Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
File: 4BeHJANFLz4AireYBHNC2yTts1o.mft (raw, json)
Hash identifier: xaYvlO4cUed1aznwid1fUiexMD3gr/yctKcxOpJOzdM=
Subject key identifier: 48:43:55:2B:64:B8:74:49:D6:10:EE:8D:5E:2F:08:EB:80:2A:EA:4A
Authority key identifier: E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
Certificate issuer: /CN=e017872403452f3e008ab798047342db24edb35a
Certificate serial: 01977564C2D4D6ACEE3595ECFE5C6E0ED86D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
Manifest number: 1258
Signing time: Sun 15 Jun 2025 21:00:27 +0000
Manifest this update: Sun 15 Jun 2025 21:00:27 +0000
Manifest next update: Mon 16 Jun 2025 21:00:27 +0000
Files and hashes: 1: 4BeHJANFLz4AireYBHNC2yTts1o.crl (hash: Xhs9ahAEG+LylqJo6jFwKcXsg2c/6W4uEknVYsCBEUE=)
2: uyVHgvKbgyhIJP9r5aGfXjTHFJQ.roa (hash: qeBp72f9XovigjtK15ZxvxZQQWl9PNlTDrJhrcj6Lzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:64:c2:d4:d6:ac:ee:35:95:ec:fe:5c:6e:0e:d8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e017872403452f3e008ab798047342db24edb35a
Validity
Not Before: Jun 15 21:00:27 2025 GMT
Not After : Jun 16 21:00:27 2025 GMT
Subject: CN=4843552b64b87449d610ee8d5e2f08eb802aea4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:85:a4:ef:52:3a:7d:a1:d9:c1:90:7f:39:ba:
d8:68:af:27:84:68:d7:76:f1:85:a8:97:bd:79:6d:
f2:48:3f:80:e8:5c:10:7f:18:a2:1f:16:0e:ae:0f:
11:76:ce:ad:a0:8f:a5:e7:ee:f3:59:03:ab:e4:f0:
15:86:ff:88:98:fd:10:4a:67:0e:e9:91:ee:99:c6:
69:fc:f0:45:1f:70:d5:b2:87:16:8e:3b:6c:b9:2f:
fa:81:bd:ac:c8:93:4a:4b:62:7d:b9:96:49:49:b1:
5b:10:db:b1:06:97:0c:74:e1:26:b8:41:b6:b3:44:
f7:b0:6d:0f:65:85:e1:a2:b7:3d:42:02:39:eb:ca:
b1:89:ef:f1:83:60:54:93:25:ac:fd:72:18:bd:2f:
f5:69:6a:ee:c3:36:25:2e:a7:c9:f7:16:b3:68:0a:
a7:50:0c:4a:13:23:65:fc:af:76:ee:e4:67:ec:e9:
47:58:3e:75:c4:b4:42:dc:f4:a3:bd:aa:53:65:69:
26:99:ea:e8:a3:db:93:0a:36:56:85:7d:bd:88:8a:
3c:52:18:8f:05:aa:91:2e:fb:45:42:c3:89:c2:5e:
25:6f:fd:03:c2:50:a9:7c:63:8a:3d:71:51:5b:0b:
0d:20:41:33:f7:e5:15:3f:c7:0a:a5:27:e7:7f:c1:
18:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:43:55:2B:64:B8:74:49:D6:10:EE:8D:5E:2F:08:EB:80:2A:EA:4A
X509v3 Authority Key Identifier:
keyid:E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:18:a5:5d:b2:42:23:7d:60:62:35:c8:58:1e:f7:cf:b3:33:
e1:69:66:35:47:f4:b0:52:b4:38:be:a1:e6:fd:2c:46:20:6f:
a3:4c:9d:6a:11:c4:5e:d6:0d:4b:48:c0:0f:2d:ff:56:b6:41:
96:c5:b7:8d:4f:e2:f3:4f:50:57:b0:72:04:a5:cc:f5:14:36:
b7:7d:9c:67:15:ac:fd:5b:c8:b5:ad:1d:80:58:29:ec:c2:0b:
50:2f:1d:e0:a2:7d:ec:fe:96:39:fd:88:c0:1c:c6:c6:a2:5a:
26:18:86:18:9b:1a:fe:86:c7:4f:e1:10:f4:09:44:14:8d:3d:
35:2b:16:d9:53:8b:10:ba:40:e3:86:51:b5:89:2e:d7:cd:09:
51:2a:bd:d5:f9:7c:41:d9:5b:6a:59:50:34:44:00:c0:fb:ca:
27:6b:36:fb:77:de:20:b5:4a:67:31:90:ac:49:78:de:e7:c9:
ba:dd:18:da:4c:f4:ac:6a:64:30:f3:02:ff:fc:ca:4f:37:55:
8d:1d:1a:2e:88:b6:d8:8e:a0:7b:44:95:de:b1:21:29:61:d6:
5c:6b:8c:11:74:b5:c2:13:d1:02:f4:1f:b0:89:0b:28:cc:f9:
15:8d:f5:4a:5d:f5:cb:b2:a7:c5:7d:f7:f7:2c:43:0d:a1:9d:
41:a4:86:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:30:20 2025 by rpki-client