Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
File: BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft (raw, json)
Hash identifier: vbzxMvRNUI3AB4RrkZ95iVSkK5n+nuLQguQo2qe/DPA=
Subject key identifier: 82:F1:1F:98:7F:B5:B7:6B:31:25:C2:CC:28:66:F0:21:40:B1:86:66
Authority key identifier: 04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
Certificate issuer: /CN=044fa3808c2d28c577f9976c61cd226e188695d8
Certificate serial: 01991876F06766736C49E73FED1A93C09C05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
Manifest number: 166E
Signing time: Fri 05 Sep 2025 06:01:11 +0000
Manifest this update: Fri 05 Sep 2025 06:01:11 +0000
Manifest next update: Sat 06 Sep 2025 06:01:11 +0000
Files and hashes: 1: BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl (hash: ROkzWh+n/2LC7o1REkjtsRELWfP8EJCEn8fIDr1hvgY=)
2: h-sMApBMhDHgCGWpW-gple58v6Y.roa (hash: fbZWIQuOefiBmYf/a9pDVe0/h4tBsG3+EM0yhcaJGFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:76:f0:67:66:73:6c:49:e7:3f:ed:1a:93:c0:9c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044fa3808c2d28c577f9976c61cd226e188695d8
Validity
Not Before: Sep 5 06:01:11 2025 GMT
Not After : Sep 6 06:01:11 2025 GMT
Subject: CN=82f11f987fb5b76b3125c2cc2866f02140b18666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:01:f3:33:66:1e:12:b4:31:20:2f:36:0d:20:
72:e0:a7:7f:99:66:25:c9:02:4b:48:0a:65:ee:bd:
c5:84:4d:68:51:b1:4f:6b:1f:10:cf:9b:d9:c5:e3:
54:14:2a:17:cb:a1:5f:bf:4d:16:58:b7:a0:c4:47:
74:5d:e7:14:68:c8:98:2e:ba:8f:bc:0f:a2:bc:dc:
c1:40:32:58:83:00:97:bc:b5:ca:a4:d1:78:c5:7b:
9d:07:34:1c:eb:34:8f:80:11:48:7b:97:3a:53:80:
26:72:38:f4:ff:d1:72:d7:85:2e:a1:34:3a:c1:e4:
7b:61:4c:83:9d:54:c1:71:db:fe:31:34:d0:f6:1e:
85:fe:31:57:9b:88:50:a2:58:d8:59:86:62:c5:8b:
91:08:95:ae:c2:0d:f6:e1:d4:77:c4:09:73:4c:43:
5f:66:6b:68:e9:b7:79:06:04:b2:90:59:ba:92:2e:
3e:33:56:bb:b7:81:9a:96:56:c1:28:8d:a7:b4:80:
e7:26:a1:40:cc:8c:83:f8:c6:61:4f:4a:48:5c:a7:
43:56:e2:0c:5f:da:d9:f7:81:29:5a:ba:ee:f4:6c:
db:66:09:63:72:e6:bd:80:f2:6b:d5:c1:c6:be:31:
3e:05:c0:c1:e7:7d:03:0a:47:62:1e:d8:78:6b:88:
0c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F1:1F:98:7F:B5:B7:6B:31:25:C2:CC:28:66:F0:21:40:B1:86:66
X509v3 Authority Key Identifier:
keyid:04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:95:c1:04:ba:c5:d6:d3:dd:51:7e:67:65:d5:75:f8:e2:27:
d9:98:39:72:bb:56:ea:8a:3a:d5:da:b8:53:96:ed:03:65:90:
7c:6c:a4:5c:2a:9d:14:c9:d5:e8:21:88:3e:66:2c:e7:5c:9f:
23:eb:6c:c1:4b:eb:55:41:4b:ef:ef:fd:54:39:8f:4b:26:1f:
58:a3:d8:d5:5a:32:00:3f:27:dc:56:e7:e9:af:41:95:07:46:
5f:69:e0:99:69:3d:cf:dd:c0:e0:cd:c2:e7:21:e3:a2:ed:ee:
16:b7:6c:7e:e9:bf:4f:a4:6c:13:32:2c:97:9b:42:b0:82:52:
c3:c2:7a:5b:2b:0a:5d:a7:82:51:3a:71:bb:c3:70:8f:dd:97:
54:de:84:f3:a9:89:4a:38:eb:e3:c9:50:45:3f:28:f6:f7:ec:
57:99:f9:1d:ac:2e:f6:d4:c6:65:bf:d7:9c:16:b6:86:2d:61:
7d:03:2f:21:4d:e2:3e:96:17:b5:0c:f2:c7:cc:84:67:dd:1e:
1b:11:c9:29:e0:52:50:c1:a3:50:3f:61:3e:04:60:8d:6f:7c:
3c:9c:ba:1b:be:0b:fa:1f:dd:1a:68:c0:d3:7e:86:01:51:6b:
07:07:9d:4d:40:87:f4:ed:9d:e6:a1:db:2c:8c:3d:d0:1e:c5:
8d:d8:63:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:34:04 2025 by rpki-client