Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
File: _BeVJZEZ7optEI6bXL4LuQwJjs4.mft (raw, json)
Hash identifier: o7NAzNYCDmXlxmWjsQOLsvwXik5jX37C1muu+ROSgok=
Subject key identifier: AD:33:F7:DF:6F:9C:ED:4B:29:B2:51:7D:A7:AA:D4:8E:BE:CC:C5:8E
Authority key identifier: FC:17:95:25:91:19:EE:8A:6D:10:8E:9B:5C:BE:0B:B9:0C:09:8E:CE
Certificate issuer: /CN=fc1795259119ee8a6d108e9b5cbe0bb90c098ece
Certificate serial: 019A2D0D09EF2B717F75D88AE87CB361C319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
Manifest number: 02F0
Signing time: Tue 28 Oct 2025 23:00:20 +0000
Manifest this update: Tue 28 Oct 2025 23:00:20 +0000
Manifest next update: Wed 29 Oct 2025 23:00:20 +0000
Files and hashes: 1: _BeVJZEZ7optEI6bXL4LuQwJjs4.crl (hash: Ueq9TCvM7zCOpsFGjo/+XasDiPQjyYHmqanYgKvre2g=)
2: xP4juvpCJDFtIojDOBVk5IvnB08.roa (hash: 3K8HKqQzgZ9JbtKLhv6R2lpB9bOzQZ7S4dfHQle+caY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:0d:09:ef:2b:71:7f:75:d8:8a:e8:7c:b3:61:c3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc1795259119ee8a6d108e9b5cbe0bb90c098ece
Validity
Not Before: Oct 28 23:00:20 2025 GMT
Not After : Oct 29 23:00:20 2025 GMT
Subject: CN=ad33f7df6f9ced4b29b2517da7aad48ebeccc58e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c1:b2:ff:a2:19:58:79:84:80:f1:14:1d:9a:
bc:6c:06:d5:96:d9:00:c1:db:23:6b:ea:1c:8c:cb:
94:12:b2:01:8c:38:64:4d:a8:d7:60:af:5b:09:73:
0f:c8:cd:fa:d6:e3:cd:1a:01:a2:a3:c1:41:1e:e5:
77:bb:8b:80:47:ef:19:60:33:55:af:b4:96:f6:9a:
cf:d7:92:d4:8a:a5:df:be:47:78:d6:63:f5:88:4e:
e6:e3:ea:9f:f4:cb:1d:8a:48:9a:3c:e7:d3:af:2c:
46:95:ef:d1:18:42:b0:6b:52:29:49:2a:db:25:7c:
93:d4:1f:d2:8d:81:a6:c9:98:b4:59:a1:0d:73:f7:
6f:0a:8b:95:04:45:88:23:0b:3c:d3:73:de:54:7e:
e5:36:55:29:b6:6c:7a:5e:fd:3e:b5:3a:42:aa:87:
0b:0d:83:b7:8f:29:c2:a7:0e:36:59:2c:2d:48:ab:
d1:55:e1:56:d2:b1:43:b7:55:a6:e7:fd:fc:96:77:
aa:49:35:84:35:38:fa:43:fe:01:71:c0:71:90:b8:
eb:18:73:e4:3a:7d:d3:b2:cd:5e:d1:49:00:55:c4:
a5:35:e8:8c:cd:e1:a1:e4:ce:64:79:29:99:4f:ef:
b8:07:46:6d:00:98:fe:39:4b:cf:ff:53:62:f1:9a:
22:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:33:F7:DF:6F:9C:ED:4B:29:B2:51:7D:A7:AA:D4:8E:BE:CC:C5:8E
X509v3 Authority Key Identifier:
keyid:FC:17:95:25:91:19:EE:8A:6D:10:8E:9B:5C:BE:0B:B9:0C:09:8E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:88:69:e8:be:f7:bf:b6:21:bb:09:55:96:d2:26:d3:89:17:
3e:99:59:d8:34:0e:3f:f1:f5:96:25:ff:2f:8f:56:c9:60:1f:
bb:ac:68:70:ef:56:0c:e3:80:6c:49:be:69:f4:49:a0:c3:f6:
b2:93:d8:d5:a9:b4:a6:ce:d8:0b:fc:b2:95:9d:bf:1c:a0:7f:
44:50:1d:dc:35:63:0f:78:33:bb:9c:09:45:48:6d:64:95:be:
3e:eb:46:24:06:86:c8:97:8a:c7:1e:e6:fe:32:b2:23:77:ca:
fd:c3:e6:e6:81:9e:a7:b4:7a:df:86:f2:83:b7:4b:59:bf:23:
5b:ca:b8:57:80:45:a5:75:e1:29:a2:3d:26:31:33:d3:63:d2:
0e:aa:31:52:18:46:3e:0f:df:ea:99:c7:f6:d2:6d:ce:c2:3d:
b0:1e:ea:f0:77:3d:c6:92:6f:98:f5:8e:bd:d2:6e:f6:53:ab:
37:fd:a2:50:dc:7a:41:e0:99:02:5b:f3:06:24:f8:af:c6:a1:
11:23:4b:28:b9:0a:9c:75:c3:de:76:df:2d:8e:45:8d:96:64:
14:0a:92:0e:51:d5:02:94:c0:06:94:f9:79:26:43:b7:b2:8b:
ce:0d:fe:b0:c2:53:6b:95:aa:16:e4:68:95:2a:a0:fd:34:0e:
8e:ca:4c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:42:18 2025 by rpki-client