Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
File: 4BeHJANFLz4AireYBHNC2yTts1o.mft (raw, json)
Hash identifier: AbvdCTt5yiloh0d0enY+1hk5mR8EWarQWRfqGkH7O/M=
Subject key identifier: 93:CA:A3:53:41:C0:BC:E3:D9:0E:0C:E3:2D:58:E0:D6:DD:CA:F4:C1
Authority key identifier: E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
Certificate issuer: /CN=e017872403452f3e008ab798047342db24edb35a
Certificate serial: 019A4F62C76CBEB932D9841B8D350504B6E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
Manifest number: 13D2
Signing time: Tue 04 Nov 2025 15:01:04 +0000
Manifest this update: Tue 04 Nov 2025 15:01:04 +0000
Manifest next update: Wed 05 Nov 2025 15:01:04 +0000
Files and hashes: 1: 4BeHJANFLz4AireYBHNC2yTts1o.crl (hash: dEwWo/n97kd1ROQI9KfUHzwDWYZ5OpeJ64Bi2WLwGQI=)
2: uyVHgvKbgyhIJP9r5aGfXjTHFJQ.roa (hash: qeBp72f9XovigjtK15ZxvxZQQWl9PNlTDrJhrcj6Lzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:c7:6c:be:b9:32:d9:84:1b:8d:35:05:04:b6:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e017872403452f3e008ab798047342db24edb35a
Validity
Not Before: Nov 4 15:01:04 2025 GMT
Not After : Nov 5 15:01:04 2025 GMT
Subject: CN=93caa35341c0bce3d90e0ce32d58e0d6ddcaf4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:67:d1:88:20:ba:5b:6a:62:e8:c9:6c:e7:58:
d8:89:b2:dd:94:ff:cb:b6:dc:3e:41:ad:c7:a1:89:
be:57:fb:6c:4c:40:52:21:f7:30:a9:61:a3:21:19:
19:24:bf:c5:56:6c:4f:4c:7b:0c:7b:56:69:00:e4:
b3:bf:4d:34:da:cc:83:47:06:96:e5:8b:a1:e2:c8:
8b:be:95:2b:e0:79:d7:a3:8d:8c:f8:42:ce:88:db:
f5:cc:1d:c3:40:a7:90:dc:4b:9b:8d:67:d2:e4:b9:
9e:34:88:56:72:c5:e2:f6:c6:0c:00:b9:cf:f2:2d:
4f:0c:a4:de:7b:7f:65:ca:a2:c3:b2:d2:1d:8b:ad:
64:5c:37:af:ee:15:4a:a9:10:ea:97:88:b6:49:59:
e3:ea:a4:4e:f5:bf:ec:f6:5c:48:82:ba:ee:67:3a:
a3:1f:50:40:d8:7e:e3:ab:70:29:46:69:52:7c:b9:
2b:4a:94:84:a4:7a:7f:07:d6:27:3b:0a:eb:b2:eb:
d3:39:5f:cc:8a:1e:94:e7:2e:5a:a0:7f:0f:ec:3f:
16:9a:e8:16:27:5c:e5:a4:ff:07:88:67:3b:b7:94:
d6:25:68:13:77:d7:89:b7:e4:24:09:da:ab:03:23:
2e:fa:65:a9:a9:eb:14:7d:10:20:d3:bb:b1:d5:9d:
14:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CA:A3:53:41:C0:BC:E3:D9:0E:0C:E3:2D:58:E0:D6:DD:CA:F4:C1
X509v3 Authority Key Identifier:
keyid:E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:7e:3f:b0:fb:0e:15:f4:06:70:9b:fa:34:1a:cf:c3:12:e1:
b8:0d:5d:f7:d5:4f:47:1a:0a:3e:59:f6:79:a7:2a:30:55:37:
af:90:d8:b4:7b:55:d2:9a:8f:4d:41:e8:ee:d8:d8:bd:49:e8:
5a:80:d8:b8:08:0e:50:dd:80:ea:46:08:c3:52:90:e5:5e:a0:
be:4d:26:1e:45:6a:56:50:5d:08:de:af:4a:fa:9d:70:5e:e5:
78:94:31:ff:93:81:15:20:94:88:02:5d:a1:54:ea:63:c5:b1:
84:8d:c2:78:35:3f:6e:23:c1:35:8e:7d:a0:ae:84:4d:f1:f7:
bb:46:f9:ef:fd:7b:1f:48:f7:4f:b1:2b:be:e0:6f:0d:f2:b8:
65:d6:67:db:00:69:5b:6b:4c:17:25:c8:47:47:a4:53:a2:14:
97:3b:21:d2:80:3b:66:94:61:c0:68:f2:3b:8a:34:50:25:e3:
5c:6c:34:78:46:1c:11:20:bf:6f:ea:b0:b6:4d:e7:a5:56:2c:
59:54:82:e2:ed:75:0a:88:e0:2b:8a:56:c2:db:9f:31:ee:3a:
2e:e1:d8:90:f9:01:ba:df:f7:bb:64:6c:21:8b:a0:0c:cd:cb:
8c:3b:e6:07:10:55:1a:5f:08:c2:e3:01:50:31:b2:e7:24:e1:
df:ae:90:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:16 2025 by rpki-client