Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
File: 04zZRAVS59q5zVYx1KuHJFFTW3o.mft (raw, json)
Hash identifier: EdDIfKsydaBuiF3Sfk3iPnw07yIixufxyeoc1NWJTfw=
Subject key identifier: 65:A3:28:58:0F:FB:6C:89:98:19:69:68:E6:01:FC:22:86:17:25:74
Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
Certificate issuer: /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Certificate serial: 019765F217986DA22806ACE6D9999F6490DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
Manifest number: 09ED
Signing time: Thu 12 Jun 2025 21:00:53 +0000
Manifest this update: Thu 12 Jun 2025 21:00:53 +0000
Manifest next update: Fri 13 Jun 2025 21:00:53 +0000
Files and hashes: 1: 04zZRAVS59q5zVYx1KuHJFFTW3o.crl (hash: zZ3NLFNWOdfdCYbkNG9myLbmY1tCWt/rLkQgjhaovRE=)
2: 9T6vBYcsoKUn-R9cdzldyxGgHWM.roa (hash: 0ZHVPooYjEnANwVNoXwkqmIvZvnTskWkej+YHMUhiEI=)
3: XrqeZlVPArjVN5_uF6vXdWiqnXY.roa (hash: HzAhZpTtsFcjrQoG9BcE+tsdXOYDnX7JekwCMYp1Fu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:f2:17:98:6d:a2:28:06:ac:e6:d9:99:9f:64:90:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Validity
Not Before: Jun 12 21:00:53 2025 GMT
Not After : Jun 13 21:00:53 2025 GMT
Subject: CN=65a328580ffb6c8998196968e601fc2286172574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e6:d6:5a:4b:48:3f:ed:4d:f3:01:00:23:d2:
4d:1f:af:b5:5b:11:8f:d2:1a:8a:cb:46:85:06:2c:
5e:4a:18:cd:9a:bc:ed:43:74:ec:89:c1:15:d4:e4:
a2:70:0c:a9:b6:72:92:21:ea:d6:e0:1d:97:a1:a3:
11:8a:60:54:da:af:c8:cc:e8:70:99:13:a6:c5:da:
cd:0a:7c:2e:86:ee:1f:69:78:6f:03:d6:fd:e4:6c:
4a:69:9b:77:d4:cd:8d:65:40:e5:30:0d:36:62:2e:
7d:a1:42:bd:49:80:67:94:4e:4b:18:92:e2:59:ea:
f5:ca:7e:e0:67:fa:6e:84:7d:24:41:56:e0:eb:aa:
a8:ba:0d:9f:39:2b:ac:49:17:c2:b4:14:3c:86:3b:
75:e4:1e:84:2f:e1:b1:f6:34:9c:7e:3a:1f:89:89:
9e:6f:77:85:99:24:b9:81:ec:f3:68:00:15:6a:f2:
a1:de:57:72:86:7f:43:5e:10:04:6f:db:a0:49:6b:
b0:10:16:a7:0b:cd:03:bf:f7:71:a0:5a:af:41:44:
d8:f4:20:b3:a3:cc:84:d7:61:37:1f:ec:ca:53:97:
76:99:c4:31:77:a0:05:8b:c7:e1:07:0d:a3:8c:63:
d2:55:15:e9:40:b5:f6:e8:03:69:5a:2a:0a:fa:10:
b5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A3:28:58:0F:FB:6C:89:98:19:69:68:E6:01:FC:22:86:17:25:74
X509v3 Authority Key Identifier:
keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:8a:b9:93:41:79:27:c4:5d:41:ce:96:01:8d:16:91:85:8b:
4e:68:f7:9d:f9:36:31:60:83:e7:2b:46:e8:4c:57:25:9c:27:
90:c8:62:78:e2:cb:31:50:e0:35:78:51:7e:8f:f1:78:7b:40:
68:88:8e:74:0d:c1:3c:d5:9d:30:ce:72:98:6e:4a:ed:dc:66:
6d:9b:9e:92:d9:7f:c7:05:fb:94:f8:ec:10:cc:9c:e5:3a:dc:
80:b3:37:e0:d7:2d:ec:ae:fd:7c:e8:b1:84:df:47:f2:2c:e7:
a3:d5:47:56:9e:27:9f:9d:19:bc:6a:9b:a4:2a:24:b1:24:72:
68:a7:ea:46:7d:7e:56:78:e7:13:20:48:b9:3e:fa:97:bd:a9:
53:05:b6:1d:3c:0f:37:b1:8a:73:93:19:d7:a6:3f:7b:64:87:
4f:ea:9d:99:1c:c5:69:86:b5:e5:c4:23:26:19:f3:ca:f6:f9:
12:c1:7f:f5:6d:f0:70:1b:6e:22:bb:91:4b:8e:95:10:01:dd:
94:dd:e4:17:60:08:34:7f:e4:b7:1a:d9:46:da:3d:78:9f:34:
3c:b7:71:b8:62:ac:58:c4:b6:2a:c8:a8:ca:51:ff:e0:23:60:
34:72:bd:94:f3:dd:bf:6b:c9:89:3d:c1:e2:45:af:46:97:5b:
fd:39:b9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 01:41:27 2025 by rpki-client