Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
File: _BeVJZEZ7optEI6bXL4LuQwJjs4.mft (raw, json)
Hash identifier: XW3Dsdx+WRPWRKzEcH6yyT4Ykgj8mbx6XlDlghYJXEk=
Subject key identifier: 08:90:0A:5E:E7:3C:20:93:49:B4:8F:91:88:63:76:68:C0:4F:5D:FD
Authority key identifier: FC:17:95:25:91:19:EE:8A:6D:10:8E:9B:5C:BE:0B:B9:0C:09:8E:CE
Certificate issuer: /CN=fc1795259119ee8a6d108e9b5cbe0bb90c098ece
Certificate serial: 019935DCA71111CBD3FEF3965D73CD04BA96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
Manifest number: 0270
Signing time: Wed 10 Sep 2025 23:01:17 +0000
Manifest this update: Wed 10 Sep 2025 23:01:17 +0000
Manifest next update: Thu 11 Sep 2025 23:01:17 +0000
Files and hashes: 1: _BeVJZEZ7optEI6bXL4LuQwJjs4.crl (hash: hwz32i7ptpcHjV2ghRhHrNOBSdKh5k8B4Aem4QfD7q0=)
2: xP4juvpCJDFtIojDOBVk5IvnB08.roa (hash: 3K8HKqQzgZ9JbtKLhv6R2lpB9bOzQZ7S4dfHQle+caY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:dc:a7:11:11:cb:d3:fe:f3:96:5d:73:cd:04:ba:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc1795259119ee8a6d108e9b5cbe0bb90c098ece
Validity
Not Before: Sep 10 23:01:17 2025 GMT
Not After : Sep 11 23:01:17 2025 GMT
Subject: CN=08900a5ee73c209349b48f9188637668c04f5dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d5:5d:41:53:65:e2:94:0c:a2:f1:b4:c3:78:
cc:fd:fc:08:1b:9e:8e:99:25:73:b7:a3:20:6b:90:
b1:95:f2:05:31:09:8e:bd:83:0a:bd:90:31:e5:09:
9b:cf:d3:80:3c:28:77:c4:40:52:2e:89:47:39:ee:
16:fe:88:b0:9f:ea:a3:02:40:91:76:ab:00:46:90:
86:0e:b6:ba:ce:23:11:89:b4:f0:8b:93:7c:4c:09:
63:16:8e:9e:83:8d:fd:d7:0e:bc:b9:7b:d0:26:d7:
56:19:8b:b2:8e:99:8a:95:eb:b1:ae:64:b7:03:97:
b6:4a:ba:f9:67:8b:35:a9:e0:e7:f4:ed:38:b3:25:
a6:50:6b:34:a8:bb:0f:05:23:0a:78:fe:20:0d:de:
21:10:62:67:cb:e7:a4:c8:14:5b:56:b1:eb:51:66:
9f:43:f2:6e:1e:a4:4c:d7:79:5c:c8:14:07:27:71:
c2:fe:93:ab:f0:16:cd:87:ec:8e:dc:d7:f2:2c:72:
e2:43:a3:94:d3:2f:37:24:cb:2f:32:25:9c:c5:cd:
8d:e8:de:41:67:e7:14:72:c6:1c:08:bd:75:8b:c4:
5e:4c:a2:a5:91:76:ec:56:63:e0:c5:1e:40:06:b5:
81:46:02:7d:7a:64:47:d9:82:80:a9:b4:88:d2:c7:
ea:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:90:0A:5E:E7:3C:20:93:49:B4:8F:91:88:63:76:68:C0:4F:5D:FD
X509v3 Authority Key Identifier:
keyid:FC:17:95:25:91:19:EE:8A:6D:10:8E:9B:5C:BE:0B:B9:0C:09:8E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:bf:2f:84:e3:28:7e:fa:b1:a4:f8:4c:66:f7:e0:d2:1b:0d:
ff:87:26:71:ef:ba:7f:f8:0b:78:fa:6b:5d:a0:91:c2:bd:0c:
c3:a5:5b:a5:b7:3b:40:de:30:c5:b9:3f:bf:78:2c:20:30:9e:
7e:5a:65:e3:46:c5:54:86:a5:33:d6:7c:6d:b4:50:f1:c2:44:
fb:8a:d4:29:1c:19:92:b9:b5:cb:2a:c4:83:29:9a:71:a1:09:
61:29:38:a9:74:17:6f:b9:cc:6c:9d:8f:33:11:00:fa:70:5b:
77:ec:8c:4d:71:2b:5e:94:ab:a4:b9:8f:b0:b2:21:23:cb:bd:
64:a7:5f:65:44:ae:0d:ce:e4:15:14:ad:e3:80:bb:83:48:12:
4a:a5:5d:39:73:88:1d:dc:25:e9:fe:79:d1:05:4c:ed:2d:a9:
7c:ae:44:04:fc:e0:91:df:0a:93:5b:d4:33:c5:2e:44:4e:7c:
21:06:26:44:df:22:58:2f:a9:36:9d:ce:3b:57:ba:a3:eb:1a:
da:76:f9:32:39:fc:59:4b:c1:fd:6e:f2:b9:7a:e9:b8:d0:b5:
3b:0d:06:c2:51:45:3e:1b:c5:7b:89:76:4d:ed:33:f0:08:67:
64:1e:d0:61:b6:fa:e0:8f:b6:c5:d9:70:74:f0:a9:a5:3d:80:
28:57:60:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 03:01:01 2025 by rpki-client