Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
File: 4BeHJANFLz4AireYBHNC2yTts1o.mft (raw, json)
Hash identifier: ZKESBu6Rsj7/KEvT/+KTWPGZIFWn0vIjyDB6/Ik4wwc=
Subject key identifier: 83:14:07:70:6C:E6:1B:1C:29:6E:77:B2:5A:B5:26:DB:D7:40:99:F9
Authority key identifier: E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
Certificate issuer: /CN=e017872403452f3e008ab798047342db24edb35a
Certificate serial: 019748F9ECAF3472F620DD81A33D73390EF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
Manifest number: 1241
Signing time: Sat 07 Jun 2025 06:00:27 +0000
Manifest this update: Sat 07 Jun 2025 06:00:27 +0000
Manifest next update: Sun 08 Jun 2025 06:00:27 +0000
Files and hashes: 1: 4BeHJANFLz4AireYBHNC2yTts1o.crl (hash: bLqnuwLnV6n2LfVF35zfFYwVnHiZgxQmbYxkp6yLA+w=)
2: uyVHgvKbgyhIJP9r5aGfXjTHFJQ.roa (hash: qeBp72f9XovigjtK15ZxvxZQQWl9PNlTDrJhrcj6Lzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:ec:af:34:72:f6:20:dd:81:a3:3d:73:39:0e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e017872403452f3e008ab798047342db24edb35a
Validity
Not Before: Jun 7 06:00:27 2025 GMT
Not After : Jun 8 06:00:27 2025 GMT
Subject: CN=831407706ce61b1c296e77b25ab526dbd74099f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3d:57:d5:ce:cf:f9:2d:25:c6:0c:74:84:59:
c9:6c:5b:33:4f:75:b2:d8:cd:8c:d5:d8:60:0b:f2:
1c:fb:14:e3:39:b8:fc:de:ed:2f:ee:97:b3:1a:e5:
6c:d2:4b:a7:f2:3e:5a:4c:40:37:49:77:cd:dd:72:
e7:6b:2f:4d:28:7c:9f:d8:a3:03:7c:8b:2c:66:1b:
25:97:84:fe:29:51:83:81:49:b5:dc:28:6f:92:a8:
35:79:0b:ab:c2:9c:8c:41:04:a5:82:4f:84:55:fa:
d8:12:9e:8f:43:de:31:f9:f5:d8:6b:ce:aa:df:73:
b4:0f:24:51:c6:bb:3f:2e:e3:89:05:d8:43:e4:ec:
9a:c0:07:29:f1:ce:79:71:f8:08:01:72:af:c8:68:
8b:f3:c8:10:3c:d0:95:4d:d0:05:a0:0f:c3:10:2c:
ea:77:92:ad:b8:1c:7f:89:18:bb:d8:d0:36:88:a7:
77:29:d3:45:ad:58:e1:5c:ef:69:de:1c:8b:69:92:
e9:ae:52:a2:52:21:d0:98:2b:cb:18:80:2e:0b:18:
a5:a6:b2:3a:63:9d:e2:7d:2a:2e:24:f8:86:2a:44:
b5:f7:f7:40:84:cc:c3:74:57:9b:5a:99:ab:d5:30:
cb:59:46:d8:0b:3d:9a:d5:e5:56:84:26:8e:de:b2:
a7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:14:07:70:6C:E6:1B:1C:29:6E:77:B2:5A:B5:26:DB:D7:40:99:F9
X509v3 Authority Key Identifier:
keyid:E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:53:76:16:e2:9b:f0:64:00:fb:87:e4:ed:e4:d4:be:4a:e6:
dd:f3:59:5f:0c:cd:42:98:04:15:67:a2:58:f9:50:46:47:cc:
3b:e3:d1:cc:2a:0b:c3:c8:66:10:ee:e2:cd:b0:7e:59:a6:0c:
fd:10:f0:01:5d:26:1b:23:6c:a7:9b:71:cb:c0:63:ff:b3:d7:
e6:d0:fd:8f:a7:fd:cc:63:f5:b1:18:da:fd:00:bc:84:92:4e:
cb:19:a0:ef:70:fb:a7:74:47:be:42:e7:46:7b:86:16:b9:ad:
d2:05:b7:0c:33:9b:1b:72:60:3c:d0:c5:db:d3:36:8d:0f:a8:
2e:c8:51:2e:5c:7a:e4:db:d8:cc:57:d9:31:2d:0f:01:42:ac:
17:3c:20:40:69:b7:bf:be:b1:8b:50:3b:8d:99:68:74:9f:e2:
05:9e:fd:8a:85:06:ca:60:e1:dc:1a:15:0d:94:2f:c0:ca:08:
14:b6:ac:f5:a6:b0:45:7b:30:2d:ed:46:b2:e0:dc:66:3e:ac:
1b:88:52:3c:1e:56:fa:c7:9f:49:bd:71:54:45:b9:c9:fb:71:
f7:b6:48:cf:ee:91:ba:ec:56:7a:bc:fa:85:3c:21:fb:43:00:
4c:51:f7:82:34:d3:50:ba:5b:46:d8:87:c3:6d:fc:19:75:c1:
c3:39:07:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:37:29 2025 by rpki-client