Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
File: bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft (raw, json)
Hash identifier: QxsDr9mfqxLbKvxXD+rzwGMhduAxSxWpwZFqXdz2gck=
Subject key identifier: 46:33:79:25:B8:90:90:55:D4:2D:BF:4C:73:9E:2A:27:79:35:09:2B
Authority key identifier: 6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19
Certificate issuer: /CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219
Certificate serial: 0199331317C98527370064821DA050F95A61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
Manifest number: 0FE6
Signing time: Wed 10 Sep 2025 10:01:53 +0000
Manifest this update: Wed 10 Sep 2025 10:01:53 +0000
Manifest next update: Thu 11 Sep 2025 10:01:53 +0000
Files and hashes: 1: bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl (hash: cF7dQruXOeRQX5KIzw1beF6kVcq8kzPiiwBABb0hYus=)
2: pikr-Z1yZ7UUvvrmXqwotfJAjto.roa (hash: 68icAI19296YoC6/CDoRbYMVtIlmqXzI+o0fkE9+Wfc=)
3: qQqCuUJCewbsZNg09v9PamhTS90.roa (hash: OGwgmYMhdJtP2TfXi19zj/Lo5JjlQ5q60mMpyZb+YXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:13:17:c9:85:27:37:00:64:82:1d:a0:50:f9:5a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219
Validity
Not Before: Sep 10 10:01:53 2025 GMT
Not After : Sep 11 10:01:53 2025 GMT
Subject: CN=46337925b8909055d42dbf4c739e2a277935092b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:68:46:3d:1a:88:53:76:30:2a:8d:ae:9e:5e:
84:b6:a2:43:d4:b7:3e:e9:c3:e7:c8:bb:d4:a6:b3:
e2:4b:af:30:d2:df:e9:e3:73:8b:07:61:54:39:ac:
36:1a:c4:40:e6:ed:b5:06:8c:8a:8f:7a:7b:69:06:
56:8b:23:c9:27:fd:0c:c9:a2:72:dd:21:db:db:42:
fc:70:f2:8d:d8:53:9f:0f:74:9c:0f:2f:d8:d6:9a:
9f:8a:66:df:ea:b6:1c:e0:e9:66:dc:fc:9a:21:17:
cf:6f:69:ce:86:68:ca:a1:46:2f:f9:af:7a:87:ae:
05:ce:c3:a1:af:e7:30:36:7d:84:6c:76:9f:83:fb:
bb:6f:44:15:32:00:16:97:2b:cb:b9:c7:6f:8d:d7:
da:fa:08:03:8b:07:53:9d:65:8a:d7:b5:d7:fb:36:
6a:d9:5d:aa:c4:ca:aa:33:94:85:3b:4b:90:4b:40:
16:4e:1f:b2:3c:bc:0f:fa:14:2c:63:1e:82:0f:87:
53:97:a7:b9:c3:e1:d5:9c:ce:42:38:76:e0:53:9d:
49:af:ac:48:58:aa:f9:b5:ac:d6:87:f8:44:a9:69:
f3:4f:e2:fd:09:f6:7c:a5:62:67:54:f8:44:66:8f:
4f:b3:f9:80:21:7f:87:d0:d3:12:dd:6b:1c:d4:6b:
ca:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:33:79:25:B8:90:90:55:D4:2D:BF:4C:73:9E:2A:27:79:35:09:2B
X509v3 Authority Key Identifier:
keyid:6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0d:12:67:c2:2d:bb:93:e7:bf:de:db:e9:05:78:5e:d6:56:
4b:f8:9e:f9:f5:ef:6d:b0:1d:a6:bf:a6:05:90:0a:89:8d:de:
d4:fc:89:95:00:60:d2:77:31:39:a2:96:ca:65:24:1d:47:4d:
15:82:48:c4:54:34:90:a3:92:35:a9:f3:96:fb:30:81:6f:53:
e5:9f:7d:63:3c:90:ac:45:31:7d:92:b6:5f:0d:ea:af:de:70:
f5:0d:85:4f:4b:0b:3f:a5:a7:06:4d:5f:7a:6d:87:cf:90:35:
c4:a3:84:32:4f:05:ae:32:b9:2b:9f:45:99:7e:1e:59:99:84:
d4:c6:4e:cc:8d:2c:67:5d:c2:6a:22:c8:ce:05:7e:fa:db:5a:
bd:42:85:d9:21:a6:7f:28:d0:1d:10:56:55:bd:61:85:89:ef:
88:90:3d:e7:89:9a:c2:61:db:da:dd:96:e8:d5:6f:ba:a2:9d:
38:58:38:13:76:ee:47:29:1b:f8:c5:4d:28:bd:95:47:b3:9d:
db:fd:0f:4e:d5:32:08:16:ca:2b:c5:44:3a:94:08:a2:ac:ae:
f8:1f:46:47:9e:63:ef:6e:03:44:da:bc:1b:6a:4a:f8:51:85:
14:de:41:67:9c:af:74:44:44:31:8a:08:da:4a:6a:0c:24:29:
26:98:07:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 13:53:36 2025 by rpki-client