Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
File: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft (raw, json)
Hash identifier: XH4X/2jSyIvIia6QLG9Am5okYNsqHhOtd6oEcLoo4ZY=
Subject key identifier: 83:37:9B:CD:05:D2:E1:40:89:4F:67:02:DB:0F:D2:2A:87:43:D0:A5
Authority key identifier: 04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
Certificate issuer: /CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Certificate serial: 0197477A1426ADFC9FDB38306D48D92D9A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 23:01:12 +0000
Manifest this update: Fri 06 Jun 2025 23:01:12 +0000
Manifest next update: Sat 07 Jun 2025 23:01:12 +0000
Files and hashes: 1: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl (hash: gAx27AOpKp50bw1m4dlgljfJoRiKNCKe0VdwohaHpoM=)
2: NmkuWisNNR7yCTNM4BUhyNRxVxo.roa (hash: qERY3AcVPARhb2r8P5F7KsbGo82n2f3qr7wO9B4TKno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:7a:14:26:ad:fc:9f:db:38:30:6d:48:d9:2d:9a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Validity
Not Before: Jun 6 23:01:12 2025 GMT
Not After : Jun 7 23:01:12 2025 GMT
Subject: CN=83379bcd05d2e140894f6702db0fd22a8743d0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8c:87:95:39:71:9c:28:eb:2f:e2:4e:04:f3:
ae:00:e2:3a:bf:1d:41:40:cf:69:55:7b:5c:2a:d1:
1d:0d:c6:18:e2:ab:ca:7a:ce:65:69:0e:b8:be:1b:
80:8a:8c:c6:b2:2f:be:4e:1a:1b:d7:40:f4:82:8b:
be:f3:48:24:f9:04:f5:c4:c9:96:a9:a7:31:20:0b:
8c:ff:da:8e:10:ff:c1:3c:46:95:3e:44:62:a9:ac:
a4:47:af:e2:8d:95:4a:2d:61:8b:89:ad:d4:8b:9d:
fd:ff:49:37:5a:31:8d:05:0b:9c:2c:c6:1c:1c:5d:
f1:0a:ee:dd:b2:90:e3:1b:7e:08:75:24:e6:cb:b2:
e7:24:a2:2a:72:d0:fd:c8:ae:d2:11:41:79:72:1e:
7d:40:b8:24:28:0d:b2:2d:1e:cc:4b:4e:d9:d8:e4:
f4:25:fe:35:13:15:43:80:2d:57:9c:fa:d1:31:c1:
71:71:58:f4:c1:8c:b5:9a:85:6a:2f:bc:f8:12:07:
df:4c:18:f5:ae:7a:e7:4c:0b:44:32:f6:b8:be:f2:
02:2f:aa:ff:9e:71:8f:32:52:6e:53:0d:8d:3f:4d:
7b:74:68:fc:f8:d1:80:03:be:97:a0:a5:95:ff:36:
64:ce:c8:c7:7b:f2:3d:a2:f9:dd:23:4b:2d:7b:69:
b2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:37:9B:CD:05:D2:E1:40:89:4F:67:02:DB:0F:D2:2A:87:43:D0:A5
X509v3 Authority Key Identifier:
keyid:04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e5:06:87:79:e1:cd:32:5f:f4:b0:72:3a:2f:c2:54:8f:ae:
ea:46:ae:13:4f:3b:a4:3c:2b:8e:d1:70:dd:84:27:df:6f:72:
44:1a:2e:ed:c4:19:86:65:21:68:8d:92:d1:68:87:31:19:4d:
e2:6b:1a:21:49:ac:3a:54:16:b9:b4:b6:4a:f7:15:74:35:70:
e1:70:2c:42:c8:3d:e4:3f:39:f1:11:a4:bb:a7:63:5f:26:13:
2e:42:0a:ea:c9:1a:79:d9:96:15:8b:6c:50:60:eb:ed:be:86:
cc:98:4e:36:5f:62:29:d2:e1:96:82:7d:fa:15:d4:a8:21:84:
90:27:e7:84:41:75:d1:6b:9f:96:00:a8:24:96:98:7b:d6:49:
1c:bf:4c:54:52:24:34:fd:29:1c:c6:38:ca:0a:99:a2:de:2a:
dd:a6:c5:02:cf:9f:41:1e:63:ec:48:ae:c0:a5:79:a4:ce:4c:
35:28:10:cc:c8:83:21:c0:55:32:2a:26:52:f1:78:b2:09:67:
42:39:9a:a8:a7:34:d5:c5:03:7b:80:91:a4:f5:ee:ca:c0:6d:
6b:aa:e8:bf:be:0f:39:21:ef:0c:2c:b8:d4:c4:5e:3f:75:81:
d9:19:18:eb:1c:c8:61:76:88:52:2b:60:22:2c:f4:25:29:a5:
c2:56:5b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:58:04 2025 by rpki-client