Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
File: 4BeHJANFLz4AireYBHNC2yTts1o.mft (raw, json)
Hash identifier: fGA31IWjiOHYGF+pES/iPXobf2wF453ksnnNfYhbi5Q=
Subject key identifier: D0:08:71:96:45:61:11:88:05:78:BC:95:C7:1D:8E:7C:2D:FA:26:B9
Authority key identifier: E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
Certificate issuer: /CN=e017872403452f3e008ab798047342db24edb35a
Certificate serial: 019A72261AAAB081FF4728EE958CEC1AB8A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
Manifest number: 13E4
Signing time: Tue 11 Nov 2025 09:01:31 +0000
Manifest this update: Tue 11 Nov 2025 09:01:31 +0000
Manifest next update: Wed 12 Nov 2025 09:01:31 +0000
Files and hashes: 1: 4BeHJANFLz4AireYBHNC2yTts1o.crl (hash: W86W0jzYQesoIH9LXDMn4ajZhjVvLVw9x6SSNAmd9Ds=)
2: uyVHgvKbgyhIJP9r5aGfXjTHFJQ.roa (hash: qeBp72f9XovigjtK15ZxvxZQQWl9PNlTDrJhrcj6Lzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:1a:aa:b0:81:ff:47:28:ee:95:8c:ec:1a:b8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e017872403452f3e008ab798047342db24edb35a
Validity
Not Before: Nov 11 09:01:31 2025 GMT
Not After : Nov 12 09:01:31 2025 GMT
Subject: CN=d0087196456111880578bc95c71d8e7c2dfa26b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:dc:2b:ce:60:04:00:93:0c:af:fa:99:1c:56:
a2:b4:93:9d:14:db:57:45:8a:2d:20:db:e7:ef:0b:
e0:1a:72:08:08:a3:3e:00:7c:bf:09:ad:cb:9f:d8:
d4:16:a9:29:43:90:f6:d3:eb:81:6f:6b:94:75:80:
47:f3:2e:66:4b:a9:4f:eb:23:b2:b9:32:81:16:f9:
a3:6c:9b:c6:b2:d1:85:be:b2:8b:ce:67:49:45:9b:
2b:56:e9:89:f9:9c:88:4c:69:1b:34:a6:31:93:76:
08:a8:c4:d5:9d:7c:21:2b:2c:61:74:b1:50:49:33:
95:23:b6:d6:5c:68:6e:3c:3b:2c:79:d1:69:4b:85:
79:82:21:ff:fd:93:7a:49:11:fb:43:68:c6:cb:31:
68:74:5b:9c:0f:e2:82:86:33:70:05:d2:71:2e:94:
be:8d:2b:5d:b8:c5:98:cd:f2:a4:13:d1:69:1c:d9:
f6:9d:40:6f:94:e5:71:30:71:3b:93:bf:34:87:1d:
1f:77:6c:96:f1:7f:0f:99:82:7d:6b:0a:1c:f5:c8:
17:e7:1b:eb:4e:f4:2d:c0:59:04:75:fc:a2:02:59:
e3:1f:5d:e5:42:57:c5:06:cd:71:1d:3a:9f:18:c7:
d4:b4:cf:f5:7a:ab:5b:4d:7e:73:40:38:7e:b4:ce:
a6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:08:71:96:45:61:11:88:05:78:BC:95:C7:1D:8E:7C:2D:FA:26:B9
X509v3 Authority Key Identifier:
keyid:E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:74:67:08:2b:af:37:ea:b5:e8:66:22:e5:ac:02:86:9c:45:
47:07:8f:e3:fa:5e:91:5c:c4:99:1d:8d:50:18:fa:b7:04:0b:
31:0c:20:38:c0:08:fd:9b:80:c8:41:3b:02:f2:c3:7a:d1:e1:
9f:02:8c:f0:f0:2f:ae:4d:59:00:f4:f2:ef:d3:33:80:ce:9d:
2e:18:d0:6b:a1:f4:9d:f4:af:81:dc:21:ff:8e:7a:d4:ea:6d:
4f:08:96:14:75:49:86:15:5c:62:d1:0c:f7:35:b2:2c:7d:ff:
bd:39:ee:e2:1e:0e:63:47:41:39:b9:53:1b:cf:2e:48:41:bb:
03:62:3a:23:c2:90:aa:80:c5:26:a6:1e:1f:5b:dd:a2:3b:90:
85:bb:6e:dd:29:28:84:0d:13:e2:3c:2b:15:5e:c2:a8:78:68:
4d:10:5d:da:9d:d8:9a:d1:79:07:e8:2d:0c:bc:0b:05:db:88:
2a:bd:40:bd:58:cd:b4:2b:a5:b7:c2:d0:72:4f:95:3b:1e:02:
20:c3:41:2f:27:03:d6:82:77:5a:2b:ab:cf:67:b7:dc:a3:f4:
3b:04:90:45:b8:3c:1b:62:f1:91:e0:f6:50:c5:ec:74:3a:e2:
e8:57:e9:29:40:fa:5a:28:8b:3f:0b:5b:88:f3:2a:2b:54:65:
9b:97:c3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:15:09 2025 by rpki-client