Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.mft
File: 04YKmzZYX7iqBR_Df8xqB3OZDL8.mft (raw, json)
Hash identifier: oMF1cl6b2cVf5l2BLXFhOmyAc4Nx7vPotJp31MwUD5I=
Subject key identifier: D3:37:0B:C7:06:E9:0E:A3:B9:2E:96:90:96:8E:37:B4:F9:E6:DE:8B
Authority key identifier: D3:86:0A:9B:36:58:5F:B8:AA:05:1F:C3:7F:CC:6A:07:73:99:0C:BF
Certificate issuer: /CN=d3860a9b36585fb8aa051fc37fcc6a0773990cbf
Certificate serial: 0197CC4CF7E538490B57464E23D3918EB6E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.mft
Manifest number: 15CC
Signing time: Wed 02 Jul 2025 18:01:25 +0000
Manifest this update: Wed 02 Jul 2025 18:01:25 +0000
Manifest next update: Thu 03 Jul 2025 18:01:25 +0000
Files and hashes: 1: 04YKmzZYX7iqBR_Df8xqB3OZDL8.crl (hash: caHlm7TNl/gLQHFBEpl8VHjhT11+dD4MfJCz28w/2Xc=)
2: 7tcRmUXU9Q3TzSU3E8XUeyrYniI.roa (hash: 3q07zOwK9FpR/xxKetT0w53QAdYnEKsI1+bhtbTPVBE=)
3: XK3m5m9D-x9fvYelJ012WnW2Xog.roa (hash: uj4ER+AdCmGKRZXl0/zG8YdqqGFuaXIIxndencWXdmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 18:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:4c:f7:e5:38:49:0b:57:46:4e:23:d3:91:8e:b6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3860a9b36585fb8aa051fc37fcc6a0773990cbf
Validity
Not Before: Jul 2 18:01:25 2025 GMT
Not After : Jul 3 18:01:25 2025 GMT
Subject: CN=d3370bc706e90ea3b92e9690968e37b4f9e6de8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e3:ea:01:6c:ec:8e:77:42:65:02:cc:95:87:
cf:f8:8f:1a:d5:f8:23:e8:54:7d:58:58:18:df:88:
d7:29:57:62:30:4e:c2:1b:ad:a4:4d:59:32:18:e9:
b9:e6:bd:03:35:61:1b:bd:72:cb:f8:47:44:76:43:
03:93:96:5e:55:5f:87:5b:5f:06:5e:44:cd:8d:f5:
26:9c:84:b1:0f:69:90:18:91:de:9f:81:69:d6:b5:
24:97:73:9b:35:3f:33:e9:77:37:9a:44:fc:c1:a5:
e7:6b:b8:02:bb:9b:29:ff:c5:0a:85:93:5c:90:39:
3a:6f:ca:65:c3:83:19:36:e2:3a:0a:ca:a6:6f:c3:
0d:66:36:1e:d1:5b:c1:02:8e:b5:3b:0d:0e:1e:c6:
43:24:85:d3:14:b0:98:62:6d:4d:33:51:c5:e7:90:
4f:d7:68:88:32:e7:fd:33:6a:2a:54:79:a2:7c:5f:
47:50:3d:08:52:fc:7c:85:4d:86:eb:f8:d9:00:eb:
ee:7a:0f:7e:82:4e:e4:36:9c:63:69:8e:a1:89:8f:
c5:00:2a:fd:c8:40:4a:47:d9:94:c2:9a:fb:d6:b6:
1e:54:80:c1:4c:6b:93:f4:bf:89:df:1b:69:bf:df:
e5:54:69:c6:f6:3d:43:98:ac:b9:3a:b1:cc:66:35:
f3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:37:0B:C7:06:E9:0E:A3:B9:2E:96:90:96:8E:37:B4:F9:E6:DE:8B
X509v3 Authority Key Identifier:
keyid:D3:86:0A:9B:36:58:5F:B8:AA:05:1F:C3:7F:CC:6A:07:73:99:0C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:08:f5:9e:12:51:60:96:9d:7f:18:9b:fe:a1:da:ec:82:63:
65:ca:3f:e8:7e:f5:a2:dd:67:1c:ba:2b:16:e7:25:8e:47:ba:
72:1d:91:3e:6c:65:9b:c6:37:b3:02:44:91:17:40:1a:83:af:
6a:2a:f4:f2:44:4e:ba:de:29:35:22:04:99:b2:aa:56:e5:86:
34:fd:8c:8a:54:df:bd:2d:c1:d1:8a:d9:65:08:44:45:24:6f:
d3:8d:cc:ed:0c:95:ba:56:5e:68:ff:bf:6b:ed:c2:4e:2e:f6:
1a:c2:56:9d:73:78:3c:82:7b:cd:b1:0f:6a:4f:ea:da:ef:7c:
07:3b:06:70:10:25:91:7e:28:c5:ba:fb:17:eb:c8:11:91:57:
77:68:50:55:b7:9a:ac:df:0d:e8:5d:2d:2b:70:6b:f7:b7:52:
92:a1:d8:31:99:5d:26:2d:2e:08:8e:18:d5:b6:fd:48:73:c3:
80:34:66:c0:82:9a:61:a7:67:2c:81:fe:67:36:b6:0b:33:6c:
df:44:7e:53:5c:78:3c:ca:f9:ca:4f:ca:eb:ff:15:45:b0:b1:
2f:0e:55:38:d4:8f:20:20:55:e1:98:9d:d6:ae:26:a5:17:91:
94:76:83:8f:39:ef:f5:8f:3d:02:91:8d:87:82:ad:46:5a:f1:
5b:6b:ff:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 03:33:45 2025 by rpki-client