Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
File: beKqsHfJ7vED-XmE8wnYkeWhmYM.mft (raw, json)
Hash identifier: cP6ofFEEbZ9t8gJebGaEwWjIjjZCdcZcuIHlro5hTss=
Subject key identifier: 43:52:92:64:44:EF:5B:2D:11:EF:F1:D4:AD:62:31:09:5C:E3:CF:76
Authority key identifier: 6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
Certificate issuer: /CN=6de2aab077c9eef103f97984f309d891e5a19983
Certificate serial: 0197586CDE65C8882EAE6170E37FA410603E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
Manifest number: 1589
Signing time: Tue 10 Jun 2025 06:00:19 +0000
Manifest this update: Tue 10 Jun 2025 06:00:19 +0000
Manifest next update: Wed 11 Jun 2025 06:00:19 +0000
Files and hashes: 1: 48IOS32yvZQcDKOVIMZ6daf-9KA.roa (hash: HmF8WESoe3mmtI22Berk7+aTu/j0V86FjOKvEurztNM=)
2: beKqsHfJ7vED-XmE8wnYkeWhmYM.crl (hash: qHt2zwK4vTG+fs/BCsungbol3EwiSLEEk/3rb8Tryp4=)
3: tmeZ0Ov1HvxadlJQTOHPYduqrcA.roa (hash: 5a1G608q0BN2ymFOZ4ty/8IB/CrBTEemrLvT6asz5iY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6c:de:65:c8:88:2e:ae:61:70:e3:7f:a4:10:60:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6de2aab077c9eef103f97984f309d891e5a19983
Validity
Not Before: Jun 10 06:00:19 2025 GMT
Not After : Jun 11 06:00:19 2025 GMT
Subject: CN=4352926444ef5b2d11eff1d4ad6231095ce3cf76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:32:16:18:d5:b8:49:8c:f9:43:e1:65:dc:ba:
b4:a8:2b:54:e0:e1:e0:a3:3e:59:f3:24:03:cf:34:
9f:41:74:c2:3d:55:c0:d8:65:dc:e8:ef:4b:1a:de:
0b:53:fc:7d:14:f6:15:14:5f:25:66:0a:5b:c9:8f:
23:49:b9:f3:8a:95:46:e3:cd:8e:7e:fd:28:65:00:
b0:86:71:5f:ec:5b:4c:b0:4b:8b:4f:95:7c:7a:81:
c0:bc:9e:ae:f6:dd:b4:21:1a:0f:32:cd:54:7a:0a:
e7:94:4f:e8:79:d0:b4:33:d2:4e:94:22:37:09:6e:
1b:18:f0:84:81:3d:91:2d:3f:5b:2a:31:9f:b6:2e:
60:c9:f3:51:4d:99:0a:ae:76:d1:b0:99:1f:33:1d:
62:af:b3:ea:4c:5c:42:78:54:49:94:a6:f8:4e:36:
f0:62:35:e1:64:04:a7:27:c3:b2:c2:68:ce:49:3e:
55:29:05:f7:45:e1:c8:f2:64:e5:59:80:41:64:9a:
e4:85:e0:31:41:5e:b9:d2:1c:27:c9:d9:ee:27:e6:
2a:58:15:af:3a:f2:2a:40:71:bb:0e:cb:ee:11:60:
ce:f2:ea:ed:8f:f5:c7:24:59:55:3c:32:19:92:9a:
8d:d2:86:5f:97:6f:98:bb:8d:18:c6:57:2b:a8:b2:
88:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:52:92:64:44:EF:5B:2D:11:EF:F1:D4:AD:62:31:09:5C:E3:CF:76
X509v3 Authority Key Identifier:
keyid:6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:4b:47:9f:d7:3e:0f:92:5d:a9:a8:f6:63:bf:3a:8b:0a:75:
