Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.mft
File: 04YKmzZYX7iqBR_Df8xqB3OZDL8.mft (raw, json)
Hash identifier: DFo8G93cqFo+qOHs8qP9L3i2HDN5ih9dN5O/xX2Erzs=
Subject key identifier: 79:D4:7C:60:EB:60:EF:FC:CF:60:F3:B9:E4:CF:6A:3F:49:BC:B6:5D
Authority key identifier: D3:86:0A:9B:36:58:5F:B8:AA:05:1F:C3:7F:CC:6A:07:73:99:0C:BF
Certificate issuer: /CN=d3860a9b36585fb8aa051fc37fcc6a0773990cbf
Certificate serial: 0197B70ECAFD23B47843D0841E9D51C5CDD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.mft
Manifest number: 15C1
Signing time: Sat 28 Jun 2025 15:01:29 +0000
Manifest this update: Sat 28 Jun 2025 15:01:29 +0000
Manifest next update: Sun 29 Jun 2025 15:01:29 +0000
Files and hashes: 1: 04YKmzZYX7iqBR_Df8xqB3OZDL8.crl (hash: k/xiHUjJhHiXkxQ+dbgv+7oG+VXaPIYITn8RO82N5FI=)
2: 7tcRmUXU9Q3TzSU3E8XUeyrYniI.roa (hash: 3q07zOwK9FpR/xxKetT0w53QAdYnEKsI1+bhtbTPVBE=)
3: XK3m5m9D-x9fvYelJ012WnW2Xog.roa (hash: uj4ER+AdCmGKRZXl0/zG8YdqqGFuaXIIxndencWXdmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ca:fd:23:b4:78:43:d0:84:1e:9d:51:c5:cd:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3860a9b36585fb8aa051fc37fcc6a0773990cbf
Validity
Not Before: Jun 28 15:01:29 2025 GMT
Not After : Jun 29 15:01:29 2025 GMT
Subject: CN=79d47c60eb60effccf60f3b9e4cf6a3f49bcb65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8f:c7:92:68:78:b2:8f:2f:d3:39:7b:ba:a3:
d1:0f:f2:25:dc:ab:1f:f3:98:0f:60:82:a1:c6:d5:
22:79:92:dc:a6:92:5c:cc:11:cd:39:e9:c1:df:f8:
5c:ad:1d:3b:b9:77:1a:37:12:b5:60:25:c5:68:ff:
2c:63:77:ff:b8:13:e1:8d:8b:b2:83:18:d3:3d:85:
56:d0:21:98:6b:de:b2:a7:6f:00:41:2a:07:fb:28:
28:a2:5a:53:2d:c1:9c:d9:70:ae:a3:ba:6f:60:c5:
23:39:c5:1c:3c:95:02:1e:e1:5f:15:c2:46:38:80:
b9:2f:7c:50:3d:59:7f:ba:51:a1:0b:f3:40:7d:8f:
dc:da:81:b7:72:16:59:6f:c5:f9:cd:2a:79:5a:da:
54:b7:3d:05:cc:05:64:7f:b9:e8:e2:f9:e0:a7:a6:
f3:84:f3:8a:9e:f4:59:79:f7:52:2f:a4:f2:20:8f:
e5:d5:24:dc:92:5a:36:21:ba:ba:75:ca:f9:a3:0d:
0b:5c:10:12:61:da:8d:de:07:27:ab:42:e5:94:7b:
b7:a7:29:f1:db:90:29:a4:32:be:e5:cb:8c:f4:6f:
f2:33:fb:f5:f3:64:54:7c:52:f2:ef:c5:71:45:c7:
59:c4:a2:07:eb:81:8c:a9:3c:f2:35:2b:8a:3c:3c:
8b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D4:7C:60:EB:60:EF:FC:CF:60:F3:B9:E4:CF:6A:3F:49:BC:B6:5D
X509v3 Authority Key Identifier:
keyid:D3:86:0A:9B:36:58:5F:B8:AA:05:1F:C3:7F:CC:6A:07:73:99:0C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:75:b9:d6:be:5d:42:ac:f7:36:53:47:21:34:97:a7:cc:59:
e7:bc:6a:da:ff:42:c4:dd:2c:0b:23:8f:11:3d:bd:76:80:b1:
c4:4e:25:a8:71:d5:4a:18:04:7b:78:35:a8:58:e2:a2:3e:8f:
7f:b8:9a:1b:d9:d6:90:1e:92:60:ab:22:eb:30:6d:b1:16:53:
33:b0:51:9a:c8:5a:73:2f:a5:cc:6c:dd:cf:28:3a:6a:56:22:
f5:5e:d3:41:cb:70:9d:b6:5d:20:0f:32:57:cd:6b:b5:fe:fb:
34:26:78:0d:1b:78:7f:3b:3b:1e:04:ad:d6:66:00:78:29:81:
9f:c3:cb:ed:0f:6d:3e:08:14:83:c7:bb:09:24:f2:4f:fb:3f:
07:55:90:25:16:02:e4:9a:74:99:76:b8:07:02:d4:2f:19:7a:
de:d7:5b:e3:08:6d:9c:9d:4e:e6:23:4a:aa:6e:bf:89:64:3b:
5a:78:c8:ec:f4:f3:83:52:a2:ea:34:64:3b:94:d8:f8:30:7d:
b4:d3:d3:8b:2b:4c:7b:98:88:e6:ec:0b:c5:65:2b:56:7d:57:
56:93:d5:75:51:e9:a5:72:d3:7b:44:ce:05:27:7f:0c:03:2c:
91:26:9a:90:77:39:4b:89:d5:9b:ee:64:9e:08:31:74:a7:fb:
30:e0:54:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:13 2025 by rpki-client