Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
File: 14BeHP_BOS59F2j48FVKHH9jRK0.mft (raw, json)
Hash identifier: rKCxT16xGJZlE/hwTOlzNkSKAf+HiE2agNcZFw4JP9g=
Subject key identifier: E7:16:23:BD:10:BC:5D:1D:E2:E1:D7:5B:16:97:68:D5:27:0D:EA:0B
Authority key identifier: D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD
Certificate issuer: /CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad
Certificate serial: 019A7225E717573243AF48C22DA6394AD680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
Manifest number: 1457
Signing time: Tue 11 Nov 2025 09:01:17 +0000
Manifest this update: Tue 11 Nov 2025 09:01:17 +0000
Manifest next update: Wed 12 Nov 2025 09:01:17 +0000
Files and hashes: 1: 14BeHP_BOS59F2j48FVKHH9jRK0.crl (hash: rJpfWUk+sHkzZuj5Xyw4ORDCkP9HvnowCPptIcQcg50=)
2: xcIstN59HOzGE1G9ty62N5JYD0o.roa (hash: BZxFBF1fX1zEMIn2hYmGhW7/ZSCk8wjGWMR8N700UvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:e7:17:57:32:43:af:48:c2:2d:a6:39:4a:d6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad
Validity
Not Before: Nov 11 09:01:17 2025 GMT
Not After : Nov 12 09:01:17 2025 GMT
Subject: CN=e71623bd10bc5d1de2e1d75b169768d5270dea0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:94:1e:3b:f1:f7:9b:41:6c:2e:72:76:66:a9:
60:fb:da:04:9f:8f:7d:9b:d9:e3:00:94:6f:16:19:
35:2c:d8:00:6f:c9:34:fc:f4:a5:2a:5f:90:ec:be:
67:e7:92:11:05:f1:72:fd:b3:1f:67:0f:d6:50:f5:
87:bb:fe:28:91:b8:70:b2:d7:ea:91:8f:f1:01:fa:
4f:57:77:e3:11:3c:ab:73:c3:20:12:bd:de:63:36:
55:34:cd:c6:42:88:6e:af:ca:64:08:e1:f4:18:59:
af:e7:46:e1:b9:e9:a6:0f:aa:ef:96:5e:f1:b6:66:
d6:9f:27:f6:fd:01:85:33:1d:08:29:77:1f:88:08:
4d:a6:92:55:fe:bc:5a:a3:71:b5:d4:02:87:00:27:
5e:fb:0f:12:a8:d3:47:63:b4:fc:49:06:20:2f:e7:
d3:47:8b:51:23:97:47:dc:2f:84:74:33:f9:69:e1:
d7:06:8a:ed:0b:57:23:e5:3e:33:14:5d:88:aa:73:
d9:13:74:bb:4b:07:43:00:0a:84:63:73:0b:eb:fd:
e7:6a:e8:dd:ab:81:98:fc:8b:ec:fe:c7:c7:d5:de:
45:a0:11:a7:34:f1:4f:67:48:4f:6b:04:46:48:3b:
51:d0:f8:df:3a:32:9f:31:b7:14:35:ca:45:70:00:
d6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:16:23:BD:10:BC:5D:1D:E2:E1:D7:5B:16:97:68:D5:27:0D:EA:0B
X509v3 Authority Key Identifier:
keyid:D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:26:77:b2:f2:66:d7:26:b1:c7:70:88:94:36:69:93:fc:d9:
16:e8:74:9c:62:28:e2:b9:51:f0:a8:dd:d2:9e:07:8f:30:d2:
62:a6:8a:86:85:c7:ba:56:0f:98:b8:ba:3c:db:8c:05:f8:9c:
cf:bf:14:8f:72:77:77:a4:b8:c6:a6:bb:3f:35:ea:93:dd:c4:
01:68:e4:e0:8a:83:40:95:df:f7:52:37:5d:6e:32:f8:4f:a7:
8a:a3:4e:89:34:98:9c:3a:e4:a5:f8:95:6b:ab:77:2d:aa:cb:
ec:e0:f4:15:f3:f0:71:4c:55:5d:0b:25:d0:0d:d8:99:ba:8d:
86:77:de:37:fb:63:9c:78:92:6a:ed:97:b6:c9:f5:24:c8:cb:
06:c7:7f:81:3b:20:fc:4f:6f:42:f4:f9:71:fe:17:cb:c9:9d:
9b:76:e3:a1:dd:c9:7a:70:36:23:ae:e6:e1:1e:af:6b:a1:dc:
19:a9:93:de:46:91:0e:f2:13:cc:7d:3b:36:fe:89:08:ae:68:
87:11:99:b1:ef:21:e2:89:a6:d2:da:27:37:bc:d1:af:8b:c4:
82:3e:b4:38:91:e7:d6:f4:d2:7f:68:d2:ef:f3:16:e2:66:cf:
2e:b5:f6:8a:b8:7d:76:d8:f7:36:eb:60:e0:26:34:4b:89:8f:
78:a7:6e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:28:08 2025 by rpki-client