Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
File: BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft (raw, json)
Hash identifier: dB9B5wNCWMANtmj5b+EHvyTIFMse2AjfaSqlJbVCvn0=
Subject key identifier: 1F:2C:13:85:C6:F4:4B:35:C4:3A:62:66:00:60:E9:EF:52:8E:F4:BA
Authority key identifier: 04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
Certificate issuer: /CN=044fa3808c2d28c577f9976c61cd226e188695d8
Certificate serial: 01965424A999E5C4F00FBA10506C5339FC5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 17:00:10 +0000
Manifest this update: Sun 20 Apr 2025 17:00:10 +0000
Manifest next update: Mon 21 Apr 2025 17:00:10 +0000
Files and hashes: 1: BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl (hash: r/KdgEyk/C9kjdrYpITzVLkmZmLaD2T0GRFFpw1zQZY=)
2: ocNn2w6Qfls2fXDA9ntZYfLZt0I.roa (hash: 0P14UFeOgFvduGdV+w87JypAmwcr0ZfM6CCLMevWZPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:24:a9:99:e5:c4:f0:0f:ba:10:50:6c:53:39:fc:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044fa3808c2d28c577f9976c61cd226e188695d8
Validity
Not Before: Apr 20 17:00:10 2025 GMT
Not After : Apr 21 17:00:10 2025 GMT
Subject: CN=1f2c1385c6f44b35c43a62660060e9ef528ef4ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c4:a3:21:40:c7:e7:64:b2:d6:9d:f6:46:32:
57:96:f3:46:91:5e:66:b6:29:2f:36:74:04:00:b4:
4a:3d:ba:46:87:9b:1d:bd:2e:38:eb:78:14:04:b1:
de:2b:2a:bd:99:d8:16:eb:18:24:1c:83:4b:2e:29:
bc:9f:29:40:d6:00:a0:7c:ba:45:3e:f1:70:2c:99:
a1:e3:af:5e:84:6c:c8:b1:ae:d5:1c:e3:3d:38:6f:
5a:8b:e1:6c:bf:e3:23:11:28:4e:25:d2:4a:4e:5d:
3c:93:cb:49:67:dd:3d:d2:cd:40:14:81:5a:28:d6:
08:79:5a:c9:14:88:c7:85:61:32:8a:0d:e8:06:6d:
83:6d:31:ab:6a:9c:f3:f3:d0:34:19:69:24:fe:0a:
cd:72:0e:f7:61:f5:b0:7b:0d:a5:2a:d5:c1:95:7c:
fb:8b:70:a6:c3:68:50:9e:ce:35:13:49:a4:a8:9b:
69:c6:fa:8e:3e:fa:29:d9:8e:a3:ac:85:db:a4:97:
10:b4:e2:d1:f6:9e:47:31:dc:ad:dd:d2:73:df:f2:
fb:41:82:d1:b5:ed:f4:3e:a9:8d:84:7c:1f:7e:f2:
d4:1c:22:7a:41:3b:6c:a2:53:de:93:fd:39:d0:95:
99:35:50:4e:74:d0:41:44:54:31:75:5b:61:c5:34:
43:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2C:13:85:C6:F4:4B:35:C4:3A:62:66:00:60:E9:EF:52:8E:F4:BA
X509v3 Authority Key Identifier:
keyid:04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:fb:f2:2a:ec:c5:fb:3c:53:69:b1:71:07:ca:84:a4:68:7f:
eb:d1:32:99:64:48:4f:35:91:9d:c8:e8:24:28:e0:57:8b:2f:
