Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
File: 4BeHJANFLz4AireYBHNC2yTts1o.mft (raw, json)
Hash identifier: euSv/dPi7//m6W8qnmRvBOgHEfP84SalZmEUYwr2CI8=
Subject key identifier: C3:DE:43:E6:39:39:D2:50:78:4D:63:E6:9D:60:C4:3C:57:9B:0F:56
Authority key identifier: E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
Certificate issuer: /CN=e017872403452f3e008ab798047342db24edb35a
Certificate serial: 01968BB816AD4BE7F5B22562A72B5E88FB18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
Manifest number: 11DF
Signing time: Thu 01 May 2025 12:00:19 +0000
Manifest this update: Thu 01 May 2025 12:00:19 +0000
Manifest next update: Fri 02 May 2025 12:00:19 +0000
Files and hashes: 1: 4BeHJANFLz4AireYBHNC2yTts1o.crl (hash: EGJtOpG52z9AOGaMN+UY+xoEv17c3n5TAir8lsHbBh0=)
2: uyVHgvKbgyhIJP9r5aGfXjTHFJQ.roa (hash: qeBp72f9XovigjtK15ZxvxZQQWl9PNlTDrJhrcj6Lzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:b8:16:ad:4b:e7:f5:b2:25:62:a7:2b:5e:88:fb:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e017872403452f3e008ab798047342db24edb35a
Validity
Not Before: May 1 12:00:19 2025 GMT
Not After : May 2 12:00:19 2025 GMT
Subject: CN=c3de43e63939d250784d63e69d60c43c579b0f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e7:e8:5b:90:1a:e8:89:c2:88:92:54:6b:d2:
c0:db:a4:13:8a:83:f5:0d:a8:07:d1:97:37:d4:77:
b0:12:b6:ea:69:ba:9d:bb:9d:62:1b:a9:76:d5:88:
67:9e:cd:12:2e:bc:10:61:fb:83:f3:12:fd:d7:16:
35:bc:19:ef:51:77:51:fc:43:a5:f1:91:3f:65:65:
8f:9e:8e:6a:73:22:84:4d:2a:43:21:e5:39:10:0b:
8b:f4:f7:02:bd:2f:19:4b:48:11:6b:79:22:54:a1:
8a:d2:4b:aa:ab:cb:96:59:1c:20:77:a1:ab:2b:55:
00:9b:3a:b3:9d:b0:e9:43:0d:25:89:bb:e4:a4:7e:
09:38:7d:88:1b:70:fe:ed:16:51:14:85:80:46:13:
ab:a4:6e:71:2b:01:77:43:a6:17:aa:eb:f9:92:8a:
d8:5c:2a:b0:0b:a1:cb:66:30:ab:26:d5:22:ad:9e:
7f:2f:2d:53:cc:84:c3:5e:ac:2a:16:e9:42:ef:c3:
35:ba:e3:5c:e3:44:22:02:48:25:e0:b3:08:f8:9c:
d3:01:cd:94:5a:c4:3d:74:b8:a3:d9:04:b2:cd:bf:
50:d5:e1:73:9d:ed:d2:e4:69:a0:0f:7f:64:53:82:
b7:cb:ca:64:e9:69:08:67:00:1d:14:60:c4:b3:ac:
96:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DE:43:E6:39:39:D2:50:78:4D:63:E6:9D:60:C4:3C:57:9B:0F:56
X509v3 Authority Key Identifier:
keyid:E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:9b:f8:93:9f:3d:76:6e:6f:3f:5f:4f:eb:15:bc:f5:2c:80:
eb:12:9f:ee:1d:07:0d:90:8d:30:2b:e3:34:44:39:f1:37:24:
