27:8f:06:79:ae:32:89:05:5f:45:72:b1:cf:20:6b:
96:19:35:a9:4f:42:5e:4f:40:9f:df:a3:38:c0:9f:
96:e5:22:4b:c6:fe:f8:d4:4e:64:79:66:0d:ec:a7:
df:4a:b5:ea:cd:57:d8:37:ca:60:46:5d:0b:d5:bc:
df:4d:3e:7a:89:de:cc:cb:9f:4f:9f:14:1f:d6:7c:
d7:dc:ab:43:43:3a:6c:34:0b:7e:bb:49:e1:a7:5a:
9f:16:78:03:c9:10:59:eb:1b:2b:bc:01:3c:f2:df:
90:0c:f0:b3:d3:6a:d5:22:e2:9c:5e:3a:d3:b7:62:
a6:65:61:a9:34:98:1b:aa:a6:0e:ef:e8:90:f7:1a:
93:5f:1c:26:47:ec:a6:12:dd:99:21:27:94:ae:11:
ca:08:a7:f4:39:0f:26:19:ff:61:af:08:a6:6e:84:
63:55:7d:35:18:60:82:21:58:17:c6:a0:b2:d6:34:
4c:33:0f:1e:35:cd:8f:1e:7a:7c:8b:1b:d2:65:30:
47:4b:92:1c:dc:70:30:53:7d:52:1b:46:24:98:36:
7e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D1:91:68:6A:78:FC:51:E9:DB:6C:B1:6C:CA:BC:A6:95:8B:96:2F
X509v3 Authority Key Identifier:
keyid:04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:47:64:2d:00:d7:d0:e3:87:82:da:6f:6e:dd:6c:a3:de:0a:
38:54:3c:0d:4f:0d:27:84:d6:c6:2b:b0:d3:d9:3c:54:75:ca:
fd:9d:71:41:f1:f8:30:b2:60:3a:b7:bf:67:65:42:2a:9a:88:
15:f7:fd:30:7d:ca:f0:20:55:91:c9:f0:0e:d5:d3:5d:85:ea:
6a:64:06:f9:dd:b7:82:fd:ea:6b:c1:8f:b0:e9:c4:89:12:96:
94:4e:a1:d6:2e:f8:97:23:a1:80:83:1c:38:72:51:e6:ff:5f:
86:ee:7a:92:79:71:96:62:4b:f6:33:f5:32:4a:bb:6a:1d:e1:
ed:79:c4:a9:28:f2:91:2f:c5:fd:19:3e:0a:8e:9f:9f:0b:0c:
74:92:9a:36:59:87:94:be:29:a4:60:a6:7e:c4:d4:b3:47:01:
b4:48:32:9b:4c:e4:4f:6c:a1:e6:1a:73:54:57:56:13:51:6e:
8d:4e:e0:22:49:d5:4c:3e:fe:cf:e5:96:f6:bb:52:dd:f7:f5:
f0:99:ff:70:2b:9a:79:2d:b8:2a:75:6b:42:64:e7:a9:7e:37:
cf:e1:dc:8d:06:5b:56:99:df:f6:49:4d:74:5e:e9:7b:49:26:
fb:ef:da:22:94:59:ea:46:fd:0f:89:a8:f7:cf:12:92:77:2e:
09:8e:e8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:47:59 2025 by rpki-client