Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
File: BE-_fHvu77FSWiYU2c1jpCafn0o.mft (raw, json)
Hash identifier: pOV86EwPVsQKoSq3Fz1zO5j0yjSIIe0JtCV10Cx4/74=
Subject key identifier: DE:5F:0D:F7:6C:F5:87:34:A5:44:70:E5:00:7A:B3:33:9C:7D:79:4C
Authority key identifier: 04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
Certificate issuer: /CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Certificate serial: 019A72939A6898FE18BC2BCEF54BE3916768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
Manifest number: 08DF
Signing time: Tue 11 Nov 2025 11:01:07 +0000
Manifest this update: Tue 11 Nov 2025 11:01:07 +0000
Manifest next update: Wed 12 Nov 2025 11:01:07 +0000
Files and hashes: 1: BE-_fHvu77FSWiYU2c1jpCafn0o.crl (hash: 3kI3rEedV3bpnnnaIJsrHY6DXW+hvLdUEa7Im5UJkHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:9a:68:98:fe:18:bc:2b:ce:f5:4b:e3:91:67:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Validity
Not Before: Nov 11 11:01:07 2025 GMT
Not After : Nov 12 11:01:07 2025 GMT
Subject: CN=de5f0df76cf58734a54470e5007ab3339c7d794c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:aa:e6:68:ea:d9:16:98:7e:e1:1a:e6:6a:a3:
48:02:c0:12:0c:9f:a1:05:d4:69:5e:84:16:54:63:
6a:14:38:f9:27:ee:12:44:b1:4f:d6:73:23:55:39:
a3:a8:66:d7:97:47:a8:a0:b5:c8:07:25:bd:9c:45:
d8:66:f2:3b:d5:9b:1f:2a:aa:ef:b6:eb:28:af:ac:
f2:52:82:a7:86:f5:45:60:08:75:7c:af:3a:e8:ce:
54:f1:f5:eb:46:d8:e6:20:d4:18:58:8d:9c:02:43:
89:fe:81:c3:88:1d:8f:ee:22:10:dc:52:2b:46:e9:
8f:fd:15:53:71:1f:01:81:90:a0:6f:a1:69:cd:f3:
62:b1:eb:31:4e:5f:c3:0e:46:82:d3:37:68:2d:d0:
e3:3c:bb:43:f9:45:51:b6:e7:1b:58:4b:d6:0f:3c:
78:46:25:9f:b3:3f:2a:4d:59:a2:e6:7e:b8:87:ac:
23:2d:51:48:88:2b:6f:e8:16:78:e8:7c:88:75:28:
9f:03:28:46:cf:ee:62:45:c7:25:51:6c:8e:9a:52:
56:fb:8e:a4:d7:52:f9:07:3b:ff:47:38:2e:22:70:
7d:ec:2c:9d:1d:6b:2c:a4:da:ae:b5:d9:14:a9:13:
68:ed:ed:4d:cb:0b:d5:c4:bd:7a:b9:fe:26:31:ee:
dc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5F:0D:F7:6C:F5:87:34:A5:44:70:E5:00:7A:B3:33:9C:7D:79:4C
X509v3 Authority Key Identifier:
keyid:04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:60:bd:9d:be:a0:55:73:28:6d:72:67:49:70:ba:0e:b7:ca:
3d:86:b3:fd:8f:f7:7d:d2:e8:4a:12:28:c2:f7:be:0a:c8:0d:
51:54:88:a0:d7:d2:14:62:cc:41:96:56:ee:49:d6:25:9b:be:
76:fb:a5:dd:01:f6:d1:ae:28:e7:c3:13:24:7d:c5:8a:54:c1:
d7:9e:60:5d:e0:be:4d:3e:a7:da:98:70:be:2c:99:a5:b8:08:
84:bf:a3:c1:5d:1c:3a:18:55:90:64:2d:5b:30:de:68:72:e9:
56:05:19:f8:8d:df:7c:27:26:a2:0b:21:c6:80:4a:14:87:1a:
bf:88:d1:30:59:75:ca:e8:44:dc:3e:63:9a:ab:bc:10:03:6d:
fa:4f:14:18:b0:d2:8a:b2:55:8d:5c:59:88:d6:a4:d2:3d:6b:
8b:8e:76:a6:e5:e0:4f:10:67:01:ba:54:6e:3c:cc:af:4e:8a:
a3:3c:78:2e:d1:26:39:ea:b9:04:4a:3f:9c:fe:a4:13:c2:fd:
c4:6a:8a:69:6e:f8:a8:c3:60:db:db:25:ad:69:f6:d2:ec:77:
5d:1f:10:5e:5a:ce:cc:b4:53:59:7c:b1:92:1b:a5:5f:a9:f8:
4b:e2:d1:ff:fd:f6:19:88:c7:c2:02:87:ab:b0:64:a8:73:97:
c6:48:19:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk5pomP4YvCvO9UvjkWdoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NGZiZjdjN2JlZWVmYjE1MjVhMjYxNGQ5Y2Q2M2E0MjY5
ZjlmNGEwHhcNMjUxMTExMTEwMTA3WhcNMjUxMTEyMTEwMTA3WjAzMTEwLwYDVQQD
EyhkZTVmMGRmNzZjZjU4NzM0YTU0NDcwZTUwMDdhYjMzMzljN2Q3OTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqrmaOrZFph+4RrmaqNIAsASDJ+h
BdRpXoQWVGNqFDj5J+4SRLFP1nMjVTmjqGbXl0eooLXIByW9nEXYZvI71ZsfKqrv
tusor6zyUoKnhvVFYAh1fK866M5U8fXrRtjmINQYWI2cAkOJ/oHDiB2P7iIQ3FIr
RumP/RVTcR8BgZCgb6FpzfNisesxTl/DDkaC0zdoLdDjPLtD+UVRtucbWEvWDzx4
RiWfsz8qTVmi5n64h6wjLVFIiCtv6BZ46HyIdSifAyhGz+5iRcclUWyOmlJW+46k
11L5Bzv/RzguInB97CydHWsspNqutdkUqRNo7e1NywvVxL16uf4mMe7cRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5fDfds9Yc0pURw5QB6szOcfXlMMB8GA1UdIwQY
MBaAFARPv3x77u+xUlomFNnNY6Qmn59KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkUtX2ZIdnU3N0ZTV2lZVTJjMWpwQ2FmbjBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iMjNhOWItNWNkZC00YzQxLWJmMjYt
NTEzNjI2OTVkMDg1LzEvQkUtX2ZIdnU3N0ZTV2lZVTJjMWpwQ2FmbjBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9iMjNhOWItNWNkZC00YzQxLWJmMjYtNTEzNjI2OTVkMDg1
LzEvQkUtX2ZIdnU3N0ZTV2lZVTJjMWpwQ2FmbjBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsmC9nb6g
VXMobXJnSXC6DrfKPYaz/Y/3fdLoShIowve+CsgNUVSIoNfSFGLMQZZW7knWJZu+
dvul3QH20a4o58MTJH3FilTB155gXeC+TT6n2phwviyZpbgIhL+jwV0cOhhVkGQt
WzDeaHLpVgUZ+I3ffCcmogshxoBKFIcav4jRMFl1yuhE3D5jmqu8EANt+k8UGLDS
irJVjVxZiNak0j1ri452puXgTxBnAbpUbjzMr06Kozx4LtEmOeq5BEo/nP6kE8L9
xGqKaW74qMNg29slrWn20ux3XR8QXlrOzLRTWXyxkhulX6n4S+LR//32GYjHwgKH
q7BkqHOXxkgZUw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:35 2025 by rpki-client