92:15:97:bb:60:9b:1a:4a:c8:71:9b:e5:dc:ba:39:b0:f6:81:
df:fa:66:f5:7b:c0:21:6a:6f:1a:ba:34:49:e3:fd:08:75:0b:
82:f4:6e:a1:1c:8f:21:50:fb:1e:b9:e4:c8:0c:b4:81:12:ad:
a7:b1:61:72:45:ee:3c:cf:2c:1e:27:c7:3d:0a:48:23:ff:15:
0e:80:6b:11:72:9d:e7:9c:98:7f:4f:8f:b3:61:ad:a1:2f:60:
96:c9:f1:3e:9d:f8:a8:63:85:2b:b0:f4:26:b3:4e:60:a3:28:
8c:89:36:77:72:cf:93:5a:b8:d3:16:17:1c:e9:f9:16:0f:ff:
55:3b:6f:55:25:ab:aa:6a:9b:71:79:94:57:91:23:0c:5a:32:
78:aa:68:8c:1d:35:33:33:ae:37:0c:6e:d3:49:c6:77:8f:3f:
78:15:56:8f:2c:a7:90:64:10:38:92:62:97:0f:8d:55:a5:0e:
20:f4:0b:75:54:f6:9e:58:4c:a0:e0:fd:ca:41:e2:16:fb:ce:
49:95:d7:bd:72:93:8f:f2:77:50:a7:27:f1:3a:dd:49:85:5a:
2d:22:77:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaLuBatS+f1siVipyteiPsYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMTc4NzI0MDM0NTJmM2UwMDhhYjc5ODA0NzM0MmRiMjRl
ZGIzNWEwHhcNMjUwNTAxMTIwMDE5WhcNMjUwNTAyMTIwMDE5WjAzMTEwLwYDVQQD
EyhjM2RlNDNlNjM5MzlkMjUwNzg0ZDYzZTY5ZDYwYzQzYzU3OWIwZjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArefoW5Aa6InCiJJUa9LA26QTioP1
DagH0Zc31HewErbqabqdu51iG6l21Yhnns0SLrwQYfuD8xL91xY1vBnvUXdR/EOl
8ZE/ZWWPno5qcyKETSpDIeU5EAuL9PcCvS8ZS0gRa3kiVKGK0kuqq8uWWRwgd6Gr
K1UAmzqznbDpQw0libvkpH4JOH2IG3D+7RZRFIWARhOrpG5xKwF3Q6YXquv5korY
XCqwC6HLZjCrJtUirZ5/Ly1TzITDXqwqFulC78M1uuNc40QiAkgl4LMI+JzTAc2U
WsQ9dLij2QSyzb9Q1eFzne3S5GmgD39kU4K3y8pk6WkIZwAdFGDEs6yWBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPeQ+Y5OdJQeE1j5p1gxDxXmw9WMB8GA1UdIwQY
MBaAFOAXhyQDRS8+AIq3mARzQtsk7bNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEJlSEpBTkZMejRBaXJlWUJITkMyeVR0czFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS80Y2MxNDUtOTY3ZC00ZDhkLWFmNWMt
ODc3ZTBlODY2YjI0LzEvNEJlSEpBTkZMejRBaXJlWUJITkMyeVR0czFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS80Y2MxNDUtOTY3ZC00ZDhkLWFmNWMtODc3ZTBlODY2YjI0
LzEvNEJlSEpBTkZMejRBaXJlWUJITkMyeVR0czFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJv4k589
dm5vP19P6xW89SyA6xKf7h0HDZCNMCvjNEQ58TckkhWXu2CbGkrIcZvl3Lo5sPaB
3/pm9XvAIWpvGro0SeP9CHULgvRuoRyPIVD7HrnkyAy0gRKtp7FhckXuPM8sHifH
PQpII/8VDoBrEXKd55yYf0+Ps2GtoS9glsnxPp34qGOFK7D0JrNOYKMojIk2d3LP
k1q40xYXHOn5Fg//VTtvVSWrqmqbcXmUV5EjDFoyeKpojB01MzOuNwxu00nGd48/
eBVWjyynkGQQOJJilw+NVaUOIPQLdVT2nlhMoOD9ykHiFvvOSZXXvXKTj/J3UKcn
8TrdSYVaLSJ3+g==
-----END CERTIFICATE-----
Generated at Thu May 1 21:39:22 2025 by rpki-client