Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
File: BEiJahxKydgBvx1rIL3vWXTVtPY.mft (raw, json)
Hash identifier: r6qQ+HNcBGC5y2N5PeqYlo78IU7u54YCJKpDqDp3RWQ=
Subject key identifier: 92:B0:5B:A9:23:E3:D7:33:3E:85:6A:09:DD:79:81:31:35:B5:12:2A
Authority key identifier: 04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6
Certificate issuer: /CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6
Certificate serial: 019A232E4ED6925F17371E520232E61FB847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
Manifest number: 0686
Signing time: Mon 27 Oct 2025 01:00:28 +0000
Manifest this update: Mon 27 Oct 2025 01:00:28 +0000
Manifest next update: Tue 28 Oct 2025 01:00:28 +0000
Files and hashes: 1: BEiJahxKydgBvx1rIL3vWXTVtPY.crl (hash: qaCKWlFekzfTd+s7iwqUuhSFhTbp7UTfctqteYa73wE=)
2: QXhXOb69R-6LwMYFMKWZze76zPM.roa (hash: eIFuk3TcS1CKNj+kDqIT+aNwYSr4f3EMWJAijhvNXoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:4e:d6:92:5f:17:37:1e:52:02:32:e6:1f:b8:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6
Validity
Not Before: Oct 27 01:00:28 2025 GMT
Not After : Oct 28 01:00:28 2025 GMT
Subject: CN=92b05ba923e3d7333e856a09dd79813135b5122a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a8:f9:5f:9e:0d:92:a2:65:11:1b:4a:bf:8b:
7c:87:19:54:da:cc:06:d2:29:be:a4:99:4e:fa:5d:
13:15:b3:4c:02:c1:86:ca:94:a2:3c:ba:03:ad:2f:
33:e2:a9:60:db:ad:a6:0f:f3:5c:c8:b6:3c:4b:00:
d7:32:22:5f:13:ae:9e:57:d3:64:35:1a:2e:f0:cc:
6d:0c:96:d5:a1:d1:98:69:13:24:9f:f0:ae:e9:ad:
d7:5c:22:b4:d9:c0:5a:b8:79:3b:33:64:af:4a:27:
2f:72:9b:f8:55:2a:5f:42:b9:e0:38:43:a7:5c:6b:
0b:3c:ef:9d:92:c4:9e:a4:1d:e6:02:26:47:ca:9f:
3a:b7:e0:4f:d9:99:72:64:07:86:8d:07:ab:be:a9:
7d:b0:c3:12:f1:32:df:c1:b5:b9:9b:38:e7:d2:ea:
11:f4:ac:1e:10:2a:a9:ae:28:14:4c:72:b5:87:f8:
78:6d:f4:d7:1d:d9:16:a5:10:6a:71:03:25:19:e8:
15:6a:70:59:7a:57:50:bf:da:67:4a:c8:42:fb:a5:
68:1a:eb:ed:79:59:17:36:59:b5:63:9e:e4:97:ca:
de:c4:94:bf:e8:24:09:92:f8:e5:e4:12:dc:7e:e8:
0b:a8:dd:83:aa:32:ae:6c:cd:41:7f:18:90:65:44:
f0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B0:5B:A9:23:E3:D7:33:3E:85:6A:09:DD:79:81:31:35:B5:12:2A
X509v3 Authority Key Identifier:
keyid:04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:fd:8a:07:6c:f1:83:4b:cf:c1:21:a3:b6:ac:5f:43:3d:14:
55:b2:d6:42:de:02:99:bd:6b:95:66:ac:1e:67:87:d2:7e:89:
