Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft
File: bevRnamMJ_q6t7LylLz57Gr0SQU.mft (raw, json)
Hash identifier: LXXjL8tSbeTneC3KSizWN2N6+82cNUak+UfBlZeHQUI=
Subject key identifier: C9:58:4A:5F:52:26:85:EC:F3:EA:83:17:52:FA:2A:61:06:3F:B1:CE
Authority key identifier: 6D:EB:D1:9D:A9:8C:27:FA:BA:B7:B2:F2:94:BC:F9:EC:6A:F4:49:05
Certificate issuer: /CN=6debd19da98c27fabab7b2f294bcf9ec6af44905
Certificate serial: 019A72CA260998A454AAB174AE079BA91833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bevRnamMJ_q6t7LylLz57Gr0SQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 12:00:41 +0000
Manifest this update: Tue 11 Nov 2025 12:00:41 +0000
Manifest next update: Wed 12 Nov 2025 12:00:41 +0000
Files and hashes: 1: PkuzLc70cdZNfzBONmq4AlueJ3c.roa (hash: IUupDkJ+pYc5DFM+j/FDYtvyoxCFZGawCLtSOO5xgU0=)
2: bevRnamMJ_q6t7LylLz57Gr0SQU.crl (hash: GdrMT14D6Pb0hRVSgq7d+ux4WsVxd1N5pimGIHnhgEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bevRnamMJ_q6t7LylLz57Gr0SQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:26:09:98:a4:54:aa:b1:74:ae:07:9b:a9:18:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6debd19da98c27fabab7b2f294bcf9ec6af44905
Validity
Not Before: Nov 11 12:00:41 2025 GMT
Not After : Nov 12 12:00:41 2025 GMT
Subject: CN=c9584a5f522685ecf3ea831752fa2a61063fb1ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:45:9e:aa:df:20:74:43:48:88:ec:78:fb:3c:
da:ae:a0:5d:d5:2b:30:e8:b3:5b:bf:f0:42:e5:9a:
a6:29:39:b4:53:ff:3a:76:25:e8:a1:13:5d:42:36:
30:9d:7e:3e:b9:2d:6c:1d:d6:4d:1b:87:87:13:9d:
8b:d6:ba:13:50:07:54:07:d4:d3:ae:e7:40:25:58:
03:7a:c4:b5:65:ab:ab:dd:f6:41:56:30:e4:33:38:
d5:1c:62:1b:ae:a1:82:f0:de:0f:2e:a7:76:b9:b2:
6b:7e:1b:e6:02:9c:87:a4:61:2a:8c:cd:04:2f:57:
c0:07:34:34:3a:08:8e:ef:ac:4c:1d:3c:bb:3d:af:
65:1e:71:2d:84:96:27:1d:9e:70:26:a4:46:f7:51:
29:0a:93:0f:71:7c:22:9b:1c:e9:3f:73:a0:20:22:
e1:e3:c2:c6:86:55:46:cb:67:06:2b:33:0e:34:cd:
64:1e:46:05:7f:bc:3a:9c:54:77:5f:26:14:19:23:
7e:7a:d6:61:96:58:5a:45:de:e0:e9:f4:3b:62:cc:
41:37:e2:df:31:4d:50:91:db:ad:c2:35:f4:18:d0:
1a:6d:be:4a:f2:31:84:35:be:fd:f3:b5:c2:51:c5:
1f:f8:6b:d6:2a:d8:db:cb:70:62:05:f7:5c:1d:18:
f3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:58:4A:5F:52:26:85:EC:F3:EA:83:17:52:FA:2A:61:06:3F:B1:CE
X509v3 Authority Key Identifier:
keyid:6D:EB:D1:9D:A9:8C:27:FA:BA:B7:B2:F2:94:BC:F9:EC:6A:F4:49:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bevRnamMJ_q6t7LylLz57Gr0SQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:81:54:7c:11:5c:ed:28:0b:da:c3:10:c0:48:d8:7f:51:9e:
f4:96:fe:0f:34:67:02:93:ba:0a:b2:cd:9b:bb:04:1d:96:b1:
95:c1:4c:ba:ce:c8:98:ca:2d:0f:c9:dd:d3:d3:be:d9:ce:79:
57:a6:ea:0c:ec:6e:d2:cd:7f:92:6b:b9:e9:29:c2:29:50:e4:
01:ae:7b:65:96:5b:fb:20:e3:2d:30:0c:89:1b:3e:c7:b1:82:
6a:d7:23:96:08:67:0e:b8:27:37:d5:69:e6:c3:47:9a:f3:c1:
97:f8:d5:6d:ac:b5:f9:be:21:ae:21:cf:1e:1d:18:a3:3e:33:
c6:b7:cf:06:c4:76:ec:9a:11:31:53:0a:aa:84:2f:12:96:07:
0d:13:8c:5a:57:7e:1d:76:32:10:fc:0d:bd:1d:2d:c7:13:3c:
95:94:17:43:25:2c:ca:3e:b5:19:74:fa:83:40:38:75:9d:cd:
4a:06:31:f7:3b:13:d5:16:77:37:d5:da:ca:3f:0e:eb:0d:b5:
05:15:03:a4:e2:1b:bf:ae:aa:55:be:a9:fb:a9:2c:9c:eb:59:
2a:64:50:94:ab:a1:50:0c:db:26:c3:c7:7e:ba:ad:ad:bf:e6:
55:f7:5e:d8:60:a5:08:8c:f9:39:91:c5:0e:28:2a:54:82:b5:
50:e9:2c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:49 2025 by rpki-client