a0:1f:7a:35:fb:56:df:44:91:9c:24:58:29:55:5f:a8:74:78:
5b:1f:31:4d:82:80:09:82:e0:10:f5:cf:2f:a3:82:b5:5c:21:
6e:d3:24:9d:f1:61:53:e7:bb:1e:d5:52:39:ae:a3:5c:ca:69:
09:12:2d:a3:f6:86:da:75:47:6d:ca:eb:08:bb:fa:9e:47:8c:
84:df:af:67:85:9a:59:60:52:97:e1:a4:47:45:18:0f:dc:a7:
e0:46:2a:6f:98:32:b4:9e:13:69:7e:9f:b2:35:da:34:c4:19:
8a:29:ab:42:44:1f:5e:a7:2e:de:b9:12:4e:15:d3:c6:71:1c:
88:13:d9:f0:3f:f3:93:1e:50:05:9f:ec:1d:40:63:74:9d:7c:
c1:a3:c1:d6:60:c6:24:35:f1:5c:53:b2:a0:a7:15:b3:c9:b9:
e9:15:ea:a4:3c:b0:83:30:5e:30:8a:0e:8d:5f:1d:b4:63:1f:
12:d3:ed:29:75:b4:c0:2b:05:ca:7d:35:e3:e6:41:bf:8f:ff:
e3:14:b4:9d:89:1a:2b:d2:ff:8c:33:48:22:33:a9:eb:92:8a:
be:4d:38:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUJKmZ5cTwD7oQUGxTOfxcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NGZhMzgwOGMyZDI4YzU3N2Y5OTc2YzYxY2QyMjZlMTg4
Njk1ZDgwHhcNMjUwNDIwMTcwMDEwWhcNMjUwNDIxMTcwMDEwWjAzMTEwLwYDVQQD
EygxZjJjMTM4NWM2ZjQ0YjM1YzQzYTYyNjYwMDYwZTllZjUyOGVmNGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5cSjIUDH52Sy1p32RjJXlvNGkV5m
tikvNnQEALRKPbpGh5sdvS4463gUBLHeKyq9mdgW6xgkHINLLim8nylA1gCgfLpF
PvFwLJmh469ehGzIsa7VHOM9OG9ai+Fsv+MjEShOJdJKTl08k8tJZ9090s1AFIFa
KNYIeVrJFIjHhWEyig3oBm2DbTGrapzz89A0GWkk/grNcg73YfWwew2lKtXBlXz7
i3Cmw2hQns41E0mkqJtpxvqOPvop2Y6jrIXbpJcQtOLR9p5HMdyt3dJz3/L7QYLR
te30PqmNhHwffvLUHCJ6QTtsolPek/050JWZNVBOdNBBRFQxdVthxTRDnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8sE4XG9Es1xDpiZgBg6e9SjvS6MB8GA1UdIwQY
MBaAFARPo4CMLSjFd/mXbGHNIm4YhpXYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkUtamdJd3RLTVYzLVpkc1ljMGliaGlHbGRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9hOWJlYjAtY2JlNy00NjVlLTgwMDgt
ZDU0NzIyY2NhODQ5LzEvQkUtamdJd3RLTVYzLVpkc1ljMGliaGlHbGRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9hOWJlYjAtY2JlNy00NjVlLTgwMDgtZDU0NzIyY2NhODQ5
LzEvQkUtamdJd3RLTVYzLVpkc1ljMGliaGlHbGRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABPvyKuzF
+zxTabFxB8qEpGh/69EymWRITzWRncjoJCjgV4svoB96NftW30SRnCRYKVVfqHR4
Wx8xTYKACYLgEPXPL6OCtVwhbtMknfFhU+e7HtVSOa6jXMppCRIto/aG2nVHbcrr
CLv6nkeMhN+vZ4WaWWBSl+GkR0UYD9yn4EYqb5gytJ4TaX6fsjXaNMQZiimrQkQf
Xqcu3rkSThXTxnEciBPZ8D/zkx5QBZ/sHUBjdJ18waPB1mDGJDXxXFOyoKcVs8m5
6RXqpDywgzBeMIoOjV8dtGMfEtPtKXW0wCsFyn014+ZBv4//4xS0nYkaK9L/jDNI
IjOp65KKvk04Tg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:33:48 2025 by rpki-client