Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
File: 4BeHJANFLz4AireYBHNC2yTts1o.mft (raw, json)
Hash identifier: F8kjNBJylZgNlVNw6NH8dTvTbFXFRT7pqnp/w78F9hc=
Subject key identifier: 9F:23:8E:7B:FD:B7:7A:6E:58:B8:61:33:89:0F:D8:94:14:1F:65:6F
Authority key identifier: E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
Certificate issuer: /CN=e017872403452f3e008ab798047342db24edb35a
Certificate serial: 019659827E7B1613CCB34F97AA3C73AE3EAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
Manifest number: 11C5
Signing time: Mon 21 Apr 2025 18:00:46 +0000
Manifest this update: Mon 21 Apr 2025 18:00:46 +0000
Manifest next update: Tue 22 Apr 2025 18:00:46 +0000
Files and hashes: 1: 4BeHJANFLz4AireYBHNC2yTts1o.crl (hash: fZSrqPJKDYvu9fJt9RLDa5LAqe3f+x5kfvV1sIqae+0=)
2: uyVHgvKbgyhIJP9r5aGfXjTHFJQ.roa (hash: qeBp72f9XovigjtK15ZxvxZQQWl9PNlTDrJhrcj6Lzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:7e:7b:16:13:cc:b3:4f:97:aa:3c:73:ae:3e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e017872403452f3e008ab798047342db24edb35a
Validity
Not Before: Apr 21 18:00:46 2025 GMT
Not After : Apr 22 18:00:46 2025 GMT
Subject: CN=9f238e7bfdb77a6e58b86133890fd894141f656f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7e:bc:51:e2:34:d5:14:14:a9:38:07:9e:5a:
ae:51:c5:56:01:e6:df:23:ef:82:4a:48:f5:bd:ed:
1a:63:8d:f4:bc:b3:82:1e:69:9d:ec:00:ab:af:53:
57:fe:70:8f:79:39:10:19:95:39:93:27:38:d4:af:
7e:ef:f9:22:03:9b:de:32:28:53:bc:7f:de:ee:32:
f8:db:99:cc:91:b8:d9:98:2e:d1:05:41:2b:41:01:
e4:cc:e6:2f:47:a3:37:af:8b:c7:50:d3:25:99:29:
4c:2b:e2:4b:8b:2f:5c:e6:f9:f8:72:c5:64:d5:3d:
03:ff:56:ca:41:94:7f:da:e6:a8:8c:21:fe:54:64:
d0:d5:c2:ed:54:e2:e7:15:3b:5b:56:ff:78:17:ce:
09:c4:6c:e0:78:a1:c2:b0:87:7f:e6:44:b0:dd:ea:
4c:f8:37:91:30:11:4f:41:7b:30:25:8b:83:63:02:
9a:c4:b1:38:fe:0e:69:04:d1:ef:af:86:a3:eb:16:
7f:7c:8f:d1:fb:86:1a:f7:fc:23:fa:24:fa:eb:11:
4a:12:30:40:f4:93:9d:66:56:31:f1:8c:0d:03:a1:
bd:96:1a:5b:64:72:09:e6:d5:3c:c9:48:35:dd:be:
64:54:b5:19:c8:51:8b:ce:e7:ce:7f:3f:28:aa:ba:
50:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:23:8E:7B:FD:B7:7A:6E:58:B8:61:33:89:0F:D8:94:14:1F:65:6F
X509v3 Authority Key Identifier:
keyid:E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:59:f6:e3:f2:10:90:72:50:9f:f2:6b:a3:e7:a3:95:b0:e1:
ca:c5:83:9e:c5:19:29:5b:d8:5b:5b:53:e3:ab:fc:a7:3e:4d:
0f:52:d7:e8:1a:5c:ac:9e:4d:45:01:97:88:a6:c2:af:d7:94:
e7:41:2a:25:46:0d:72:d7:21:cd:5d:b6:e8:ab:ff:73:62:5a:
48:2d:e4:0a:33:b5:22:73:bd:25:a4:a5:27:7b:f7:35:ab:7e:
9b:28:f6:0d:67:70:25:c1:34:6b:6e:6e:89:9d:87:15:0c:a5:
4f:c7:1c:47:69:71:ec:76:45:5f:57:47:d7:64:51:83:04:c0:
8f:5a:4c:0b:a3:0d:af:36:56:27:fe:d4:0c:f6:59:2b:0d:20:
df:ea:93:9e:9e:19:99:55:d2:19:51:6b:4b:dd:d6:9c:aa:ec:
49:cf:90:d4:ed:17:5c:56:68:3b:88:df:30:e9:6f:5c:73:0e:
38:b2:3d:9f:2f:18:bd:a6:4b:47:45:d2:3a:53:0a:c2:07:9b:
29:a3:c8:fd:e9:c7:ba:7e:51:24:7d:0a:34:a2:b4:70:ee:44:
de:de:81:11:41:1f:85:18:13:a0:6e:15:47:7d:f7:bf:1b:83:
84:e7:35:70:0b:c1:0d:d3:88:5e:72:23:bc:e4:2e:86:6c:a5:
2b:7c:83:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:09 2025 by rpki-client