Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/beisSVlyXk_tHDMNIrXNBgJBpRQ.mft
File: beisSVlyXk_tHDMNIrXNBgJBpRQ.mft (raw, json)
Hash identifier: f7hJLY8ZBmZ22bfpreiZtGDaHei05hpB6ma1x2ZsRjg=
Subject key identifier: 28:31:B4:C2:03:39:F0:EB:18:3D:8B:A5:38:54:DA:F9:81:84:0B:5F
Authority key identifier: 6D:E8:AC:49:59:72:5E:4F:ED:1C:33:0D:22:B5:CD:06:02:41:A5:14
Certificate issuer: /CN=6de8ac4959725e4fed1c330d22b5cd060241a514
Certificate serial: 019A70DC628DAA05338CE91D4B9F72453544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beisSVlyXk_tHDMNIrXNBgJBpRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/beisSVlyXk_tHDMNIrXNBgJBpRQ.mft
Manifest number: 0645
Signing time: Tue 11 Nov 2025 03:01:22 +0000
Manifest this update: Tue 11 Nov 2025 03:01:22 +0000
Manifest next update: Wed 12 Nov 2025 03:01:22 +0000
Files and hashes: 1: 0YIOVBW-uwL5vGELnsoWXjbdbbc.roa (hash: YnwOh3rBgK7q6cV+gaFLtLus1V2Wyasj+jLsXsDsPIs=)
2: beisSVlyXk_tHDMNIrXNBgJBpRQ.crl (hash: wanjcelys8IWK+jA3R4FyIDBhle/JJgNwFQfGVqK8BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/beisSVlyXk_tHDMNIrXNBgJBpRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/beisSVlyXk_tHDMNIrXNBgJBpRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/beisSVlyXk_tHDMNIrXNBgJBpRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:62:8d:aa:05:33:8c:e9:1d:4b:9f:72:45:35:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6de8ac4959725e4fed1c330d22b5cd060241a514
Validity
Not Before: Nov 11 03:01:22 2025 GMT
Not After : Nov 12 03:01:22 2025 GMT
Subject: CN=2831b4c20339f0eb183d8ba53854daf981840b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2f:ea:57:f9:9b:bd:80:e5:57:51:63:7c:ed:
0e:bc:ed:ce:58:a8:10:cd:31:ec:1a:29:5c:93:4a:
b1:01:08:57:ab:84:a0:bd:b1:06:0c:e4:83:66:0c:
9b:93:b0:3d:c9:fb:b8:6d:a4:9f:0e:6a:80:d8:12:
d0:31:92:3f:01:66:99:a7:22:e2:57:11:d3:b8:8a:
df:99:74:74:50:6f:ae:1e:04:ff:0b:80:1a:5f:d2:
ff:ec:b5:06:66:0a:17:b3:b4:b8:fe:68:d7:b1:6b:
66:41:fb:58:1a:10:2e:da:f7:99:e6:95:bf:24:82:
f0:06:e5:9b:7b:91:f4:46:0b:7d:e8:4b:e6:5c:fe:
7f:d3:7b:e7:1c:79:d2:7b:b5:79:e0:13:1d:8d:5c:
4a:0f:5d:8a:0b:c0:c8:a6:2f:83:2f:c0:cd:69:12:
56:9e:b0:40:ba:4c:0d:d7:d0:ce:1d:18:5d:18:2f:
16:cc:7e:fe:3c:b8:06:3b:a1:55:59:92:1f:a6:1a:
83:11:22:6f:b9:ae:af:33:40:4d:55:52:32:be:01:
66:e3:ab:d9:ea:ba:aa:ad:8e:6e:08:d2:df:a7:76:
02:2e:fb:b4:f7:56:3e:68:2e:45:10:98:3f:27:d1:
71:12:67:6b:21:e8:f1:67:06:e0:9a:eb:4f:f9:7f:
b5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:31:B4:C2:03:39:F0:EB:18:3D:8B:A5:38:54:DA:F9:81:84:0B:5F
X509v3 Authority Key Identifier:
keyid:6D:E8:AC:49:59:72:5E:4F:ED:1C:33:0D:22:B5:CD:06:02:41:A5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beisSVlyXk_tHDMNIrXNBgJBpRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/beisSVlyXk_tHDMNIrXNBgJBpRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/beisSVlyXk_tHDMNIrXNBgJBpRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:3b:29:47:3f:54:2f:f1:50:b6:34:c2:63:90:67:af:43:48:
e8:35:23:dd:81:86:91:ec:ca:e8:d8:d6:c6:41:3c:89:c2:01:
84:33:02:05:2b:b1:4d:52:b8:ba:ae:fd:a2:90:d2:14:a3:6e:
82:28:ae:ba:7a:b8:24:63:f3:77:4a:a9:90:b6:d1:d8:70:4c:
38:b2:e7:f2:c3:66:f9:d8:76:bd:c1:ff:2c:dc:9f:f2:dc:fb:
98:bf:65:77:17:0d:99:9a:6a:e0:26:62:b7:c9:f0:28:a4:f2:
50:3d:31:c3:4f:5c:e2:5a:40:2c:a3:15:03:80:9c:b2:cd:f0:
a6:9a:ff:e7:b6:96:94:38:ea:55:b7:cb:94:1a:5e:e9:3f:e3:
4e:6d:f5:06:d7:0b:f2:6a:4f:4a:47:4d:e8:b0:53:9e:0b:35:
c6:0f:10:f5:26:a8:86:bb:4b:f5:bd:17:1f:d0:9a:84:ee:c1:
ca:5f:9d:79:fb:13:16:58:15:71:34:4b:b8:8d:35:fa:97:1b:
c4:61:2f:61:19:ec:11:bb:a0:38:c4:e4:7d:05:ca:de:b9:c4:
02:b4:07:d5:d4:30:5b:52:58:40:b4:f0:a6:47:19:5b:76:73:
44:31:fc:6b:af:b7:d6:b2:e8:4b:13:a3:d7:71:93:a5:39:f2:
a7:78:51:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:41 2025 by rpki-client