Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
File: 4BeHJANFLz4AireYBHNC2yTts1o.mft (raw, json)
Hash identifier: XO1Op8/jLjxIdXgYe9BqnWeYbce/LoPDV44oYDPDmUY=
Subject key identifier: 56:57:E3:47:A5:0A:0A:B9:44:AF:62:DE:B5:79:04:44:1F:C4:13:7D
Authority key identifier: E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
Certificate issuer: /CN=e017872403452f3e008ab798047342db24edb35a
Certificate serial: 0197B70E7733124407D96D5145C3E9CE9D8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
Manifest number: 127A
Signing time: Sat 28 Jun 2025 15:01:07 +0000
Manifest this update: Sat 28 Jun 2025 15:01:07 +0000
Manifest next update: Sun 29 Jun 2025 15:01:07 +0000
Files and hashes: 1: 4BeHJANFLz4AireYBHNC2yTts1o.crl (hash: VqsV4JA35Ql+ldHxciWqBgYhSkC+oF+na4a5EvyTaEI=)
2: uyVHgvKbgyhIJP9r5aGfXjTHFJQ.roa (hash: qeBp72f9XovigjtK15ZxvxZQQWl9PNlTDrJhrcj6Lzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:77:33:12:44:07:d9:6d:51:45:c3:e9:ce:9d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e017872403452f3e008ab798047342db24edb35a
Validity
Not Before: Jun 28 15:01:07 2025 GMT
Not After : Jun 29 15:01:07 2025 GMT
Subject: CN=5657e347a50a0ab944af62deb57904441fc4137d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:42:2a:b5:5c:bb:05:5f:b5:8e:ea:07:53:42:
f0:6c:85:46:63:34:88:db:cd:ce:49:84:e0:de:a6:
ef:30:78:b7:01:0c:39:91:5d:ed:45:44:e3:df:67:
43:53:59:92:b3:2e:75:be:9a:eb:85:13:f6:f3:9f:
0e:60:a9:66:ba:21:52:da:17:30:16:5a:a5:c2:2b:
da:a1:2a:d3:1e:6d:bf:0b:96:25:df:8d:d1:31:af:
45:4b:8a:5e:99:de:5d:1a:b1:a6:3a:1e:e9:56:ef:
14:f4:02:59:b3:f2:99:03:0a:b8:4c:02:f1:cc:b3:
7e:58:41:9f:df:3a:d3:65:f8:52:38:d0:50:41:56:
a2:84:a7:9a:aa:04:e2:68:b3:f9:0f:18:de:7c:be:
5a:da:7a:f4:6b:57:47:20:98:19:cb:d0:18:10:01:
c4:4d:82:23:98:85:97:69:01:fc:df:23:75:45:55:
47:8b:bf:2f:2f:f1:9b:e0:e4:8d:a9:e5:7f:16:ed:
1d:eb:fa:34:d1:5f:9e:46:cf:95:91:0e:09:b7:04:
2c:7c:9f:ea:a3:6b:16:3b:dd:7e:9b:c9:d3:e3:40:
1b:c6:1d:15:0d:1c:f9:c2:e3:89:fa:dd:c0:87:dc:
9a:43:5f:64:81:e8:b8:a5:0c:9c:ae:52:32:48:99:
a7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:57:E3:47:A5:0A:0A:B9:44:AF:62:DE:B5:79:04:44:1F:C4:13:7D
X509v3 Authority Key Identifier:
keyid:E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:4e:6b:7d:a7:b5:19:5a:0f:d5:7a:93:76:e0:f9:29:1b:b7:
70:8e:53:e4:9c:96:91:50:e7:2c:7f:b4:cc:1b:a3:e3:83:ef:
46:b1:6f:85:ff:80:8d:36:9a:5d:bf:4f:24:9d:f8:1c:02:bb:
68:de:da:7d:b4:bd:6f:c6:c6:e8:29:30:c7:0e:cc:a8:0e:a7:
4d:3b:4a:ec:31:c7:05:a3:c8:d8:67:f7:e6:9d:dc:1c:2b:28:
ca:33:32:a8:18:99:a5:4a:72:2f:72:d9:39:29:84:00:48:4b:
fe:ba:25:46:37:37:d2:83:a3:f3:ab:74:60:99:e7:dd:ac:f3:
9c:58:e4:23:43:2a:3c:a3:57:79:d0:3f:06:44:58:1f:44:e2:
77:e7:43:6e:27:41:a9:4f:43:71:e9:1c:4b:95:03:58:25:e6:
6d:9a:e1:dd:94:60:f8:89:e8:67:4e:8a:f9:bf:ad:86:f9:66:
cf:4a:6d:6e:61:81:c0:d3:93:ef:0d:74:bd:ec:e9:d0:37:da:
12:cf:69:00:e0:ce:cc:d2:b0:cf:48:a8:8e:a9:49:24:a5:2d:
a5:30:aa:df:26:95:d7:1b:6c:d1:c0:1c:d6:cf:e6:88:c9:ea:
41:ea:9a:12:37:27:db:7c:43:90:75:f1:04:58:03:87:5d:eb:
6a:a4:3e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:17 2025 by rpki-client