Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
File: BEw2vtOpgR94Jg5_X0_S_V54jgM.mft (raw, json)
Hash identifier: vjf0QQMV5S5Am76Z6iuKE2SYPxIe8lSnnGAkmDpFA1w=
Subject key identifier: 74:B0:5A:FB:1E:BA:7F:77:B0:3E:3B:EB:A7:34:A2:E4:5D:A0:E4:20
Authority key identifier: 04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
Certificate issuer: /CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Certificate serial: 019A7225C384E73D8C9055A828A079FA2ECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
Manifest number: 0DB7
Signing time: Tue 11 Nov 2025 09:01:08 +0000
Manifest this update: Tue 11 Nov 2025 09:01:08 +0000
Manifest next update: Wed 12 Nov 2025 09:01:08 +0000
Files and hashes: 1: AqwTFt-qyr9ctfZVh_Lc-HmCLI4.roa (hash: 6o18WCqQ1vQmdpr+KgNhHjoy4zxFnk5Txpn2BtXndjc=)
2: BEw2vtOpgR94Jg5_X0_S_V54jgM.crl (hash: qFutq4hwCaKNgAEAKNkFkOxMUornLRNvnmqM6TCQKT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c3:84:e7:3d:8c:90:55:a8:28:a0:79:fa:2e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Validity
Not Before: Nov 11 09:01:08 2025 GMT
Not After : Nov 12 09:01:08 2025 GMT
Subject: CN=74b05afb1eba7f77b03e3beba734a2e45da0e420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:85:29:28:d1:0d:66:d0:70:26:c5:f3:44:0d:
7a:c9:35:68:9a:55:94:2e:88:2f:0d:d4:dd:82:be:
15:6c:fc:9c:62:b9:cc:65:2d:2f:12:12:08:e3:80:
03:d6:75:6c:79:97:be:3d:52:2b:57:15:6f:53:7e:
f6:a6:82:71:9f:9d:40:07:7a:b6:1f:14:df:bf:aa:
3e:cd:ec:8c:22:22:88:81:38:fe:32:1e:dd:b7:36:
13:a0:c5:1e:6e:8e:b4:dd:5d:41:8c:d6:76:66:9a:
52:46:a8:23:e4:e7:77:d4:c4:06:ba:c1:44:32:5b:
c8:60:c1:a5:40:1a:44:27:09:ba:95:d5:55:1b:9e:
63:78:8d:e6:3e:0e:48:18:e0:da:b3:db:7a:c5:02:
01:40:4f:86:76:54:53:8c:fd:00:66:b2:48:62:89:
94:2c:34:ad:6e:a6:19:79:5b:86:c5:a8:ee:29:27:
4a:52:47:67:37:bb:58:59:f6:e2:9e:4e:06:e6:7a:
96:5a:0c:63:b9:bf:20:8d:23:97:62:6d:5a:83:1c:
4e:a9:f4:17:5f:49:f2:42:e7:47:a5:05:12:09:fa:
8f:d5:9b:00:f3:38:b9:47:04:9d:af:b9:45:10:13:
dd:cd:b5:03:96:ca:cd:0a:b1:9f:4b:4f:41:fa:a7:
02:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B0:5A:FB:1E:BA:7F:77:B0:3E:3B:EB:A7:34:A2:E4:5D:A0:E4:20
X509v3 Authority Key Identifier:
keyid:04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:78:53:9c:fa:35:1c:9e:1d:17:b1:4e:56:63:47:24:6f:57:
d2:4c:8e:65:0d:2b:39:3d:95:2b:38:bf:1c:38:9d:85:58:04:
