Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
File: 04zZRAVS59q5zVYx1KuHJFFTW3o.mft (raw, json)
Hash identifier: fAEXu6iEFi6kzI69RVlEr4iMTZXJT1KkDk3DJjl2kEk=
Subject key identifier: 8A:61:2A:0F:5F:35:B6:09:AE:6F:3D:BE:37:68:AC:AE:E3:C6:21:3A
Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
Certificate issuer: /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Certificate serial: 01978AA32793C3958A1DB377AC690223EF3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
Manifest number: 0A00
Signing time: Fri 20 Jun 2025 00:00:37 +0000
Manifest this update: Fri 20 Jun 2025 00:00:37 +0000
Manifest next update: Sat 21 Jun 2025 00:00:37 +0000
Files and hashes: 1: 04zZRAVS59q5zVYx1KuHJFFTW3o.crl (hash: eEe5QtoQsT8TkcgvWBdWjwCKbm2LHPTyiVeM9ICe78Q=)
2: 9T6vBYcsoKUn-R9cdzldyxGgHWM.roa (hash: 0ZHVPooYjEnANwVNoXwkqmIvZvnTskWkej+YHMUhiEI=)
3: XrqeZlVPArjVN5_uF6vXdWiqnXY.roa (hash: HzAhZpTtsFcjrQoG9BcE+tsdXOYDnX7JekwCMYp1Fu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8a:a3:27:93:c3:95:8a:1d:b3:77:ac:69:02:23:ef:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Validity
Not Before: Jun 20 00:00:37 2025 GMT
Not After : Jun 21 00:00:37 2025 GMT
Subject: CN=8a612a0f5f35b609ae6f3dbe3768acaee3c6213a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:df:51:52:8a:48:f3:05:f0:33:34:99:bf:05:
87:10:77:63:a3:04:33:a0:21:79:1c:bd:82:98:de:
ed:79:5a:8a:e1:e5:46:91:de:32:aa:d4:29:8e:cb:
d3:91:21:33:31:eb:26:40:86:0c:f6:f7:a6:fb:58:
b8:31:4b:07:67:35:72:00:b6:b0:32:ef:5f:f8:bc:
e8:2c:29:4e:3b:86:93:2b:e7:5e:e1:75:b4:a0:de:
d8:45:98:42:93:76:7f:b7:7f:df:a8:0e:5a:e2:9e:
c8:2a:b0:e8:ff:4d:b5:ec:c8:77:df:2e:e3:9c:8b:
b6:c1:5b:be:fc:00:12:1b:b5:38:46:55:2c:ef:89:
75:9c:10:73:b4:06:b6:5b:6d:df:4c:72:e2:63:70:
54:d2:af:b6:c0:0d:7e:12:51:48:92:17:7c:bd:e1:
eb:42:f0:c7:4a:83:20:3e:42:a1:92:1f:87:d9:12:
62:d7:59:e8:72:b8:ce:64:a1:c3:3e:ba:06:1a:db:
e5:56:71:8e:0d:26:2b:65:7a:d7:4c:aa:d6:4a:27:
09:52:97:c7:63:90:ee:5f:3c:e5:67:ce:95:4e:b6:
4a:88:96:36:e4:72:08:73:a9:89:5b:cb:fe:35:79:
ad:22:10:d3:1f:2d:24:9a:52:b4:20:ca:c7:12:03:
9c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:61:2A:0F:5F:35:B6:09:AE:6F:3D:BE:37:68:AC:AE:E3:C6:21:3A
X509v3 Authority Key Identifier:
keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:8a:f8:39:c6:d3:c1:e9:55:7d:e6:f9:01:45:7f:eb:66:68:
95:30:e8:97:a3:f3:d7:7a:79:f8:17:8a:14:25:96:20:58:91:
ef:f3:51:ce:4f:e0:60:15:d5:16:bf:90:4e:9b:0c:ac:31:fc:
e3:f6:75:c0:60:9a:a0:2c:b5:85:29:24:af:8e:d8:11:8f:34:
ea:21:cf:38:6d:6f:32:52:93:7f:00:7b:b7:d1:af:df:2b:0a:
bb:bd:2f:10:26:62:df:8e:38:79:a4:0a:d3:30:2a:f5:25:8e:
b8:a4:51:8e:81:8c:f0:d1:28:f9:c5:47:f1:7c:96:57:08:18:
3e:ea:1e:36:88:a2:a5:ce:c8:32:96:4b:56:5e:ae:7d:4e:71:
7f:23:41:60:67:7f:5c:68:06:34:97:97:7a:7b:d8:01:89:d9:
90:41:09:84:8e:8f:d2:77:e1:78:77:49:48:12:94:ec:c5:b8:
7b:88:a5:ca:9f:6b:bb:38:8c:8d:ce:da:db:05:3a:71:bf:55:
f5:bf:04:26:cb:08:11:2b:68:1c:ef:36:6e:ee:ea:8e:90:a7:
2d:4d:2c:98:fe:a5:bb:3f:d0:ca:d8:1a:ad:a5:a5:d9:d6:90:
4e:8b:bc:c8:e4:bb:f7:98:c6:ba:50:3f:15:38:59:b8:3d:ff:
3f:36:75:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 10:39:37 2025 by rpki-client