Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
File: 4BeHJANFLz4AireYBHNC2yTts1o.mft (raw, json)
Hash identifier: xZDbAlb0OHWaJeuHskn7lJ0oWfMVImmytUjodsExcWU=
Subject key identifier: 50:09:3F:C7:92:4E:BD:4D:E5:D2:F2:A9:4F:E3:EF:B7:16:67:F1:62
Authority key identifier: E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
Certificate issuer: /CN=e017872403452f3e008ab798047342db24edb35a
Certificate serial: 0199221E588190966D338D8B1D0BDE13C0F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
Manifest number: 1336
Signing time: Sun 07 Sep 2025 03:00:37 +0000
Manifest this update: Sun 07 Sep 2025 03:00:37 +0000
Manifest next update: Mon 08 Sep 2025 03:00:37 +0000
Files and hashes: 1: 4BeHJANFLz4AireYBHNC2yTts1o.crl (hash: 3rQ/edPOtGAzIBn4JVoziIAv1vdiyVz+WetB1HFqrrg=)
2: uyVHgvKbgyhIJP9r5aGfXjTHFJQ.roa (hash: qeBp72f9XovigjtK15ZxvxZQQWl9PNlTDrJhrcj6Lzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:58:81:90:96:6d:33:8d:8b:1d:0b:de:13:c0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e017872403452f3e008ab798047342db24edb35a
Validity
Not Before: Sep 7 03:00:37 2025 GMT
Not After : Sep 8 03:00:37 2025 GMT
Subject: CN=50093fc7924ebd4de5d2f2a94fe3efb71667f162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:49:62:77:cf:11:81:c8:8b:8f:58:b4:19:22:
8b:24:f5:d6:b5:28:5f:ff:2a:4b:5a:4c:c8:7f:a8:
72:b6:a7:c6:d7:75:5b:eb:b4:85:a0:6a:20:91:75:
76:40:1d:8a:70:8e:6f:a9:cb:66:4b:a3:5e:4e:be:
51:7e:52:70:76:f5:e9:b5:19:74:5b:9e:76:73:23:
b0:1d:87:96:61:57:f6:43:e8:fa:08:cd:08:0f:03:
86:ce:1d:f1:33:59:15:92:90:75:e2:1e:46:c4:a5:
d6:12:43:b9:dd:04:78:ab:17:e2:f5:c0:94:2d:0f:
24:62:97:f7:65:08:42:c9:cf:1c:08:23:2e:33:16:
54:d6:17:94:07:bc:29:61:29:9d:a1:51:a0:2c:a3:
5f:11:e2:1b:6f:49:60:58:5b:2e:3b:8c:a3:0c:6f:
d7:3f:da:e4:82:0e:53:8f:02:44:6f:87:8f:74:08:
13:94:c1:dd:78:95:ce:7b:b7:f1:72:30:56:af:fe:
57:d0:2e:21:c7:44:50:d4:ee:c1:a8:6e:0f:fe:38:
fd:55:21:af:64:9a:75:4e:46:56:91:44:b3:b3:16:
50:86:6e:e1:b8:ed:38:2b:9e:fc:54:ca:ba:de:d0:
d4:aa:35:f7:8b:3f:2c:30:aa:21:c1:fa:4c:1e:10:
eb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:09:3F:C7:92:4E:BD:4D:E5:D2:F2:A9:4F:E3:EF:B7:16:67:F1:62
X509v3 Authority Key Identifier:
keyid:E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:be:c6:d3:95:5c:d8:4c:94:1f:f1:2d:f3:48:31:01:5c:3b:
fc:e9:34:dd:18:1f:bf:75:79:45:02:b4:92:14:d5:98:be:69:
68:58:95:81:56:dc:70:6c:96:28:65:5f:8c:c5:1f:96:f6:32:
03:31:05:b8:63:67:a3:1b:66:75:93:c6:4b:30:ba:b5:bd:37:
1e:45:72:e1:d1:17:25:c1:54:5c:c2:09:2b:08:94:a6:1a:19:
d8:f4:44:66:f5:6a:c7:88:1f:d9:6b:ec:0d:cd:58:13:0d:8d:
2f:56:05:24:bd:e8:76:e4:7f:6d:9e:86:64:2d:db:06:ed:0e:
a0:c5:cf:b9:0e:96:c8:57:75:62:6c:22:da:4b:e9:99:49:b9:
f7:6d:fe:0b:30:6f:9a:43:df:f0:d1:e4:74:0a:0a:b9:af:e1:
26:35:73:f1:64:d3:20:1e:f9:23:1e:f0:e5:bd:7a:98:7f:b3:
f3:52:90:b8:43:81:01:ae:68:78:90:af:f9:6e:65:c9:2a:01:
3f:b0:50:77:4f:eb:5a:d4:53:c0:6f:44:6e:6c:c3:2d:92:4e:
08:58:0f:2d:73:c9:ec:24:66:24:c0:1e:a6:d6:97:3c:af:f8:
48:07:d7:81:14:97:2a:38:b8:07:51:45:df:cc:9a:f5:62:8f:
ff:f7:66:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:05:49 2025 by rpki-client