Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
File: 04zZRAVS59q5zVYx1KuHJFFTW3o.mft (raw, json)
Hash identifier: OKYHU4NQ/UYlGz9dlpMmLQpYlmcNp3ouGKrU5SrQ8yc=
Subject key identifier: D2:12:5C:1C:05:04:E3:66:09:50:9D:6F:86:FA:90:CD:6D:14:BD:9E
Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
Certificate issuer: /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Certificate serial: 0196C83AD01AE89EE74EBFD18AF160C07946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
Manifest number: 099B
Signing time: Tue 13 May 2025 06:00:19 +0000
Manifest this update: Tue 13 May 2025 06:00:19 +0000
Manifest next update: Wed 14 May 2025 06:00:19 +0000
Files and hashes: 1: 04zZRAVS59q5zVYx1KuHJFFTW3o.crl (hash: mwG74DHzrRaFz8Z6Hk4JeiPtC8cJmGCXatncp0cyvsY=)
2: AIQGxZR891rSmBVRWPkroU6qIS4.roa (hash: tOfNhd24yOv+46VKBC0lmSjrIB+LKTxW7Tn9fRNCeag=)
3: XrqeZlVPArjVN5_uF6vXdWiqnXY.roa (hash: HzAhZpTtsFcjrQoG9BcE+tsdXOYDnX7JekwCMYp1Fu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:3a:d0:1a:e8:9e:e7:4e:bf:d1:8a:f1:60:c0:79:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Validity
Not Before: May 13 06:00:19 2025 GMT
Not After : May 14 06:00:19 2025 GMT
Subject: CN=d2125c1c0504e36609509d6f86fa90cd6d14bd9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2e:77:4e:32:14:d8:92:c4:58:03:a6:5e:31:
01:b5:ed:44:c1:1e:f0:64:67:33:03:1d:25:d4:1a:
f4:66:ff:53:c6:9f:72:87:b0:c8:5c:b2:b3:49:59:
58:e1:8d:6e:5a:f0:49:ae:09:e4:a5:ed:53:38:c7:
86:8d:29:5c:f3:6e:85:d9:a3:0b:d4:8e:6c:e5:9f:
54:19:10:e3:1e:1c:b5:80:bf:1b:c9:2a:ec:06:91:
22:d1:85:c0:c1:9b:95:e6:e9:e4:60:7c:82:c0:13:
f9:7e:25:88:08:28:87:b4:0d:f1:66:54:23:a8:13:
10:91:52:7d:7e:27:f3:cc:c0:29:9a:0b:25:4d:e0:
3a:b2:cb:d5:7f:d1:83:01:e9:96:1c:e8:4d:32:20:
8c:9e:82:e8:62:81:58:59:7e:3e:3e:54:28:f3:b7:
9e:37:cd:1e:99:b7:38:dd:73:75:36:60:6d:b6:31:
df:89:a0:b8:7d:c3:01:1f:1a:b6:89:6b:3e:f4:4f:
97:e3:aa:be:0d:d9:8f:93:de:eb:98:b6:5f:2e:e6:
1e:40:26:3c:a0:52:6b:2e:9e:90:f3:e3:6d:97:83:
fa:8b:d6:c1:62:02:9f:47:fe:77:99:9d:ff:dd:6e:
d4:61:7b:a1:03:fb:4b:da:80:02:bb:28:06:91:ec:
a4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:12:5C:1C:05:04:E3:66:09:50:9D:6F:86:FA:90:CD:6D:14:BD:9E
X509v3 Authority Key Identifier:
keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:9d:da:6f:5a:1f:26:03:66:c1:61:07:66:43:ec:e3:59:b5:
11:8c:ce:55:c6:7e:c0:c4:c9:fd:1a:e4:5c:95:26:d8:b3:df:
4b:fb:0f:c1:c0:85:e3:52:ae:13:22:6c:6c:e7:06:ee:08:c8:
fe:7b:41:f2:d9:da:03:c3:77:6c:00:f5:1f:2b:da:bb:11:5e:
40:95:ef:05:4a:f1:38:a3:81:50:57:5d:e0:8c:bc:01:ef:97:
b6:6b:74:d1:95:46:74:c1:fc:87:e0:76:dc:be:74:72:d6:23:
2d:c9:a0:4d:3b:ac:ea:2a:ad:12:79:60:4e:3d:ad:89:46:69:
54:4b:46:0d:03:4b:b3:a8:0a:9b:a9:2c:2f:59:b5:b3:a4:22:
05:73:30:a7:20:b7:72:7f:b8:3b:d7:95:3e:d0:35:9d:bb:58:
f8:16:a3:86:f9:c7:04:02:07:ba:2f:da:80:6f:84:8f:88:3d:
27:dd:a0:ad:53:37:38:d3:af:c4:c1:8d:03:57:18:ae:77:c8:
d2:1d:40:bf:36:2f:4f:c7:a2:eb:1a:05:af:9e:ed:c6:4d:52:
87:3c:9b:11:2f:ff:eb:ba:22:9e:cd:47:a7:61:0d:00:97:df:
45:56:6a:3d:c0:cd:be:4f:3c:89:ea:f4:86:6d:40:77:6f:71:
cf:40:41:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:39:29 2025 by rpki-client