Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
File: 4BeHJANFLz4AireYBHNC2yTts1o.mft (raw, json)
Hash identifier: cqzzMYVRnqJL+YnZ3E5yrmZWG01ybCEw1MNdQWm+At4=
Subject key identifier: 45:92:54:78:D5:F8:28:27:C5:46:FF:DE:95:C4:BF:31:F5:13:81:61
Authority key identifier: E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
Certificate issuer: /CN=e017872403452f3e008ab798047342db24edb35a
Certificate serial: 0198D4DFF4AC591ED26E1E8643943F90F5D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
Manifest number: 130E
Signing time: Sat 23 Aug 2025 03:01:43 +0000
Manifest this update: Sat 23 Aug 2025 03:01:43 +0000
Manifest next update: Sun 24 Aug 2025 03:01:43 +0000
Files and hashes: 1: 4BeHJANFLz4AireYBHNC2yTts1o.crl (hash: uxD3N5Oa7Wc6hGGuQKqHYPIWwJBIKwOeaOYH1k+fOH4=)
2: uyVHgvKbgyhIJP9r5aGfXjTHFJQ.roa (hash: qeBp72f9XovigjtK15ZxvxZQQWl9PNlTDrJhrcj6Lzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:f4:ac:59:1e:d2:6e:1e:86:43:94:3f:90:f5:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e017872403452f3e008ab798047342db24edb35a
Validity
Not Before: Aug 23 03:01:43 2025 GMT
Not After : Aug 24 03:01:43 2025 GMT
Subject: CN=45925478d5f82827c546ffde95c4bf31f5138161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:60:0d:10:40:68:a9:58:a2:0a:94:c9:6e:05:
24:38:6f:b0:bf:d0:b9:eb:9c:d2:04:6d:84:5a:c2:
29:c8:aa:4e:a2:55:38:4a:20:f0:e5:f0:0b:7a:2d:
33:8b:cb:59:85:07:85:b5:9e:f8:ee:ed:ca:c1:c9:
0c:c1:b1:04:71:8d:50:a4:37:9d:4b:ee:fb:f0:5d:
5d:20:ac:e1:18:1a:37:7f:5d:36:2d:72:4b:11:00:
07:a7:93:c5:22:16:76:b1:b3:4d:65:d9:8d:3b:4d:
80:9b:7a:cf:37:53:e1:20:b6:d3:b0:b2:7e:de:db:
1e:00:9b:6e:57:d3:3a:55:cb:a4:2e:03:79:b1:25:
c1:df:e0:19:94:9b:67:f0:d4:c9:09:66:b5:4c:8e:
9e:2c:dc:3a:7d:05:ad:cf:d4:d0:e5:98:08:e2:42:
5a:32:91:e4:4a:4e:c4:22:1d:9a:be:7d:96:c0:26:
85:da:f4:3f:a4:fa:2c:15:46:71:fb:8c:3d:f3:30:
ec:da:fd:1f:74:d0:10:aa:15:00:a0:a4:24:95:e7:
9e:95:82:86:93:c8:13:69:35:a5:17:db:fb:b5:5b:
d4:89:e4:c9:2c:05:84:bb:8f:65:5d:10:ea:97:b5:
b5:a7:c4:86:7a:f8:44:4a:f8:3b:62:15:f0:dd:02:
be:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:92:54:78:D5:F8:28:27:C5:46:FF:DE:95:C4:BF:31:F5:13:81:61
X509v3 Authority Key Identifier:
keyid:E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:55:a3:0c:b2:9c:ef:26:5c:5e:d8:bc:2d:c7:84:11:23:e3:
06:4d:03:7e:5a:fd:b6:7b:73:ed:32:ea:eb:83:4e:78:b0:2e:
87:56:b4:b7:1a:e1:0a:8a:5d:60:37:3d:0c:fb:9c:13:4e:c8:
31:3b:f7:cb:eb:cf:2f:50:f8:9f:3b:7a:36:a6:0a:83:b1:56:
f2:83:e2:2b:8f:23:42:65:7b:45:ed:67:09:de:72:82:46:0d:
6b:b1:7b:d4:ee:44:de:95:19:77:b2:b7:11:6f:e3:08:f5:58:
8a:90:b5:97:d5:34:54:a6:64:00:2d:8e:90:99:96:fc:8f:3c:
91:d5:b1:fc:78:92:71:51:4c:98:ad:f2:39:d7:e5:c9:e7:d5:
90:53:13:b5:0c:77:68:5e:93:28:91:2e:5b:33:f3:18:d0:0e:
6c:93:17:84:80:c2:33:1b:f1:df:4d:ea:f9:e9:3d:8e:b4:a4:
40:bd:39:2e:fa:20:c5:f7:27:8d:4d:8b:bd:d3:58:65:c2:8d:
c3:b5:56:13:ff:18:8a:00:6c:76:08:55:90:53:99:1a:d4:b4:
34:4c:f3:0c:0a:55:de:c4:42:14:fd:e5:8d:a3:df:9e:dc:91:
c5:c7:20:0a:b1:3e:a4:2f:e1:64:46:b3:cc:f4:86:5e:1b:c1:
c1:80:2b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:18 2025 by rpki-client