Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
File: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft (raw, json)
Hash identifier: VNarMlheI5nSIvc+pTePE73w1d0Yd6JVhD1QrHhBMYw=
Subject key identifier: 1E:6C:C5:43:1B:1C:83:9C:A8:3A:FB:23:FB:17:65:8D:32:EC:E1:04
Authority key identifier: 04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
Certificate issuer: /CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Certificate serial: 019A729366F3EFF91EAF8AE50F1749192C55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 11:00:53 +0000
Manifest this update: Tue 11 Nov 2025 11:00:53 +0000
Manifest next update: Wed 12 Nov 2025 11:00:53 +0000
Files and hashes: 1: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl (hash: V2dExdkGtVb7zLWp9ImWtv9OYSQbfT+Rcfbr+t08tbU=)
2: NmkuWisNNR7yCTNM4BUhyNRxVxo.roa (hash: qERY3AcVPARhb2r8P5F7KsbGo82n2f3qr7wO9B4TKno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:66:f3:ef:f9:1e:af:8a:e5:0f:17:49:19:2c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Validity
Not Before: Nov 11 11:00:53 2025 GMT
Not After : Nov 12 11:00:53 2025 GMT
Subject: CN=1e6cc5431b1c839ca83afb23fb17658d32ece104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:da:8f:6c:8f:06:33:0b:c8:8b:89:18:60:d4:
02:c1:a4:0d:43:93:83:17:7a:fe:a2:f9:58:c8:de:
ba:5e:5c:29:92:df:f0:81:35:86:79:23:7b:f6:b1:
af:31:de:ed:9a:90:2c:0c:8d:97:10:a3:3b:31:0f:
99:2f:b5:64:ab:14:1c:24:bd:f6:e9:97:1c:93:f1:
95:3d:bf:10:ee:b1:20:c6:e1:0c:c7:76:ff:21:b7:
2a:b0:4c:eb:67:ce:a2:33:d1:75:e0:ff:7b:94:b1:
dd:56:c4:6e:b1:7b:a8:c1:ba:71:20:b3:78:d7:80:
bd:b6:34:17:ec:a1:c7:08:ee:b7:cd:83:f4:61:89:
7a:15:eb:ce:73:31:b6:3f:1f:79:3c:69:ae:e9:6e:
4a:dd:33:92:5c:54:57:93:87:5d:56:77:8d:ec:f7:
8a:ec:7b:53:2d:7b:26:2a:29:a3:a4:de:3f:46:f7:
48:65:83:0c:f3:81:8a:07:0a:66:71:a4:e6:cd:f0:
6c:9b:e3:bb:9d:6e:1f:f9:26:cd:43:6e:46:48:fc:
d5:47:74:01:f4:f3:eb:33:90:4a:50:f4:b3:34:92:
99:af:4f:05:ec:c5:c8:bf:6f:d9:e0:8c:f1:39:aa:
0a:3b:0a:17:9f:f4:3b:eb:87:9b:f7:ce:f4:b6:1c:
65:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6C:C5:43:1B:1C:83:9C:A8:3A:FB:23:FB:17:65:8D:32:EC:E1:04
X509v3 Authority Key Identifier:
keyid:04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:55:e2:46:54:57:8c:05:c3:b4:d0:7a:26:e2:25:59:b1:61:
7b:64:e8:36:1f:7c:db:88:28:65:0e:f0:15:e9:67:5a:ce:44:
88:f1:21:90:ee:df:35:a5:a9:61:f0:2d:94:ea:91:d7:83:ec:
97:63:0a:d7:34:96:bc:50:21:cc:fd:91:70:85:f9:76:f3:6a:
e5:9d:1c:46:a2:a3:9c:80:7b:b4:7a:77:77:da:d7:17:04:94:
3d:5d:38:d4:b9:f4:a2:62:50:f1:bb:c7:3c:d1:3d:a7:1e:8a:
c5:d5:3a:45:02:c1:42:d5:47:08:e7:3a:5f:2e:c7:60:8c:5e:
5f:28:b9:13:c1:ef:26:69:24:12:f0:f9:3b:07:8d:ee:9d:cb:
36:4a:8e:14:ad:1b:62:11:49:ad:dc:ec:6d:c0:34:d0:21:fb:
64:0d:3d:7d:b4:62:43:5e:28:3e:8b:bd:7a:a7:cb:7c:8f:0c:
1a:6b:30:19:b9:60:f3:0e:b9:15:41:53:fb:7e:32:0c:9d:4d:
c8:f8:1f:16:d8:ce:b7:13:8c:4f:4e:5f:15:32:9e:bb:ed:af:
29:c0:64:47:33:a9:e9:c3:97:d5:4b:b4:cc:a5:be:cb:c1:6f:
e6:39:81:c9:fd:a7:bd:25:45:ad:c4:85:6c:e7:4f:c4:f9:7d:
cf:51:66:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:31 2025 by rpki-client