f5:9f:d4:ab:dc:6b:67:6c:4d:ed:a5:6b:eb:bc:8e:90:c2:fc:
4c:2b:5f:11:69:31:1e:69:47:49:9e:b1:28:6c:b7:45:ba:2f:
9c:59:b7:34:2a:01:2c:0e:ae:9b:06:21:ee:b5:cc:db:98:c5:
2d:a3:b6:df:54:3c:0b:a8:fe:4a:18:1f:40:dc:14:54:39:a7:
8e:5f:c1:07:21:03:07:c9:56:fd:22:94:88:55:2b:0e:5f:27:
da:19:9d:04:dc:c9:55:c2:3c:88:c4:71:4f:70:d1:e1:55:76:
47:2c:b1:c9:85:4a:f1:bc:12:59:ef:92:dc:1b:3f:12:ca:53:
ec:2f:8e:10:b7:32:95:e8:dd:8a:b5:e9:f7:1b:68:1c:19:6f:
c3:93:1e:aa:6a:b5:49:ca:c9:15:70:77:3f:c7:7c:77:5e:b6:
4b:41:37:bc:71:8d:13:cf:6c:b9:b7:e7:1f:74:f9:81:c9:0e:
68:cf:c7:04:b1:9f:45:9f:cf:2d:f0:02:97:06:5a:63:5b:38:
5e:d8:60:f4:77:8a:3a:4d:b5:b5:db:9c:89:2c:bc:d4:56:e1:
d2:02:b2:d1:11:e4:f9:97:fe:fa:db:d1:ba:11:f0:54:d6:b9:
6c:f2:88:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdYbN5lyIgurmFw43+kEGA+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZTJhYWIwNzdjOWVlZjEwM2Y5Nzk4NGYzMDlkODkxZTVh
MTk5ODMwHhcNMjUwNjEwMDYwMDE5WhcNMjUwNjExMDYwMDE5WjAzMTEwLwYDVQQD
Eyg0MzUyOTI2NDQ0ZWY1YjJkMTFlZmYxZDRhZDYyMzEwOTVjZTNjZjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8zIWGNW4SYz5Q+Fl3Lq0qCtU4OHg
oz5Z8yQDzzSfQXTCPVXA2GXc6O9LGt4LU/x9FPYVFF8lZgpbyY8jSbnzipVG482O
fv0oZQCwhnFf7FtMsEuLT5V8eoHAvJ6u9t20IRoPMs1UegrnlE/oedC0M9JOlCI3
CW4bGPCEgT2RLT9bKjGfti5gyfNRTZkKrnbRsJkfMx1ir7PqTFxCeFRJlKb4Tjbw
YjXhZASnJ8OywmjOST5VKQX3ReHI8mTlWYBBZJrkheAxQV650hwnydnuJ+YqWBWv
OvIqQHG7DsvuEWDO8urtj/XHJFlVPDIZkpqN0oZfl2+Yu40YxlcrqLKIkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENSkmRE71stEe/x1K1iMQlc4892MB8GA1UdIwQY
MBaAFG3iqrB3ye7xA/l5hPMJ2JHloZmDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmVLcXNIZko3dkVELVhtRTh3bllrZVdobVlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9hNDAwNzAtYWExNy00MmZlLTg2ZGQt
YjlhZTU3Mzk0MTg5LzEvYmVLcXNIZko3dkVELVhtRTh3bllrZVdobVlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9hNDAwNzAtYWExNy00MmZlLTg2ZGQtYjlhZTU3Mzk0MTg5
LzEvYmVLcXNIZko3dkVELVhtRTh3bllrZVdobVlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOktHn9c+
D5Jdqaj2Y786iwp19Z/Uq9xrZ2xN7aVr67yOkML8TCtfEWkxHmlHSZ6xKGy3Rbov
nFm3NCoBLA6umwYh7rXM25jFLaO231Q8C6j+ShgfQNwUVDmnjl/BByEDB8lW/SKU
iFUrDl8n2hmdBNzJVcI8iMRxT3DR4VV2RyyxyYVK8bwSWe+S3Bs/EspT7C+OELcy
lejdirXp9xtoHBlvw5Meqmq1ScrJFXB3P8d8d162S0E3vHGNE89subfnH3T5gckO
aM/HBLGfRZ/PLfAClwZaY1s4Xthg9HeKOk21tduciSy81Fbh0gKy0RHk+Zf++tvR
uhHwVNa5bPKIBQ==
-----END CERTIFICATE-----
Generated at Tue Jun 10 10:21:24 2025 by rpki-client