Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
File: beKqsHfJ7vED-XmE8wnYkeWhmYM.mft (raw, json)
Hash identifier: 5XvA3OXoV+uAwS4VNHz4cgcd/aFoDMjbUyT1Y/y+5Wg=
Subject key identifier: 3A:52:EA:F6:33:5E:EB:86:3E:92:8E:76:A7:B6:6F:0E:55:E8:E0:8C
Authority key identifier: 6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
Certificate issuer: /CN=6de2aab077c9eef103f97984f309d891e5a19983
Certificate serial: 01992DB54A01524E2B0199C84C9AEC08998B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
Manifest number: 167C
Signing time: Tue 09 Sep 2025 09:01:19 +0000
Manifest this update: Tue 09 Sep 2025 09:01:19 +0000
Manifest next update: Wed 10 Sep 2025 09:01:19 +0000
Files and hashes: 1: 48IOS32yvZQcDKOVIMZ6daf-9KA.roa (hash: HmF8WESoe3mmtI22Berk7+aTu/j0V86FjOKvEurztNM=)
2: beKqsHfJ7vED-XmE8wnYkeWhmYM.crl (hash: DFwEeOR38mPDIvjTvo9dBvyiICgVj3559Ox+6BaDsz4=)
3: tmeZ0Ov1HvxadlJQTOHPYduqrcA.roa (hash: 5a1G608q0BN2ymFOZ4ty/8IB/CrBTEemrLvT6asz5iY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:b5:4a:01:52:4e:2b:01:99:c8:4c:9a:ec:08:99:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6de2aab077c9eef103f97984f309d891e5a19983
Validity
Not Before: Sep 9 09:01:19 2025 GMT
Not After : Sep 10 09:01:19 2025 GMT
Subject: CN=3a52eaf6335eeb863e928e76a7b66f0e55e8e08c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:34:ab:bc:70:4d:52:57:bd:c7:9f:b8:2a:34:
50:66:ad:d1:11:da:aa:f8:d6:a1:9a:aa:1a:e0:01:
16:a6:66:75:4f:3a:2c:bb:5a:57:c2:25:73:63:28:
bb:02:c0:a3:bb:a8:7c:07:18:88:7b:44:38:79:a8:
5f:db:b5:8b:73:c9:d2:27:54:1f:52:ed:23:8d:8a:
db:3a:26:3b:38:87:82:62:bd:47:aa:0d:75:75:d3:
d2:0a:32:a2:e6:58:a0:4f:48:e6:f8:b2:ed:c9:af:
d2:8b:7a:30:8d:2c:60:96:2c:59:c1:57:c2:f6:ad:
92:2e:c9:b2:55:38:f8:36:1e:9c:b6:e3:60:19:50:
68:30:e5:91:27:d6:dc:bf:7b:b4:5a:49:a1:3c:4a:
0c:9a:6d:12:fb:6a:90:2f:ea:66:6d:4c:42:13:a6:
9c:6d:7a:18:4a:cf:44:41:49:31:e5:f6:cc:c7:d1:
38:a1:ff:cd:35:f6:19:fc:11:1c:ea:71:3d:00:0f:
31:1a:b5:41:a8:d7:5e:fa:37:b3:d4:c0:bc:f7:2c:
05:0d:a8:b8:40:ec:08:61:ea:60:fd:66:eb:83:dc:
97:6c:db:89:a4:b5:bc:9b:38:51:6c:66:f6:3a:c6:
ee:be:2c:1c:06:08:4e:ef:ca:de:25:fa:bc:d5:c4:
97:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:52:EA:F6:33:5E:EB:86:3E:92:8E:76:A7:B6:6F:0E:55:E8:E0:8C
X509v3 Authority Key Identifier:
keyid:6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:4e:89:83:55:ca:2a:26:fc:83:d3:fd:3c:7b:91:e1:59:17:
59:ed:8b:b6:f1:bc:35:7a:5b:7a:ba:76:44:b6:7e:3c:a6:42:
e6:e2:4f:65:c0:68:24:c9:15:a3:81:b2:d1:17:26:36:df:6e:
4f:be:3f:c9:a4:3e:46:5a:5d:81:23:e3:04:ec:7e:80:bd:f5:
d4:02:ee:9f:ab:53:55:1f:a4:08:9d:ac:01:7d:e9:de:4f:f6:
2d:e3:c4:9d:ca:d4:b5:c5:04:be:69:77:b1:43:4c:04:32:42:
c8:76:bb:41:33:ec:b2:73:2f:b1:66:b9:bc:b8:7a:bc:ee:f3:
5c:cf:ec:5a:16:35:87:c4:3d:bd:42:f9:eb:84:57:43:1b:ec:
8b:47:0e:47:49:4a:c1:40:e5:b1:83:83:fb:67:ed:ed:a9:79:
3a:c7:2a:c6:bf:08:d2:9c:96:a8:2c:02:33:97:85:3c:ad:09:
50:35:f9:f0:73:c0:61:07:af:bf:28:4b:f4:46:f4:86:04:80:
2e:25:33:56:d9:f7:eb:ea:98:67:a3:3f:50:9a:9a:ad:e1:61:
5d:5d:40:21:20:c4:fc:6e:c6:ff:e4:bc:ab:72:7f:34:66:ee:
0f:ce:13:48:23:90:20:ad:b8:94:40:4e:78:cc:d3:33:08:0a:
f2:7b:13:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 13:36:54 2025 by rpki-client