d3:2c:5b:4f:5e:38:20:cc:95:c0:a4:06:e5:67:73:e5:dc:52:
cd:21:60:7c:01:b5:02:a3:19:54:aa:5a:70:43:db:23:f6:55:
33:cf:7d:c2:6a:14:88:d2:8f:bf:4e:98:34:df:43:49:0a:14:
78:d8:85:4d:0c:4f:51:19:9e:af:83:fa:ff:ca:c7:8f:e6:72:
f3:ca:4e:72:89:17:20:7e:af:ba:e1:d1:9a:18:80:87:08:e6:
ee:88:97:76:cb:99:6a:52:56:fc:05:f7:bd:18:5a:8e:0b:1b:
e6:7c:80:d7:a7:7f:8b:70:89:25:e9:cb:e8:49:22:7f:de:0e:
47:7a:91:c6:6e:b2:ca:f3:25:e0:e2:59:63:b0:f9:19:e4:71:
72:8c:02:2c:dc:5d:05:99:a9:7e:9a:d0:c0:06:35:16:14:92:
c0:50:82:6e:82:3c:e7:20:37:09:2a:17:ef:93:65:2d:22:59:
12:fa:40:ea:41:66:7a:11:79:e9:14:18:15:74:70:0f:79:01:
c2:2f:04:35:82:63:81:6c:56:40:00:02:47:e7:e3:a5:1f:1c:
7e:90:33:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJcOE5z2MkFWoKKB5+i7NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NGMzNmJlZDNhOTgxMWY3ODI2MGU3ZjVmNGZkMmZkNWU3
ODhlMDMwHhcNMjUxMTExMDkwMTA4WhcNMjUxMTEyMDkwMTA4WjAzMTEwLwYDVQQD
Eyg3NGIwNWFmYjFlYmE3Zjc3YjAzZTNiZWJhNzM0YTJlNDVkYTBlNDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYUpKNENZtBwJsXzRA16yTVomlWU
LogvDdTdgr4VbPycYrnMZS0vEhII44AD1nVseZe+PVIrVxVvU372poJxn51AB3q2
HxTfv6o+zeyMIiKIgTj+Mh7dtzYToMUebo603V1BjNZ2ZppSRqgj5Od31MQGusFE
MlvIYMGlQBpEJwm6ldVVG55jeI3mPg5IGODas9t6xQIBQE+GdlRTjP0AZrJIYomU
LDStbqYZeVuGxajuKSdKUkdnN7tYWfbink4G5nqWWgxjub8gjSOXYm1agxxOqfQX
X0nyQudHpQUSCfqP1ZsA8zi5RwSdr7lFEBPdzbUDlsrNCrGfS09B+qcC2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSwWvseun93sD4766c0ouRdoOQgMB8GA1UdIwQY
MBaAFARMNr7TqYEfeCYOf19P0v1eeI4DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkV3MnZ0T3BnUjk0Smc1X1gwX1NfVjU0amdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9hZTc0MGItMTBjZC00ZjRkLThmNmMt
MzQxNGZkNTAyOWU5LzEvQkV3MnZ0T3BnUjk0Smc1X1gwX1NfVjU0amdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9hZTc0MGItMTBjZC00ZjRkLThmNmMtMzQxNGZkNTAyOWU5
LzEvQkV3MnZ0T3BnUjk0Smc1X1gwX1NfVjU0amdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFXhTnPo1
HJ4dF7FOVmNHJG9X0kyOZQ0rOT2VKzi/HDidhVgE0yxbT144IMyVwKQG5Wdz5dxS
zSFgfAG1AqMZVKpacEPbI/ZVM899wmoUiNKPv06YNN9DSQoUeNiFTQxPURmer4P6
/8rHj+Zy88pOcokXIH6vuuHRmhiAhwjm7oiXdsuZalJW/AX3vRhajgsb5nyA16d/
i3CJJenL6Ekif94OR3qRxm6yyvMl4OJZY7D5GeRxcowCLNxdBZmpfprQwAY1FhSS
wFCCboI85yA3CSoX75NlLSJZEvpA6kFmehF56RQYFXRwD3kBwi8ENYJjgWxWQAAC
R+fjpR8cfpAzfQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:37:04 2025 by rpki-client