Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
File: 04m0GNo0qjk07N4rcx3x1O1-yA4.mft (raw, json)
Hash identifier: ye9V9hOSWNkv1SFlvbizRuJKGIJi9hbIifj+NkjdhbQ=
Subject key identifier: 3B:4A:40:A3:85:04:D7:4F:02:E3:81:26:52:BE:2B:86:60:AC:B4:F1
Authority key identifier: D3:89:B4:18:DA:34:AA:39:34:EC:DE:2B:73:1D:F1:D4:ED:7E:C8:0E
Certificate issuer: /CN=d389b418da34aa3934ecde2b731df1d4ed7ec80e
Certificate serial: 01975121E0D5428E17F205C5D9D8BF55B850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
Manifest number: 1292
Signing time: Sun 08 Jun 2025 20:01:04 +0000
Manifest this update: Sun 08 Jun 2025 20:01:04 +0000
Manifest next update: Mon 09 Jun 2025 20:01:04 +0000
Files and hashes: 1: 04m0GNo0qjk07N4rcx3x1O1-yA4.crl (hash: O8kK25BxdL7hi5VPAGY2e5LLnoI8knO0ytBirXVu7Ts=)
2: cWwT1szK5NdnVm06LjbXvG6eYg4.roa (hash: W4zwG2oQXcpZIEG+6MYSyZ5G6TI/ulbfB+7HQbWQK/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:e0:d5:42:8e:17:f2:05:c5:d9:d8:bf:55:b8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d389b418da34aa3934ecde2b731df1d4ed7ec80e
Validity
Not Before: Jun 8 20:01:04 2025 GMT
Not After : Jun 9 20:01:04 2025 GMT
Subject: CN=3b4a40a38504d74f02e3812652be2b8660acb4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6d:b9:54:e2:54:ea:45:8d:2c:3a:50:9b:29:
f3:20:33:da:16:1a:84:cf:ec:59:fb:05:da:9c:62:
af:a6:ba:50:3c:0b:0b:09:30:e9:23:79:d1:e8:f3:
4d:92:6e:2c:20:df:61:45:a6:9e:6f:7c:8c:fa:19:
84:9f:f2:69:72:52:8d:98:60:fc:27:20:63:0d:94:
10:ee:6d:8a:e0:1a:87:53:3c:7b:19:d4:ae:97:90:
9a:6e:6e:3a:b1:6b:66:e5:15:c8:c8:3b:59:59:9c:
0b:df:d6:55:26:3b:09:bc:92:a4:51:41:03:b3:3e:
b8:85:dc:d2:d6:c3:4e:b0:20:9b:fd:4b:df:fe:92:
ea:2b:bb:0c:47:0d:75:eb:89:1d:09:5b:83:96:51:
5e:74:fc:f4:a6:e1:ba:4f:cd:ea:dc:61:df:b1:7c:
bc:97:99:69:f5:4f:e5:39:6e:cf:d1:ba:03:5b:1f:
02:2b:db:1f:b6:a6:dc:22:40:72:94:d8:4e:8d:3b:
e7:21:bc:d5:13:36:e7:10:01:90:2c:11:c3:b7:85:
e1:7b:9e:22:6e:a8:53:a2:1b:8c:c1:dd:b1:36:20:
f8:60:ba:96:48:c6:0e:51:79:f5:f8:48:84:45:ff:
15:99:37:b8:bf:cd:76:df:8e:6b:f0:41:a6:e7:2b:
ab:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4A:40:A3:85:04:D7:4F:02:E3:81:26:52:BE:2B:86:60:AC:B4:F1
X509v3 Authority Key Identifier:
keyid:D3:89:B4:18:DA:34:AA:39:34:EC:DE:2B:73:1D:F1:D4:ED:7E:C8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ff:dd:ed:b7:35:a2:55:2f:1b:82:9d:9d:a8:e0:35:95:53:
d6:2a:1c:1d:46:84:eb:b3:e6:15:ba:a1:34:6d:e5:cc:c7:65:
d8:28:08:74:fd:c6:92:30:52:96:87:c3:8c:47:a4:d6:93:81:
87:cf:52:d3:53:a6:6b:ef:9e:81:2d:a2:14:c6:13:d5:9a:fb:
86:25:9a:aa:7a:6d:5a:0b:13:c0:4a:a2:f1:dd:b0:23:68:c1:
20:50:34:1e:5c:19:37:48:60:84:a4:5c:79:88:d3:67:a0:9e:
09:fc:52:bc:47:3c:0b:9f:91:ab:81:2d:5f:89:f8:e2:e8:76:
0c:10:b4:57:05:aa:ee:08:24:ca:8d:6d:05:7c:00:e0:38:86:
1b:f4:7c:89:22:e5:78:c2:ab:0c:8e:a4:65:53:42:0f:30:e8:
53:89:a8:45:9c:61:70:36:6b:02:c1:49:14:3e:2b:31:35:f0:
28:9d:5b:93:46:c5:97:b7:5d:a9:75:7d:04:52:53:75:f0:9b:
a1:22:c2:1b:19:01:f5:5a:f6:2c:71:ea:7e:f2:9b:d4:11:9e:
b9:87:ff:fd:16:b4:d4:99:76:a8:3d:89:fb:21:07:c4:c6:43:
17:9f:f8:30:c9:b9:c2:33:11:8a:35:13:31:21:68:e4:82:27:
a4:ba:65:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:09:58 2025 by rpki-client