92:f3:b1:e5:df:20:cf:7f:f8:d0:a2:46:33:47:bc:1c:e0:48:
c1:4e:33:85:e8:4e:93:36:e2:cb:23:6b:39:47:8d:8a:ee:28:
6c:65:26:32:32:7b:c7:8f:0b:81:a7:f3:c6:8f:31:73:2a:47:
fe:cc:86:06:63:19:48:69:98:34:cb:88:31:e9:23:e3:10:bb:
91:76:ec:a3:47:7b:b2:ee:96:bf:2a:58:33:d0:99:3d:5c:6c:
7d:cc:71:c2:ae:49:10:b6:91:14:57:d5:5a:24:a0:c4:a2:d5:
22:7b:4a:2f:b1:96:ff:b7:05:13:c0:a9:fe:2f:29:60:bd:03:
86:b1:74:58:43:b6:e9:55:ca:84:4b:6f:48:60:b4:be:4a:72:
ce:0b:b2:b1:2d:6f:f6:2b:f0:f7:ab:08:a4:96:c9:11:66:c6:
74:c3:de:13:8e:a7:7d:82:e2:5a:c8:46:44:53:f6:c2:16:68:
c6:cc:9f:e6:6c:c4:c9:29:a6:f3:86:e3:a1:7c:32:e6:c7:60:
53:ae:c1:b4:5c:87:2a:46:11:fa:c7:5a:55:28:36:e7:1b:73:
2f:33:1f:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZojLk7Wkl8XNx5SAjLmH7hHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NDg4OTZhMWM0YWM5ZDgwMWJmMWQ2YjIwYmRlZjU5NzRk
NWI0ZjYwHhcNMjUxMDI3MDEwMDI4WhcNMjUxMDI4MDEwMDI4WjAzMTEwLwYDVQQD
Eyg5MmIwNWJhOTIzZTNkNzMzM2U4NTZhMDlkZDc5ODEzMTM1YjUxMjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKj5X54NkqJlERtKv4t8hxlU2swG
0im+pJlO+l0TFbNMAsGGypSiPLoDrS8z4qlg262mD/NcyLY8SwDXMiJfE66eV9Nk
NRou8MxtDJbVodGYaRMkn/Cu6a3XXCK02cBauHk7M2SvSicvcpv4VSpfQrngOEOn
XGsLPO+dksSepB3mAiZHyp86t+BP2ZlyZAeGjQervql9sMMS8TLfwbW5mzjn0uoR
9KweECqprigUTHK1h/h4bfTXHdkWpRBqcQMlGegVanBZeldQv9pnSshC+6VoGuvt
eVkXNlm1Y57kl8rexJS/6CQJkvjl5BLcfugLqN2DqjKubM1BfxiQZUTw2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKwW6kj49czPoVqCd15gTE1tRIqMB8GA1UdIwQY
MBaAFARIiWocSsnYAb8dayC971l01bT2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkVpSmFoeEt5ZGdCdngxcklMM3ZXWFRWdFBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9kNDQyNmItYWQyNS00NGYxLTk4YWYt
YmNkZDEzNDk1MjkxLzEvQkVpSmFoeEt5ZGdCdngxcklMM3ZXWFRWdFBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9kNDQyNmItYWQyNS00NGYxLTk4YWYtYmNkZDEzNDk1Mjkx
LzEvQkVpSmFoeEt5ZGdCdngxcklMM3ZXWFRWdFBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADP2KB2zx
g0vPwSGjtqxfQz0UVbLWQt4Cmb1rlWasHmeH0n6JkvOx5d8gz3/40KJGM0e8HOBI
wU4zhehOkzbiyyNrOUeNiu4obGUmMjJ7x48Lgafzxo8xcypH/syGBmMZSGmYNMuI
Mekj4xC7kXbso0d7su6WvypYM9CZPVxsfcxxwq5JELaRFFfVWiSgxKLVIntKL7GW
/7cFE8Cp/i8pYL0DhrF0WEO26VXKhEtvSGC0vkpyzguysS1v9ivw96sIpJbJEWbG
dMPeE46nfYLiWshGRFP2whZoxsyf5mzEySmm84bjoXwy5sdgU67BtFyHKkYR+sda
VSg25xtzLzMf+Q==
-----END CERTIFICATE-----
Generated at Mon Oct 27 07:12:54 2025 by rpki-client