Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
File: 04zZRAVS59q5zVYx1KuHJFFTW3o.mft (raw, json)
Hash identifier: VT2cQ81mahT3avlM/ubChxZ4QhJwqIhd7Y6HbAvR26s=
Subject key identifier: 41:D4:CD:F6:DE:36:80:6B:05:91:B1:79:C3:23:62:D5:FD:D2:B7:21
Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
Certificate issuer: /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Certificate serial: 0197567F64C0DACC16AD7B98E187F30848AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
Manifest number: 09E5
Signing time: Mon 09 Jun 2025 21:01:18 +0000
Manifest this update: Mon 09 Jun 2025 21:01:18 +0000
Manifest next update: Tue 10 Jun 2025 21:01:18 +0000
Files and hashes: 1: 04zZRAVS59q5zVYx1KuHJFFTW3o.crl (hash: e1uiL0a9R/pyYWiGJuEM+qyI+xwshJfcG/VRpNmZDk4=)
2: 9T6vBYcsoKUn-R9cdzldyxGgHWM.roa (hash: 0ZHVPooYjEnANwVNoXwkqmIvZvnTskWkej+YHMUhiEI=)
3: XrqeZlVPArjVN5_uF6vXdWiqnXY.roa (hash: HzAhZpTtsFcjrQoG9BcE+tsdXOYDnX7JekwCMYp1Fu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:7f:64:c0:da:cc:16:ad:7b:98:e1:87:f3:08:48:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Validity
Not Before: Jun 9 21:01:18 2025 GMT
Not After : Jun 10 21:01:18 2025 GMT
Subject: CN=41d4cdf6de36806b0591b179c32362d5fdd2b721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f9:9e:19:a5:ea:cf:bf:6c:8b:b6:c9:53:26:
1b:08:5c:24:9a:b3:63:71:cd:98:36:2f:52:df:61:
fd:33:5a:58:a9:a3:13:8d:ec:47:d7:7d:ad:45:55:
97:7d:88:6d:9a:c5:8a:40:0c:3f:f3:1a:a4:a7:ab:
cc:6a:f2:a2:53:0c:0d:39:ce:52:8a:05:68:aa:e7:
55:01:90:2d:6f:06:5b:40:3c:27:51:e9:38:db:e2:
6e:bb:3f:be:a1:62:00:28:39:a4:1e:e7:dc:fc:34:
15:76:42:89:08:f7:01:a3:b1:7b:cc:63:92:d0:f3:
6b:89:f3:7a:dc:57:6d:2b:8c:fb:f9:9f:14:fd:fc:
dc:db:12:0d:98:6f:b0:b1:66:22:40:bd:13:02:28:
20:65:5c:d2:d8:00:d4:2a:46:8d:ae:2f:28:f4:d3:
21:99:36:7c:fc:be:48:59:83:c2:5b:34:6b:72:cd:
0a:5c:ef:98:e8:f6:bf:ee:58:26:77:d4:8d:14:f6:
62:ea:dd:6b:0b:07:8a:b9:b3:87:bd:fc:5a:43:fe:
ec:32:70:be:34:77:ce:ee:ae:f5:7f:dc:05:47:37:
fd:d8:a9:3f:29:60:b5:6d:89:06:e0:c9:de:88:3a:
33:d0:ef:70:10:e1:f7:61:f2:07:29:be:d7:e2:2d:
26:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D4:CD:F6:DE:36:80:6B:05:91:B1:79:C3:23:62:D5:FD:D2:B7:21
X509v3 Authority Key Identifier:
keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b4:a2:3d:b8:d6:67:0f:1e:ed:73:c6:cb:4b:b0:7a:67:31:
ee:3b:2c:20:85:b9:bd:f2:48:55:86:6d:cd:1c:21:6a:68:18:
f9:21:15:b0:a4:20:3f:c5:4d:68:3d:15:c6:c1:e8:ce:7b:f6:
df:c3:0c:b9:46:ce:1a:9c:4f:5b:f3:89:9c:d8:3a:8f:bc:28:
46:c4:a9:b1:ab:39:cf:4d:83:ef:df:12:48:5a:75:76:05:39:
1c:5b:bd:77:df:97:91:88:18:f8:42:a7:dd:ce:1c:5d:97:c0:
b4:de:bc:f6:d5:95:f2:b2:13:dd:7a:9b:fd:85:98:5c:7f:e8:
58:31:b4:bc:f2:d1:b4:ee:42:31:bb:79:d8:99:93:c0:e1:70:
7e:a2:74:da:61:9b:9c:3a:1e:72:5f:02:2f:eb:8c:b3:fd:88:
e1:e3:c7:49:e7:ce:6d:43:0f:71:71:65:80:7a:e5:3f:db:c8:
6a:0f:c5:2c:64:6d:c2:0e:f1:3f:61:45:5e:55:d4:74:bb:6f:
7d:71:c3:26:60:1b:fd:51:46:ac:8d:c2:80:23:89:dc:e2:f8:
dc:c3:a9:31:b3:0c:2e:99:5d:73:54:7f:5d:94:ed:ee:83:6d:
96:01:71:90:61:8b:89:e7:e2:b8:ff:e0:27:e3:d2:ef:e1:b4:
9c:b4:a7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:41:09 2025 by rpki-client