Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
File: 04zZRAVS59q5zVYx1KuHJFFTW3o.mft (raw, json)
Hash identifier: j75SZ3ywmf7xael7i/HsEuruq9eYNp+Ffnp2zWwiE6w=
Subject key identifier: CB:0A:2A:3B:BD:66:E8:40:90:AF:EC:A9:2B:A1:98:53:F0:3A:62:4A
Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
Certificate issuer: /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Certificate serial: 019927E9B8E9D6256BFE11B5E8207C1B893A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
Manifest number: 0AD6
Signing time: Mon 08 Sep 2025 06:00:52 +0000
Manifest this update: Mon 08 Sep 2025 06:00:52 +0000
Manifest next update: Tue 09 Sep 2025 06:00:52 +0000
Files and hashes: 1: 04zZRAVS59q5zVYx1KuHJFFTW3o.crl (hash: FxTarBNMJyhLKWUcS58yNPkAxUjrTLs4cCWzrVH7MAo=)
2: 9T6vBYcsoKUn-R9cdzldyxGgHWM.roa (hash: 0ZHVPooYjEnANwVNoXwkqmIvZvnTskWkej+YHMUhiEI=)
3: XrqeZlVPArjVN5_uF6vXdWiqnXY.roa (hash: HzAhZpTtsFcjrQoG9BcE+tsdXOYDnX7JekwCMYp1Fu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:e9:b8:e9:d6:25:6b:fe:11:b5:e8:20:7c:1b:89:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Validity
Not Before: Sep 8 06:00:52 2025 GMT
Not After : Sep 9 06:00:52 2025 GMT
Subject: CN=cb0a2a3bbd66e84090afeca92ba19853f03a624a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6f:cf:13:db:50:40:a0:49:f0:2c:79:b1:a6:
d7:42:ab:6d:80:39:6e:dd:c7:8e:bc:ab:c9:f4:b6:
4d:77:15:a8:86:91:85:10:b9:38:50:8e:b8:83:c8:
fb:12:ed:08:e3:84:8c:4b:5f:b8:33:ae:22:a2:3f:
85:fb:71:12:e9:41:de:bd:c9:a4:2e:13:99:ca:b2:
0a:47:98:24:d5:e3:ac:68:99:fb:e2:3d:41:f9:34:
12:c5:03:0b:c4:40:f2:0a:ba:ad:9e:48:8b:4e:7e:
e0:81:4c:c2:34:c7:e3:9a:c1:ac:81:33:b5:7c:26:
52:93:7d:f1:8d:1c:bf:89:b1:a1:a4:cb:58:f9:c2:
1d:6e:3e:1e:4d:36:b2:a6:d1:60:84:c4:d3:44:26:
80:0a:a1:58:c3:f0:e5:12:72:85:2c:c0:6c:ea:4d:
7d:c9:99:c8:b6:4e:ae:7b:04:a6:9f:e3:52:cd:d9:
76:7e:0d:78:fd:50:0b:d5:f4:be:61:cf:1f:56:ad:
a9:24:47:cc:87:55:6e:5a:6b:b9:01:5d:73:b2:99:
70:6f:99:d6:2a:7c:67:6f:9d:3b:c1:a9:f1:c4:2a:
fa:c7:64:e9:fe:89:0c:c1:d6:6e:c7:4a:ad:b5:54:
28:03:ee:19:8d:12:20:da:16:2b:90:c6:76:db:d9:
7a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0A:2A:3B:BD:66:E8:40:90:AF:EC:A9:2B:A1:98:53:F0:3A:62:4A
X509v3 Authority Key Identifier:
keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:d4:82:27:07:cd:8a:49:cd:3a:1e:f8:6d:a0:11:13:66:a5:
4e:6e:a6:5f:37:39:27:09:30:df:df:31:26:3c:2b:13:4a:bc:
3b:ff:8b:6c:19:11:32:62:38:b0:22:4d:f6:6c:7b:c9:bf:85:
91:47:e7:55:43:3d:47:a7:4d:f2:96:5f:94:fd:d9:d9:99:61:
8e:2a:2a:1a:f3:23:6e:d4:66:54:12:0a:da:64:5c:0d:c0:74:
95:09:40:a0:ca:08:0e:19:b0:6e:7e:98:e8:65:63:ea:c9:98:
d8:f1:e2:6a:a4:7b:57:80:03:c6:34:09:bb:78:64:32:53:86:
2d:3e:39:57:94:7f:87:93:4b:a7:08:47:c7:66:68:21:27:c4:
72:ce:a4:d4:d7:cb:ce:09:ee:e9:fb:3e:79:85:a3:0f:cb:d5:
5e:c4:ec:22:dd:df:e4:5a:76:07:1d:1a:e4:57:6b:d3:ee:8a:
a9:eb:79:ee:15:5a:32:f1:5e:0a:1d:b2:e2:08:30:dc:de:a9:
11:bb:a0:5b:33:13:ac:78:44:c8:df:5e:0a:9a:9f:14:1b:4d:
4b:68:d4:0e:c8:5d:01:ba:3b:f5:55:32:fb:70:38:2f:38:f1:
e5:61:25:51:9c:6d:ca:b3:c4:b3:70:d1:6e:fa:35:40:99:21:
d5:a0:27:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:46:24 2025 by rpki-client