Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
File: BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft (raw, json)
Hash identifier: 2gSFlkNovBxRwteiJAYbJPmeEJIShBS93bQQmvszi2Y=
Subject key identifier: 8C:07:F7:1E:60:3F:D0:C0:8B:BA:00:D3:12:24:10:80:94:DF:71:11
Authority key identifier: 04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
Certificate issuer: /CN=044fa3808c2d28c577f9976c61cd226e188695d8
Certificate serial: 019A722660BE25E4DA7340196C882360AB3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 09:01:49 +0000
Manifest this update: Tue 11 Nov 2025 09:01:49 +0000
Manifest next update: Wed 12 Nov 2025 09:01:49 +0000
Files and hashes: 1: BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl (hash: 765GBTlcnQ1/eJB/3s/2A7adKU6/OVuwY+draGAvh0s=)
2: h-sMApBMhDHgCGWpW-gple58v6Y.roa (hash: fbZWIQuOefiBmYf/a9pDVe0/h4tBsG3+EM0yhcaJGFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:60:be:25:e4:da:73:40:19:6c:88:23:60:ab:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044fa3808c2d28c577f9976c61cd226e188695d8
Validity
Not Before: Nov 11 09:01:49 2025 GMT
Not After : Nov 12 09:01:49 2025 GMT
Subject: CN=8c07f71e603fd0c08bba00d31224108094df7111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fc:67:75:8d:88:47:b5:cd:0e:12:67:f5:ad:
5d:9f:29:18:71:3c:f6:44:4f:0f:01:c9:c0:d9:f8:
55:1e:28:dd:3e:35:12:33:02:ee:66:d0:f3:e6:08:
e7:4e:f2:16:61:3b:fc:42:83:ad:6e:a0:58:e7:18:
dc:ac:9f:89:b0:13:74:a3:5d:54:85:68:ca:74:d4:
4d:93:b1:99:96:06:49:6f:29:a1:ef:28:4d:bd:ff:
42:1b:c7:c5:53:ab:ca:43:6d:02:9a:b6:d8:83:9e:
9a:5b:f1:07:f9:8e:7d:da:c9:1b:26:7c:94:3e:6e:
49:47:f7:c6:6a:a6:da:2d:57:13:8e:70:6a:6a:62:
98:1d:58:09:7e:5d:e8:26:a5:ad:9a:d1:59:9a:a5:
6a:4f:56:4e:9d:7b:d1:8c:e9:36:78:44:2b:c2:ad:
6c:cc:df:1f:27:89:63:3d:99:3c:4d:cc:12:7f:98:
fc:79:fd:c3:2f:f6:91:33:83:a1:8a:29:4f:2a:2b:
2d:52:5a:cc:be:71:a8:a6:7f:4a:40:f9:98:0a:82:
e9:8a:93:6d:3a:c6:b3:e6:4a:82:a1:78:68:99:aa:
67:4c:2b:e1:89:64:4b:90:3a:f0:a6:b6:2c:a2:2a:
87:f1:f8:8a:2e:eb:9b:94:e4:5b:70:ed:99:99:d7:
3e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:07:F7:1E:60:3F:D0:C0:8B:BA:00:D3:12:24:10:80:94:DF:71:11
X509v3 Authority Key Identifier:
keyid:04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:03:9a:8c:5f:e4:78:31:f3:80:1a:2e:d6:3f:b5:38:2c:84:
d9:c5:65:8d:f6:0f:33:fa:f2:de:1d:55:31:69:9e:79:a2:16:
