Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
File: 4BeHJANFLz4AireYBHNC2yTts1o.mft (raw, json)
Hash identifier: p1ZAYmDhmGVZO5ImFy3PIjP7F6KkUQIfDPHLL2rFMp0=
Subject key identifier: 6B:EF:03:6B:77:DF:6F:75:D4:FA:1F:99:9F:8C:73:5D:FA:69:99:D8
Authority key identifier: E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
Certificate issuer: /CN=e017872403452f3e008ab798047342db24edb35a
Certificate serial: 01989524478FAFC63DFB2AADF0A1C750DCC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
Manifest number: 12ED
Signing time: Sun 10 Aug 2025 18:00:39 +0000
Manifest this update: Sun 10 Aug 2025 18:00:39 +0000
Manifest next update: Mon 11 Aug 2025 18:00:39 +0000
Files and hashes: 1: 4BeHJANFLz4AireYBHNC2yTts1o.crl (hash: nHvco2L6KhfGiPptJ9Zz9qxiIyk91N5ZF4RY2f6g2FE=)
2: uyVHgvKbgyhIJP9r5aGfXjTHFJQ.roa (hash: qeBp72f9XovigjtK15ZxvxZQQWl9PNlTDrJhrcj6Lzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:24:47:8f:af:c6:3d:fb:2a:ad:f0:a1:c7:50:dc:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e017872403452f3e008ab798047342db24edb35a
Validity
Not Before: Aug 10 18:00:39 2025 GMT
Not After : Aug 11 18:00:39 2025 GMT
Subject: CN=6bef036b77df6f75d4fa1f999f8c735dfa6999d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:77:55:32:b5:7d:1b:d7:36:f0:6b:d5:6b:a4:
61:50:ad:12:96:12:70:37:9c:f4:77:11:55:1a:1b:
0a:5d:a6:3c:b5:26:56:25:6d:9a:8e:7b:81:9d:52:
95:13:bf:b4:b5:e8:ee:9f:45:4c:77:e5:97:9e:9c:
20:08:3f:b7:7f:2c:8b:81:e6:0e:0f:1b:6c:ca:7e:
d7:f0:1a:3a:3d:04:1a:62:36:a4:cf:66:34:a2:e4:
59:32:c3:97:44:c7:b0:21:17:7d:a7:6b:9a:95:c9:
99:bf:25:4e:a2:10:a9:dd:33:46:1d:79:00:aa:ea:
cc:cc:95:c1:b1:03:3d:14:a1:1e:0c:8e:94:bd:3d:
34:58:ed:fc:07:cb:20:66:c4:05:ae:5f:a6:ff:aa:
d4:96:d5:92:b3:23:c0:cf:ad:7e:a0:eb:b5:3a:f1:
ee:6f:ff:50:48:dc:9d:60:ce:bf:11:0b:de:08:68:
35:83:bf:94:53:18:9a:5e:af:63:47:5e:1b:3e:c8:
d5:cb:37:7f:a4:4d:86:2b:df:85:cb:03:2f:9b:13:
67:5b:e0:d7:d3:a5:ce:f8:e7:01:e5:b3:a7:84:a6:
0e:81:2d:82:13:9d:47:c8:2a:01:da:64:48:33:20:
44:0c:68:d0:7f:e1:59:8c:7a:27:82:51:b0:a1:47:
51:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EF:03:6B:77:DF:6F:75:D4:FA:1F:99:9F:8C:73:5D:FA:69:99:D8
X509v3 Authority Key Identifier:
keyid:E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ab:ec:42:4a:e0:18:fa:c1:7d:13:6a:d7:72:8b:1f:78:0a:
60:55:7d:97:8d:d4:02:28:33:d4:a0:bf:a0:6c:20:5f:f8:4b:
08:8a:2b:40:0f:de:80:7a:17:86:80:a7:38:7e:5e:c6:38:63:
78:45:d8:03:04:e0:92:86:c8:ed:a5:c1:2f:3c:20:b9:6a:b1:
ed:1f:30:74:ee:11:19:0a:f3:07:0a:86:ec:17:7a:10:bd:94:
3b:45:78:fa:be:93:aa:ee:bc:5f:87:6b:6e:9d:e3:d1:5e:2e:
4f:99:d2:d4:5b:58:4c:25:81:55:81:1c:dd:a2:8e:ca:16:bf:
a2:3b:96:5b:ca:7e:d8:3c:1c:3f:86:05:c1:68:76:69:3e:d0:
8c:f1:d0:99:cb:e1:98:ac:ae:df:0d:1d:aa:92:b4:f0:cc:e4:
be:32:03:c8:c6:22:c5:a7:15:63:9a:1e:2d:b9:85:fd:09:f7:
d7:c3:d6:bd:d2:7e:eb:4c:94:b9:44:22:0a:53:91:36:44:f5:
e2:55:4a:2e:b3:10:35:1b:0d:58:c3:c9:96:e8:1a:b4:15:4b:
0a:1e:16:cf:39:c5:49:27:b7:e7:3d:33:6a:dd:33:d1:ae:ad:
b1:70:48:86:d5:98:8b:d7:5b:79:53:90:22:1b:11:9e:0b:5e:
c8:d9:58:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:44:56 2025 by rpki-client