Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.mft
File: 04YKmzZYX7iqBR_Df8xqB3OZDL8.mft (raw, json)
Hash identifier: PG4FaHwkJt2+pmBuUVRGp1PreOmU0zyOv3E3lHRUlh4=
Subject key identifier: AF:F6:CC:26:6A:67:C7:42:1F:C6:A6:06:8C:53:79:A7:AF:E2:C7:93
Authority key identifier: D3:86:0A:9B:36:58:5F:B8:AA:05:1F:C3:7F:CC:6A:07:73:99:0C:BF
Certificate issuer: /CN=d3860a9b36585fb8aa051fc37fcc6a0773990cbf
Certificate serial: 019769CF088B344B0917E42E74DB6D106F6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.mft
Manifest number: 1599
Signing time: Fri 13 Jun 2025 15:01:05 +0000
Manifest this update: Fri 13 Jun 2025 15:01:05 +0000
Manifest next update: Sat 14 Jun 2025 15:01:05 +0000
Files and hashes: 1: 04YKmzZYX7iqBR_Df8xqB3OZDL8.crl (hash: jLQoeNYEfd0mNpB6jV+xDpuO24wEZ0kPGNPn+bOkbBE=)
2: 7tcRmUXU9Q3TzSU3E8XUeyrYniI.roa (hash: 3q07zOwK9FpR/xxKetT0w53QAdYnEKsI1+bhtbTPVBE=)
3: XK3m5m9D-x9fvYelJ012WnW2Xog.roa (hash: uj4ER+AdCmGKRZXl0/zG8YdqqGFuaXIIxndencWXdmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:cf:08:8b:34:4b:09:17:e4:2e:74:db:6d:10:6f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3860a9b36585fb8aa051fc37fcc6a0773990cbf
Validity
Not Before: Jun 13 15:01:05 2025 GMT
Not After : Jun 14 15:01:05 2025 GMT
Subject: CN=aff6cc266a67c7421fc6a6068c5379a7afe2c793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:10:83:0b:ef:6c:81:a8:3d:06:d7:00:f3:0f:
0f:f8:8d:27:b2:a2:75:4c:bb:1a:a1:ec:01:f8:ee:
13:28:d1:48:46:61:70:41:46:57:b7:d4:ca:56:40:
d3:9c:75:2d:ce:0a:2a:e9:44:a3:c7:47:d0:0a:33:
8f:1a:e8:f6:25:70:45:3c:01:14:c1:9f:07:df:0a:
8f:2c:94:4c:e3:fb:af:bc:0c:20:70:bb:1a:99:c2:
b7:85:69:a2:27:a0:b6:52:55:6b:c0:8f:84:a3:08:
f7:59:24:19:96:3a:32:fa:c1:17:02:42:ff:62:af:
09:df:1b:9f:4c:c3:e6:a5:95:71:1f:7c:4d:3e:30:
08:6c:8b:57:d4:a4:06:6c:30:c8:d0:05:b8:e7:ac:
34:20:be:62:c8:f7:66:ff:5f:83:55:3d:4d:66:40:
36:fe:09:ba:45:5c:54:c3:fd:4f:74:aa:72:fa:6d:
e5:51:a3:f8:78:01:a8:7a:40:bf:4d:0a:1b:8f:d0:
4e:55:59:06:fd:ac:cd:1d:49:74:8f:f6:ff:da:65:
0f:51:86:71:a2:b7:11:1f:d3:2e:bc:3d:ae:af:fc:
df:c3:39:be:01:f0:30:76:30:ea:58:1c:9b:46:0f:
50:01:95:7c:de:11:87:be:41:82:9a:bb:b1:c6:36:
f0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F6:CC:26:6A:67:C7:42:1F:C6:A6:06:8C:53:79:A7:AF:E2:C7:93
X509v3 Authority Key Identifier:
keyid:D3:86:0A:9B:36:58:5F:B8:AA:05:1F:C3:7F:CC:6A:07:73:99:0C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a7:38:f4:fa:73:63:0c:b3:d5:59:90:be:54:53:75:41:5b:
0d:1f:96:b4:b8:08:77:ce:fa:2b:9c:bd:29:b8:e8:71:fe:bc:
0c:8c:d1:9d:74:5b:1d:f8:fb:bc:36:1c:40:00:af:5b:f6:7d:
25:da:d1:3f:ae:f9:1d:76:ba:d2:6c:80:16:a1:67:2f:42:32:
af:45:45:45:55:e6:14:c0:fe:3d:7f:a8:5d:75:cb:5c:13:09:
50:6f:03:eb:86:6e:da:83:f8:4e:24:54:0b:cf:fb:7e:ef:b6:
39:f3:11:44:58:ed:70:a6:ea:a7:db:1b:fc:18:c8:d0:9b:20:
f2:13:85:02:dc:bf:70:df:7a:7f:08:12:0c:eb:19:d2:2e:4a:
75:cc:8d:98:c6:d5:96:b6:5b:8f:5d:e5:5e:3b:84:47:3b:27:
7a:66:31:ba:95:40:bb:5a:ba:2f:9e:d3:15:be:bc:71:d0:84:
de:d7:be:cc:14:d5:15:6c:c0:bc:2d:3d:1c:39:9c:16:c7:83:
54:41:e0:91:19:33:96:b4:c7:75:55:35:d1:a7:68:03:65:ea:
60:58:41:48:6b:60:07:72:18:1c:49:18:e9:db:00:d7:41:60:
26:62:e3:81:52:df:8d:e5:67:04:c5:1f:c8:3f:f5:a7:26:8a:
98:29:a4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:25:57 2025 by rpki-client