Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
File: 04zZRAVS59q5zVYx1KuHJFFTW3o.mft (raw, json)
Hash identifier: /hxNuaEnzpfa1WPP+EAjF2BCjh9CfHnt928xiY8EVBA=
Subject key identifier: A4:34:2A:A5:F7:2B:1C:4A:7E:2E:EE:F7:7D:D4:19:DF:83:08:AF:EA
Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
Certificate issuer: /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Certificate serial: 01975A5BD1E06558964B1453AD028DE8A96C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
Manifest number: 09E7
Signing time: Tue 10 Jun 2025 15:00:56 +0000
Manifest this update: Tue 10 Jun 2025 15:00:56 +0000
Manifest next update: Wed 11 Jun 2025 15:00:56 +0000
Files and hashes: 1: 04zZRAVS59q5zVYx1KuHJFFTW3o.crl (hash: T46PuUuAMJYKdU1fowEpFC2OwbIG9I4RvIUaAnIQhmI=)
2: 9T6vBYcsoKUn-R9cdzldyxGgHWM.roa (hash: 0ZHVPooYjEnANwVNoXwkqmIvZvnTskWkej+YHMUhiEI=)
3: XrqeZlVPArjVN5_uF6vXdWiqnXY.roa (hash: HzAhZpTtsFcjrQoG9BcE+tsdXOYDnX7JekwCMYp1Fu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:5b:d1:e0:65:58:96:4b:14:53:ad:02:8d:e8:a9:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Validity
Not Before: Jun 10 15:00:56 2025 GMT
Not After : Jun 11 15:00:56 2025 GMT
Subject: CN=a4342aa5f72b1c4a7e2eeef77dd419df8308afea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:68:47:12:c6:1d:c6:4c:f6:5a:5d:f5:4e:d7:
8c:06:17:40:35:be:09:6c:f9:b9:01:b1:ad:bc:07:
b0:82:f3:6b:5f:aa:f1:d7:aa:0b:db:f4:30:26:0c:
06:af:51:1e:1f:e8:66:b6:80:a9:81:b8:51:fb:12:
dd:2b:be:cd:c1:fc:f1:75:0a:be:ac:f5:b4:9b:ac:
1f:e1:e0:b3:b3:f0:40:e5:e4:d0:bb:04:95:85:7c:
a5:62:f0:3f:c5:24:28:42:4d:80:5a:81:b0:d9:2f:
46:50:b6:53:8e:f6:f4:5b:dd:dd:74:59:c4:cd:bd:
39:8b:f4:bd:70:2f:ee:b2:24:15:dc:7d:9e:c4:b5:
da:dc:e6:ff:0e:40:62:0f:91:84:10:72:84:3d:23:
d3:f6:0d:22:89:4a:6e:49:54:1e:43:04:a9:93:64:
ce:55:08:67:30:bc:3d:81:bb:bc:2b:b1:28:92:23:
84:c5:cf:78:1f:2f:71:9b:3a:cf:5a:f5:e3:d1:c2:
74:04:48:98:7f:70:7c:f8:dc:5d:1e:c3:e8:bb:45:
29:e5:05:fe:84:9b:47:8a:a6:db:76:35:0f:fb:6d:
4e:00:b1:f3:9a:74:71:46:5b:1e:d4:0a:ba:d5:f7:
c2:08:23:bd:5f:1d:c1:8b:90:68:bb:78:d4:7f:1f:
e1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:34:2A:A5:F7:2B:1C:4A:7E:2E:EE:F7:7D:D4:19:DF:83:08:AF:EA
X509v3 Authority Key Identifier:
keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:4e:45:4a:49:08:1d:b5:d9:8a:e1:46:53:52:30:29:1e:66:
45:9d:bf:43:7e:90:67:5c:0e:38:e2:e9:26:d4:45:f4:d4:91:
f2:f5:31:a1:69:30:4d:61:84:4f:fa:76:f5:24:15:88:65:c6:
b8:db:d1:ca:78:1d:08:c9:d2:b9:87:a5:dc:cc:00:09:9a:33:
4b:d2:85:64:5a:6a:bc:bd:27:ae:51:14:08:91:48:fa:bc:30:
06:68:ab:84:e7:aa:de:33:0d:da:ba:e1:08:17:dc:4b:ff:28:
44:34:e5:5a:01:a3:34:97:96:cf:39:bc:2c:35:87:c4:68:31:
8f:c3:92:19:60:2c:5c:e9:8e:c9:a3:73:53:0f:f2:b3:a8:b9:
4e:69:8c:7d:24:f4:e4:83:70:51:a1:94:60:d0:12:81:09:b6:
77:46:b2:0e:ef:44:b0:65:91:ed:09:6f:57:53:51:78:a4:32:
35:c8:d1:65:94:2f:55:45:01:f3:27:88:2f:34:33:17:7a:46:
f5:fb:7b:ea:52:48:57:34:7b:d8:be:e2:10:d1:de:09:34:0d:
76:81:d1:9e:2d:ed:db:2e:23:85:69:f3:34:04:be:40:69:27:
87:da:83:e6:0e:f3:f5:fb:0a:67:f9:37:7b:27:6a:ae:66:93:
89:0f:87:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 21:29:14 2025 by rpki-client