Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
File: beKqsHfJ7vED-XmE8wnYkeWhmYM.mft (raw, json)
Hash identifier: zhAXC1BSKmiIs/gn9HCF5/x2pI0UdTYKl2C6VyaBv7U=
Subject key identifier: 48:4F:13:5D:DA:74:4E:5D:1F:42:5D:4F:03:97:C0:81:8B:BD:9E:71
Authority key identifier: 6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
Certificate issuer: /CN=6de2aab077c9eef103f97984f309d891e5a19983
Certificate serial: 019752A280F4EB5343FD2389DB29EF4E28F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
Manifest number: 1586
Signing time: Mon 09 Jun 2025 03:01:10 +0000
Manifest this update: Mon 09 Jun 2025 03:01:10 +0000
Manifest next update: Tue 10 Jun 2025 03:01:10 +0000
Files and hashes: 1: 48IOS32yvZQcDKOVIMZ6daf-9KA.roa (hash: HmF8WESoe3mmtI22Berk7+aTu/j0V86FjOKvEurztNM=)
2: beKqsHfJ7vED-XmE8wnYkeWhmYM.crl (hash: Alw1f86gNYmlxXltLZzjXJCejjMwWVt4UCkMHeNUyIw=)
3: tmeZ0Ov1HvxadlJQTOHPYduqrcA.roa (hash: 5a1G608q0BN2ymFOZ4ty/8IB/CrBTEemrLvT6asz5iY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:80:f4:eb:53:43:fd:23:89:db:29:ef:4e:28:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6de2aab077c9eef103f97984f309d891e5a19983
Validity
Not Before: Jun 9 03:01:10 2025 GMT
Not After : Jun 10 03:01:10 2025 GMT
Subject: CN=484f135dda744e5d1f425d4f0397c0818bbd9e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:12:02:54:60:c0:14:0b:1c:14:dd:fd:87:eb:
2e:e7:85:65:0d:0a:e2:b6:17:c3:3d:2d:0f:8a:61:
e9:5a:8f:35:6b:ea:8c:18:c6:e2:05:45:b1:bb:1a:
0a:71:dd:db:ab:fc:0f:54:86:9e:06:8f:34:a4:36:
64:b8:cb:a5:82:31:f7:3f:ff:ef:84:4d:ef:bd:5c:
80:4f:1d:52:65:b1:b0:44:a0:c4:d6:b5:ff:06:ad:
89:e0:37:4c:2e:02:23:16:86:5c:e5:ef:c3:6f:36:
c2:18:10:42:29:6c:67:e4:4d:14:33:fe:e2:95:fc:
0d:0f:52:40:0e:be:3a:37:a7:60:9d:16:30:24:9d:
2c:05:6f:10:9a:73:96:43:ca:5d:b0:ba:05:b8:fc:
a0:a8:39:b4:d5:20:1e:db:e7:8f:3c:2b:40:2e:9a:
44:d5:cf:e5:b9:a8:73:2c:06:48:11:44:e9:92:04:
10:8e:e8:de:64:50:28:9c:72:60:0b:e6:c6:44:17:
b7:3e:84:84:75:99:92:07:6c:d8:e9:fe:a9:f9:7b:
dd:16:35:76:84:bc:99:65:aa:ef:ab:f0:da:07:b1:
86:c4:76:5a:6c:17:f4:b2:7f:67:fe:16:f5:68:41:
24:18:1b:05:7e:6c:ab:3d:fd:b7:88:35:92:d6:06:
d3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4F:13:5D:DA:74:4E:5D:1F:42:5D:4F:03:97:C0:81:8B:BD:9E:71
X509v3 Authority Key Identifier:
keyid:6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d9:b6:89:0a:69:3b:b3:94:ec:5c:a6:d2:1b:76:5e:aa:73:
da:50:80:8a:53:24:35:3b:9a:96:af:b7:d5:b0:23:2f:8b:84:
07:26:8d:d0:96:ab:17:4d:b0:5a:67:4b:0e:81:11:27:2c:d1:
19:03:45:27:1c:14:6d:26:18:3e:3a:3a:b6:8b:e1:8b:e6:32:
02:36:c2:02:35:aa:15:25:39:53:e3:dc:07:ab:33:4d:e7:5c:
b9:58:d3:b8:0a:36:ed:bf:5f:f8:c9:2d:e2:5f:da:42:ac:5c:
f7:ed:38:fe:35:39:14:34:ad:b6:c2:ea:e7:9b:f9:9c:85:ff:
f8:f9:88:91:b6:3b:8d:ee:47:dc:e0:4a:7f:fe:80:72:46:68:
5e:e0:29:9c:20:26:1f:f2:0c:53:c4:cc:fc:4b:93:90:b8:08:
95:05:f4:d2:0d:b5:64:9b:4d:ab:aa:df:93:4f:ab:99:9c:3e:
5f:d2:f5:9d:a1:da:ca:e7:6a:75:1b:b4:dd:29:13:6f:70:d4:
dc:f3:ee:fa:22:80:2d:2a:cd:e4:f4:e1:f9:1f:d4:a3:9c:f2:
da:c5:5e:41:31:30:b0:c7:42:a9:23:11:87:8e:a2:1a:3a:e8:
e8:4a:b2:24:64:57:df:87:f0:24:8b:b9:bb:fe:02:c3:bf:1d:
55:61:80:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:31:01 2025 by rpki-client