Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft
File: bEU8CR9sDKSwKxxMoXu2XR3haJU.mft (raw, json)
Hash identifier: 3yO3J3fbooIEWdN9dh1ZM62HBOceTwC1HyASau6QtWE=
Subject key identifier: 26:A7:45:FA:1A:B0:1D:7D:69:B1:86:F6:10:D1:81:CD:95:E1:9F:3E
Authority key identifier: 6C:45:3C:09:1F:6C:0C:A4:B0:2B:1C:4C:A1:7B:B6:5D:1D:E1:68:95
Certificate issuer: /CN=6c453c091f6c0ca4b02b1c4ca17bb65d1de16895
Certificate serial: 019922555B4C0F49488C6E709758F0160189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 04:00:43 +0000
Manifest this update: Sun 07 Sep 2025 04:00:43 +0000
Manifest next update: Mon 08 Sep 2025 04:00:43 +0000
Files and hashes: 1: NQq8etUndTjVgxrhy44nBmqGCOM.roa (hash: j7zhzvWt94q6NzpdciEQjpp4LDZ9qKJXwX2H3/CEMus=)
2: bEU8CR9sDKSwKxxMoXu2XR3haJU.crl (hash: Hc+PhDcqtvCdiKvZirjw2brcs6PLyGTGBo6fzP2k3wE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:5b:4c:0f:49:48:8c:6e:70:97:58:f0:16:01:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c453c091f6c0ca4b02b1c4ca17bb65d1de16895
Validity
Not Before: Sep 7 04:00:43 2025 GMT
Not After : Sep 8 04:00:43 2025 GMT
Subject: CN=26a745fa1ab01d7d69b186f610d181cd95e19f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:24:0d:6f:47:aa:5e:73:b2:5c:1d:84:fb:0a:
2b:bf:25:b5:3d:a2:e6:ea:98:3b:5d:f5:b5:64:4c:
46:bf:61:5c:76:55:cb:cb:37:46:ba:a1:82:43:31:
b5:c7:8d:9a:23:9a:c5:a9:9c:d8:9d:b0:47:d6:fa:
7b:7b:03:4f:70:9b:01:fb:a2:7f:aa:0a:10:35:3f:
cf:69:06:75:a5:63:a7:20:9b:1b:c1:d5:16:5c:9b:
63:e9:40:2d:09:59:f9:7a:9b:ae:d6:52:01:4c:03:
f1:2e:19:68:d0:d5:a0:82:82:b6:a0:93:1f:76:f4:
2c:6a:60:b1:e4:d2:fe:a6:94:49:9f:9a:0a:12:8f:
a2:22:ee:d9:30:ac:74:62:e7:1a:42:41:6c:bb:b9:
e5:d3:2d:f6:07:e2:de:24:48:67:04:7c:15:50:49:
a7:41:4b:9d:13:aa:a4:70:fc:a7:db:49:c0:e6:56:
9a:ad:50:af:3d:13:ec:5c:49:b9:dc:af:7a:1d:95:
f0:06:55:72:4a:3f:1e:90:0c:bf:5c:87:be:aa:db:
c2:87:24:b1:c8:d8:6d:bb:bc:c8:31:bf:31:8c:a6:
9f:af:d4:23:fe:c4:4f:9b:fb:a0:f3:59:75:42:c7:
31:73:f5:e2:4b:34:f0:89:63:f9:64:b8:f3:42:0e:
51:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A7:45:FA:1A:B0:1D:7D:69:B1:86:F6:10:D1:81:CD:95:E1:9F:3E
X509v3 Authority Key Identifier:
keyid:6C:45:3C:09:1F:6C:0C:A4:B0:2B:1C:4C:A1:7B:B6:5D:1D:E1:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:33:67:6e:7d:11:f6:69:f8:ca:23:55:56:b7:83:a1:a7:37:
d9:f3:fd:c2:c4:56:84:f2:d3:83:eb:a2:9e:49:df:a7:6f:ba:
c7:b5:c6:b5:3d:cb:e4:09:5d:11:ec:88:e7:db:c7:2c:72:f4:
00:a9:a1:8d:17:d0:77:0c:78:0e:c3:a4:9a:1e:e8:9f:0d:aa:
25:54:e7:8a:ac:ac:2c:97:be:8e:bd:df:5b:55:6b:a0:b6:8c:
7c:bb:8f:8b:87:5c:8b:c0:f2:13:10:bf:af:b9:fd:69:45:37:
b7:22:30:dd:6a:1a:3e:df:6b:b3:fb:4a:5e:bb:f2:5b:a0:58:
7c:f1:55:3c:2f:4a:9b:2e:e0:c1:24:8e:af:cc:ea:b8:f2:4a:
24:5f:b8:d2:60:e6:15:ed:ba:a7:04:b8:98:0b:df:11:c7:64:
e9:6d:25:1a:0a:3d:47:c7:54:6a:f7:64:5d:e9:e9:db:f6:32:
02:ed:8d:c8:77:32:1a:29:c3:08:c8:b5:64:1d:7d:57:fa:dd:
0a:99:ed:a7:2b:96:05:0b:ba:15:48:1b:04:97:83:a6:56:d4:
07:78:59:37:e6:1d:d6:dc:84:e6:33:bd:01:51:9e:cf:10:13:
ff:e6:89:55:5a:a4:8e:1b:36:cc:ba:6b:eb:f9:6f:fd:2e:e6:
3f:b6:85:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVVtMD0lIjG5wl1jwFgGJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNDUzYzA5MWY2YzBjYTRiMDJiMWM0Y2ExN2JiNjVkMWRl
MTY4OTUwHhcNMjUwOTA3MDQwMDQzWhcNMjUwOTA4MDQwMDQzWjAzMTEwLwYDVQQD
EygyNmE3NDVmYTFhYjAxZDdkNjliMTg2ZjYxMGQxODFjZDk1ZTE5ZjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiQNb0eqXnOyXB2E+worvyW1PaLm
6pg7XfW1ZExGv2FcdlXLyzdGuqGCQzG1x42aI5rFqZzYnbBH1vp7ewNPcJsB+6J/
qgoQNT/PaQZ1pWOnIJsbwdUWXJtj6UAtCVn5epuu1lIBTAPxLhlo0NWggoK2oJMf
dvQsamCx5NL+ppRJn5oKEo+iIu7ZMKx0YucaQkFsu7nl0y32B+LeJEhnBHwVUEmn
QUudE6qkcPyn20nA5laarVCvPRPsXEm53K96HZXwBlVySj8ekAy/XIe+qtvChySx
yNhtu7zIMb8xjKafr9Qj/sRPm/ug81l1Qscxc/XiSzTwiWP5ZLjzQg5RowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCanRfoasB19abGG9hDRgc2V4Z8+MB8GA1UdIwQY
MBaAFGxFPAkfbAyksCscTKF7tl0d4WiVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkVVOENSOXNES1N3S3h4TW9YdTJYUjNoYUpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xOThkZjctNzk5Mi00NGRmLWE2Y2Et
YmVjMGU5ZWU0YTI1LzEvYkVVOENSOXNES1N3S3h4TW9YdTJYUjNoYUpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8xOThkZjctNzk5Mi00NGRmLWE2Y2EtYmVjMGU5ZWU0YTI1
LzEvYkVVOENSOXNES1N3S3h4TW9YdTJYUjNoYUpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZTNnbn0R
9mn4yiNVVreDoac32fP9wsRWhPLTg+uinknfp2+6x7XGtT3L5AldEeyI59vHLHL0
AKmhjRfQdwx4DsOkmh7onw2qJVTniqysLJe+jr3fW1VroLaMfLuPi4dci8DyExC/
r7n9aUU3tyIw3WoaPt9rs/tKXrvyW6BYfPFVPC9Kmy7gwSSOr8zquPJKJF+40mDm
Fe26pwS4mAvfEcdk6W0lGgo9R8dUavdkXenp2/YyAu2NyHcyGinDCMi1ZB19V/rd
CpntpyuWBQu6FUgbBJeDplbUB3hZN+Yd1tyE5jO9AVGezxAT/+aJVVqkjhs2zLpr
6/lv/S7mP7aFnQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:15 2025 by rpki-client