Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.mft
File: 04YKmzZYX7iqBR_Df8xqB3OZDL8.mft (raw, json)
Hash identifier: tvVWf9PWe3ufwTCELmS2dkdF6KUqs+TMI5AVTRZXN3M=
Subject key identifier: 1D:49:96:3E:11:78:5B:E4:F6:94:78:AE:0A:3F:8D:37:FE:C1:E4:59
Authority key identifier: D3:86:0A:9B:36:58:5F:B8:AA:05:1F:C3:7F:CC:6A:07:73:99:0C:BF
Certificate issuer: /CN=d3860a9b36585fb8aa051fc37fcc6a0773990cbf
Certificate serial: 0198D5163E59860B57C083C3A708C1DF5802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.mft
Manifest number: 1656
Signing time: Sat 23 Aug 2025 04:01:01 +0000
Manifest this update: Sat 23 Aug 2025 04:01:01 +0000
Manifest next update: Sun 24 Aug 2025 04:01:01 +0000
Files and hashes: 1: 04YKmzZYX7iqBR_Df8xqB3OZDL8.crl (hash: BArqGO00V5pxnP/0fZ91k5mRoZFSQhjVAddZIXQwjGw=)
2: TEE7UWTU78bi6kM2ljfzySZ38Fs.roa (hash: DHKL0RNq36qbVbpfFyw21pdixDUZOv3Gqo2nBfFHI84=)
3: gKin5_oczuQ_AkHHyfEuz9qjFTc.roa (hash: 2dPqZZpC5wFLZYeumAbnLMLjLIVLDQp/PNW7ceXBgmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:3e:59:86:0b:57:c0:83:c3:a7:08:c1:df:58:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3860a9b36585fb8aa051fc37fcc6a0773990cbf
Validity
Not Before: Aug 23 04:01:01 2025 GMT
Not After : Aug 24 04:01:01 2025 GMT
Subject: CN=1d49963e11785be4f69478ae0a3f8d37fec1e459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:71:40:fc:f8:4e:ef:99:3f:b6:9b:53:98:bf:
be:0d:82:b0:66:03:ed:76:44:64:01:40:f8:ea:cd:
63:10:ce:eb:28:f4:30:a4:19:72:48:8b:a1:62:d0:
df:2f:14:68:12:32:14:71:a2:26:72:e4:b7:26:98:
66:f5:cb:50:14:a1:ed:58:20:30:43:6c:4d:f5:ce:
71:8f:98:77:22:71:ac:7f:38:02:c9:be:fa:27:60:
46:ce:d0:04:6f:a0:4b:f9:e1:7d:e8:f1:7c:64:18:
e8:50:f1:43:d8:c5:d1:f9:b4:e7:fd:ac:28:18:75:
84:7b:30:02:f7:fc:c6:c7:fd:65:6d:83:61:38:7b:
29:d0:e4:e7:4d:ee:0f:38:95:06:1e:a9:35:c2:81:
10:b2:03:e7:74:9c:67:19:32:76:70:3b:c4:80:39:
9d:30:2d:b1:bd:51:b4:9a:1d:ae:14:0c:2e:56:b3:
ab:90:65:aa:bd:12:24:f1:9c:67:a1:a9:a3:44:a9:
06:25:cd:02:69:6d:02:3e:61:a4:2a:d1:b3:63:26:
eb:f7:41:4c:9e:e0:86:69:7e:f6:2d:09:85:6f:ff:
4a:aa:59:b1:ef:ce:42:3c:66:35:13:cd:71:7d:f9:
dd:72:78:ce:40:c5:37:59:d3:85:61:7e:af:30:59:
d7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:49:96:3E:11:78:5B:E4:F6:94:78:AE:0A:3F:8D:37:FE:C1:E4:59
X509v3 Authority Key Identifier:
keyid:D3:86:0A:9B:36:58:5F:B8:AA:05:1F:C3:7F:CC:6A:07:73:99:0C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:63:7a:e1:35:b4:0b:91:2d:8c:40:de:3d:46:b7:a8:62:6c:
5e:16:f8:d4:da:0b:92:00:24:ed:86:34:a3:98:ea:8e:31:2f:
7f:32:e1:4f:37:5a:47:4b:74:6f:f7:4a:38:75:6d:87:c8:d2:
a0:d6:32:af:65:7a:4d:ce:7c:95:67:e8:a9:a3:a7:ac:83:dc:
f9:f0:e5:aa:cf:67:59:8c:3e:d0:b1:e9:d8:6b:3f:49:98:76:
cc:8e:2d:ae:e5:99:53:0b:01:b6:44:79:f3:1f:6e:f5:11:18:
7d:e7:ee:db:58:6b:ae:97:2a:bc:d3:79:27:e7:fa:57:a0:d0:
88:04:03:29:2f:c7:9a:1f:df:e5:45:6c:39:6c:1d:f2:6e:c6:
19:1c:85:16:31:b0:0e:23:e1:c0:9d:13:2e:f6:98:d0:6d:f5:
67:de:7c:66:93:2c:7b:e4:00:11:da:a3:d7:80:13:7d:42:98:
e9:16:8b:e8:6f:9a:c6:4a:29:a4:5b:dd:8a:53:99:36:9b:c5:
df:61:e5:d2:74:d9:29:0d:5c:da:c4:55:0b:d1:6f:90:7d:e9:
4e:a5:45:dc:56:a8:28:34:59:3b:95:ea:8b:fa:d8:0f:13:90:
97:f7:1c:00:2c:14:94:20:e9:22:dc:99:bb:27:a5:22:58:d5:
09:61:c3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:25 2025 by rpki-client