Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
File: 04zZRAVS59q5zVYx1KuHJFFTW3o.mft (raw, json)
Hash identifier: zAv1GtOx6qJ2fkwjOvycWDSBm2FV/9pVGWUf9FNnByg=
Subject key identifier: 05:AA:6C:0F:FD:51:5B:87:AC:4B:65:91:68:06:D7:45:3C:AD:41:48
Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
Certificate issuer: /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Certificate serial: 0197586D3D8CD4EB28D2BC649761CD4B299B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
Manifest number: 09E6
Signing time: Tue 10 Jun 2025 06:00:43 +0000
Manifest this update: Tue 10 Jun 2025 06:00:43 +0000
Manifest next update: Wed 11 Jun 2025 06:00:43 +0000
Files and hashes: 1: 04zZRAVS59q5zVYx1KuHJFFTW3o.crl (hash: mF5rjnunRB5wA8MjtMAEx0LzBdBGe71oDOnaPwvFLA4=)
2: 9T6vBYcsoKUn-R9cdzldyxGgHWM.roa (hash: 0ZHVPooYjEnANwVNoXwkqmIvZvnTskWkej+YHMUhiEI=)
3: XrqeZlVPArjVN5_uF6vXdWiqnXY.roa (hash: HzAhZpTtsFcjrQoG9BcE+tsdXOYDnX7JekwCMYp1Fu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6d:3d:8c:d4:eb:28:d2:bc:64:97:61:cd:4b:29:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Validity
Not Before: Jun 10 06:00:43 2025 GMT
Not After : Jun 11 06:00:43 2025 GMT
Subject: CN=05aa6c0ffd515b87ac4b65916806d7453cad4148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d8:3c:fd:11:11:ab:19:c8:57:96:2c:1c:22:
1e:75:ff:6d:3b:f1:5b:8e:38:79:3f:5e:06:ac:b6:
95:d5:5c:ed:da:01:da:9e:a3:da:9e:71:b1:b0:05:
40:ca:d0:84:6a:e9:56:28:45:20:8a:50:fa:72:6b:
df:c7:fe:f4:8c:08:5f:50:f7:aa:17:39:06:08:32:
09:e6:12:59:28:e4:9f:50:1b:6f:20:ee:f1:89:4d:
42:46:7d:d7:da:18:0f:1c:92:c3:e5:02:41:a7:07:
d5:d4:58:43:a7:a7:5c:db:d0:79:cb:9f:0e:86:96:
a0:fe:25:5f:e2:18:de:98:09:49:b6:d4:0a:04:4b:
24:dc:7d:66:7e:3c:70:74:8a:ee:0a:27:58:25:90:
4a:50:55:42:49:68:47:e8:59:19:1f:02:ad:ea:d8:
8f:fd:c8:62:62:7a:45:0e:9e:f0:8a:05:a1:0c:48:
25:92:32:9f:9d:f6:d2:25:73:d5:63:39:69:36:d1:
2c:38:4b:9d:98:3f:70:32:7d:20:9f:15:25:81:5b:
69:6d:98:4f:37:31:e2:87:00:77:6b:69:f9:bb:4e:
ca:6f:c9:88:0b:d5:5d:06:9c:70:ec:3c:a8:39:e7:
1e:5a:3e:33:0e:95:6d:fa:ec:ff:a6:33:95:1d:2e:
45:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AA:6C:0F:FD:51:5B:87:AC:4B:65:91:68:06:D7:45:3C:AD:41:48
X509v3 Authority Key Identifier:
keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:80:3c:67:fa:5e:06:cc:58:54:f7:04:db:58:24:3f:45:22:
8c:b1:ab:9c:ca:d9:17:e1:24:c9:e5:11:b3:12:0e:30:98:69:
6f:b1:ae:74:ad:b3:4b:fc:50:4a:44:fe:fd:59:0d:54:60:37:
1b:09:50:21:89:f5:1f:4c:dc:3a:99:c6:cf:fd:e2:4d:b8:10:
23:fc:fc:28:cb:a7:c1:db:af:94:df:c2:7c:1d:e1:de:5b:f5:
e7:70:03:31:f6:cc:12:6c:b0:b2:7a:a5:a9:f5:fd:66:36:bf:
26:06:de:4f:fc:77:e5:d5:87:3f:26:d9:a1:c1:07:9f:73:94:
fa:44:35:3a:3b:0c:cd:29:a4:6c:df:04:42:ad:d7:b9:8f:e0:
58:dc:48:37:16:9b:ca:83:0a:ac:59:cf:5d:01:26:ce:91:5b:
9f:97:1c:23:e4:9b:7b:6d:1e:c6:2a:01:4f:42:86:60:dc:87:
b7:c5:52:0b:c7:0c:ed:c8:f8:62:77:bc:a1:02:a0:f7:e0:ec:
bb:c5:46:40:38:0a:51:b9:5b:c6:ef:8d:4e:06:ac:99:9b:02:
ba:9b:4d:10:4e:d2:5c:87:2f:3b:59:b8:8a:f6:dc:a9:6e:fa:
ed:e6:ab:82:84:ad:25:46:42:db:cf:04:d6:fa:95:c8:48:2e:
2b:55:cf:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 15:28:22 2025 by rpki-client