c8:ab:7c:dd:3f:63:66:52:4b:3d:57:41:70:ed:97:35:d8:92:
e5:18:5e:d5:30:18:a9:c0:68:e0:81:30:91:34:73:46:a0:75:
2b:e6:97:9f:4a:07:aa:f9:c4:a4:7d:d9:89:a9:f3:fe:00:c6:
26:5b:8e:a5:e1:9a:85:f5:fb:5c:d5:81:44:e9:86:8f:1e:c2:
5f:d9:06:ec:74:9d:42:93:7e:26:2c:4d:93:c6:33:f0:34:88:
38:1f:a9:a9:b6:6f:c4:b7:43:51:58:c7:52:a6:3d:ab:60:5c:
de:e4:5d:3c:20:fa:05:22:3d:99:d4:28:f8:67:a9:1b:85:c4:
02:c9:f2:03:d8:39:06:b5:40:45:10:e0:c2:1c:ec:25:33:76:
c7:c3:d1:2e:22:01:e9:d8:80:00:07:fe:ba:f6:26:7e:1d:43:
07:69:21:84:ff:98:fc:cb:00:4b:91:2c:ac:01:ca:ba:cc:28:
98:ed:f0:34:fc:eb:5f:9e:d3:ef:18:10:8d:bb:a6:46:06:db:
54:1f:7a:82:1e:03:c3:bd:6d:5d:e7:ae:b7:7f:e2:ad:50:24:
6d:43:41:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJmC+JeTac0AZbIgjYKs6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NGZhMzgwOGMyZDI4YzU3N2Y5OTc2YzYxY2QyMjZlMTg4
Njk1ZDgwHhcNMjUxMTExMDkwMTQ5WhcNMjUxMTEyMDkwMTQ5WjAzMTEwLwYDVQQD
Eyg4YzA3ZjcxZTYwM2ZkMGMwOGJiYTAwZDMxMjI0MTA4MDk0ZGY3MTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/xndY2IR7XNDhJn9a1dnykYcTz2
RE8PAcnA2fhVHijdPjUSMwLuZtDz5gjnTvIWYTv8QoOtbqBY5xjcrJ+JsBN0o11U
hWjKdNRNk7GZlgZJbymh7yhNvf9CG8fFU6vKQ20CmrbYg56aW/EH+Y592skbJnyU
Pm5JR/fGaqbaLVcTjnBqamKYHVgJfl3oJqWtmtFZmqVqT1ZOnXvRjOk2eEQrwq1s
zN8fJ4ljPZk8TcwSf5j8ef3DL/aRM4OhiilPKistUlrMvnGopn9KQPmYCoLpipNt
Osaz5kqCoXhomapnTCvhiWRLkDrwprYsoiqH8fiKLuublORbcO2Zmdc+BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwH9x5gP9DAi7oA0xIkEICU33ERMB8GA1UdIwQY
MBaAFARPo4CMLSjFd/mXbGHNIm4YhpXYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkUtamdJd3RLTVYzLVpkc1ljMGliaGlHbGRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9hOWJlYjAtY2JlNy00NjVlLTgwMDgt
ZDU0NzIyY2NhODQ5LzEvQkUtamdJd3RLTVYzLVpkc1ljMGliaGlHbGRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9hOWJlYjAtY2JlNy00NjVlLTgwMDgtZDU0NzIyY2NhODQ5
LzEvQkUtamdJd3RLTVYzLVpkc1ljMGliaGlHbGRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQOajF/k
eDHzgBou1j+1OCyE2cVljfYPM/ry3h1VMWmeeaIWyKt83T9jZlJLPVdBcO2XNdiS
5Rhe1TAYqcBo4IEwkTRzRqB1K+aXn0oHqvnEpH3Zianz/gDGJluOpeGahfX7XNWB
ROmGjx7CX9kG7HSdQpN+JixNk8Yz8DSIOB+pqbZvxLdDUVjHUqY9q2Bc3uRdPCD6
BSI9mdQo+GepG4XEAsnyA9g5BrVARRDgwhzsJTN2x8PRLiIB6diAAAf+uvYmfh1D
B2khhP+Y/MsAS5EsrAHKuswomO3wNPzrX57T7xgQjbumRgbbVB96gh4Dw71tXeeu
t3/irVAkbUNBvg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:39 2025 by rpki-client