Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
File: 04zZRAVS59q5zVYx1KuHJFFTW3o.mft (raw, json)
Hash identifier: XWxIjSRxs1OQChhqbh89iXdpLt8GKHXiTLkIo0b11HM=
Subject key identifier: 6C:54:33:2F:0E:E4:82:76:1E:C8:82:C9:D3:9D:FE:82:5B:EC:64:68
Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
Certificate issuer: /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Certificate serial: 01989ECC47F7120E55F500D15744E9093D10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
Manifest number: 0A8F
Signing time: Tue 12 Aug 2025 15:00:44 +0000
Manifest this update: Tue 12 Aug 2025 15:00:44 +0000
Manifest next update: Wed 13 Aug 2025 15:00:44 +0000
Files and hashes: 1: 04zZRAVS59q5zVYx1KuHJFFTW3o.crl (hash: NcbqRgxbFvKyJYexfvdPaRZlFHQaWK9+gLVx4y1+oEA=)
2: 9T6vBYcsoKUn-R9cdzldyxGgHWM.roa (hash: 0ZHVPooYjEnANwVNoXwkqmIvZvnTskWkej+YHMUhiEI=)
3: XrqeZlVPArjVN5_uF6vXdWiqnXY.roa (hash: HzAhZpTtsFcjrQoG9BcE+tsdXOYDnX7JekwCMYp1Fu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:cc:47:f7:12:0e:55:f5:00:d1:57:44:e9:09:3d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Validity
Not Before: Aug 12 15:00:44 2025 GMT
Not After : Aug 13 15:00:44 2025 GMT
Subject: CN=6c54332f0ee482761ec882c9d39dfe825bec6468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:77:70:70:19:51:ca:9c:60:83:0e:90:6b:e1:
58:8b:22:9c:0b:b6:f6:e7:9f:f7:c1:81:a5:93:22:
2e:84:a9:ad:ff:35:61:14:d8:b9:e8:cb:bf:ce:09:
bd:02:f0:17:3b:9c:53:e7:84:b5:1f:25:fe:84:1b:
8f:e1:c1:7e:08:db:5b:d4:c7:63:bb:dc:ad:a4:1e:
d5:96:b2:6b:d4:37:83:04:02:ad:35:a7:32:44:19:
86:9b:d5:a4:0d:af:f5:e6:38:f0:1a:19:c0:52:b8:
d1:c6:76:fc:92:53:9d:8c:80:8c:95:da:a2:c8:e5:
36:31:65:69:d4:2a:d1:9e:4a:d4:4b:ca:ff:49:a8:
f3:d3:3c:1e:ec:f2:b0:a5:5d:cb:c1:39:42:f4:36:
41:ef:04:52:ac:e2:52:18:4d:d5:ec:36:08:5c:c5:
a9:0b:90:90:20:47:74:63:29:2e:cd:13:f9:3d:4b:
c0:b0:b4:0b:ea:04:46:03:57:f6:20:18:82:90:1b:
c2:bf:d1:73:16:7e:92:b3:ff:28:09:9d:fd:5c:82:
ae:a7:98:d0:61:67:73:3f:fd:ff:e1:ad:5f:34:6d:
34:dc:ce:9d:1d:7d:b1:9c:9a:dd:4c:03:3a:e6:ff:
34:c2:27:07:21:5e:c7:77:9e:1c:b5:f0:21:6a:43:
91:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:54:33:2F:0E:E4:82:76:1E:C8:82:C9:D3:9D:FE:82:5B:EC:64:68
X509v3 Authority Key Identifier:
keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d7:9a:ee:1d:81:ff:49:68:36:c0:40:11:aa:0c:2e:f3:fc:
81:b1:81:94:55:7e:a4:46:25:2e:f0:e7:57:18:dc:77:e8:3c:
9c:54:15:79:58:70:a9:0a:81:56:8c:6c:c4:41:89:0b:e2:31:
23:3c:8f:f3:a9:64:25:78:f2:05:dd:63:d5:61:c3:6a:5b:72:
b1:4b:87:65:1a:ed:40:a3:71:32:08:aa:f0:9e:ed:e6:e5:0d:
3e:67:5e:80:a4:ce:af:4d:72:51:e2:2c:6a:9f:5e:94:34:a6:
0a:7a:8c:2d:10:18:6f:a5:05:3e:c1:9d:8a:c7:b8:ec:22:14:
16:33:98:2a:95:13:67:b6:7e:7f:13:28:b0:57:ba:41:2f:34:
bb:8f:1c:7a:5d:10:44:a9:09:07:bb:35:13:18:f7:e8:45:aa:
b0:34:08:32:a5:fe:13:0c:56:f7:6e:e8:82:ad:3f:03:35:bc:
a8:b1:48:a7:1a:ac:8a:3c:f6:2f:58:15:5a:42:91:b4:20:d4:
d3:b7:68:3c:2e:d1:29:1a:51:ae:87:de:18:55:8d:15:4c:fe:
c4:ec:ba:98:9e:85:f9:27:c2:cd:02:8d:77:e0:de:17:de:ab:
68:7c:77:72:c1:94:1a:d1:ce:9c:54:e1:79:bb:ea:4e:8a:bb:
35:8b:e6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:48:18 2025 by rpki-client