Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
File: beKqsHfJ7vED-XmE8wnYkeWhmYM.mft (raw, json)
Hash identifier: wtaoY0FdRZjtuh/25qlDgFIyInr68/Vni31ogL/XL0U=
Subject key identifier: 23:0D:FE:0D:C3:82:9A:BF:B9:1F:04:BB:82:DA:80:26:CE:84:75:A0
Authority key identifier: 6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
Certificate issuer: /CN=6de2aab077c9eef103f97984f309d891e5a19983
Certificate serial: 019A26D4444D4D69ED7EDBEB611F429A1541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
Manifest number: 16FD
Signing time: Mon 27 Oct 2025 18:00:36 +0000
Manifest this update: Mon 27 Oct 2025 18:00:36 +0000
Manifest next update: Tue 28 Oct 2025 18:00:36 +0000
Files and hashes: 1: 48IOS32yvZQcDKOVIMZ6daf-9KA.roa (hash: HmF8WESoe3mmtI22Berk7+aTu/j0V86FjOKvEurztNM=)
2: beKqsHfJ7vED-XmE8wnYkeWhmYM.crl (hash: OjWmyE+A89lMyXAaJE4xCVT6v7WeTeAOUPwaHNz3BQc=)
3: tmeZ0Ov1HvxadlJQTOHPYduqrcA.roa (hash: 5a1G608q0BN2ymFOZ4ty/8IB/CrBTEemrLvT6asz5iY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:d4:44:4d:4d:69:ed:7e:db:eb:61:1f:42:9a:15:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6de2aab077c9eef103f97984f309d891e5a19983
Validity
Not Before: Oct 27 18:00:36 2025 GMT
Not After : Oct 28 18:00:36 2025 GMT
Subject: CN=230dfe0dc3829abfb91f04bb82da8026ce8475a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:56:89:4f:7c:9a:e0:03:bf:c5:74:e4:4f:e2:
84:a5:f1:6a:07:b3:b2:c4:4f:f5:a4:ad:4c:88:87:
c4:ba:92:91:85:87:bc:d4:08:29:55:2a:09:63:2e:
15:10:66:2e:71:6e:42:b8:2e:a4:c9:cd:ea:f5:ae:
ab:58:46:c8:af:4d:5c:9e:46:0a:4f:7d:86:54:b3:
ec:78:ef:2e:57:1f:32:0f:aa:dc:e3:d5:d1:95:07:
ee:a3:25:6c:5e:88:97:d5:dc:22:38:7e:02:f2:27:
1e:36:f1:42:aa:a4:58:cf:f8:9d:e4:6d:38:65:7b:
3e:78:44:2d:14:7a:08:93:b4:4c:d5:13:45:b5:11:
29:9c:19:7c:b7:e3:a8:a9:bc:3e:9c:fb:14:d1:9a:
1a:33:26:d9:17:e3:5c:86:2e:50:16:63:45:da:8d:
a8:72:9c:d9:3a:d5:e4:7a:2e:dd:8f:9a:39:09:b3:
14:3f:6e:0f:5d:d7:35:42:9e:01:b7:13:24:00:6d:
f1:cc:71:84:a0:c7:e3:08:b0:b5:50:ff:3c:12:95:
57:fd:13:e6:94:2f:40:e0:0e:f6:80:9e:30:28:62:
e3:5b:f9:dd:8b:b4:ea:e2:4e:ca:55:1b:fb:ad:a4:
34:c0:07:0b:c7:c3:d7:67:b7:53:92:2c:38:de:99:
84:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0D:FE:0D:C3:82:9A:BF:B9:1F:04:BB:82:DA:80:26:CE:84:75:A0
X509v3 Authority Key Identifier:
keyid:6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:90:53:c6:88:67:be:3b:56:ec:17:05:2c:00:e7:ae:fd:60:
a8:8b:dd:26:38:7f:14:81:c8:53:2f:4b:a2:87:8b:b1:6c:10:
03:1e:0f:38:a5:6c:19:a8:74:82:37:75:98:85:85:3e:44:e4:
99:90:5a:7e:59:59:42:79:fa:c3:69:76:38:eb:68:a1:46:39:
20:dc:86:ab:9a:07:5d:66:35:68:df:c2:a4:6f:33:6b:fe:8c:
97:1a:96:a3:ac:a1:85:84:f6:6f:93:7d:8f:01:14:c0:dd:b0:
59:38:22:bb:94:9a:57:ec:a0:65:ca:95:fa:26:7a:84:23:b3:
45:37:5d:0b:bf:a2:32:4a:b0:f7:f8:15:e4:31:7b:9d:e0:b5:
ac:35:5b:3f:1d:bd:8b:ef:bd:1c:43:f6:db:1a:4a:36:fc:7d:
0a:b6:92:4c:9f:a0:5d:89:d8:be:e5:a4:25:1c:13:61:9b:f9:
65:b8:1b:88:e8:dc:6c:dd:87:d6:2e:78:97:99:dc:8d:73:94:
a7:3f:52:5d:13:25:5e:35:dd:1a:42:52:eb:6f:c7:4a:a4:26:
47:b9:17:c8:15:84:64:c1:25:c1:a8:35:88:e0:f1:dd:18:9e:
c5:24:a8:fb:64:66:b8:5b:8c:8a:65:46:95:6a:c0:60:1b:d3:
e5:5a:60:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 21:35:19 2025 by rpki-client