Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
File: 04zZRAVS59q5zVYx1KuHJFFTW3o.mft (raw, json)
Hash identifier: vBXC6OPBMObChIIlCyJNKbILzoqnL2spPJ1PhR0cdY0=
Subject key identifier: CB:4A:42:CB:F3:B9:61:D6:12:08:CC:91:8C:12:25:EF:1B:89:07:24
Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
Certificate issuer: /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Certificate serial: 019A0035CD8F6DB9D5719DBA867A0B59A434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
Manifest number: 0B46
Signing time: Mon 20 Oct 2025 06:01:57 +0000
Manifest this update: Mon 20 Oct 2025 06:01:57 +0000
Manifest next update: Tue 21 Oct 2025 06:01:57 +0000
Files and hashes: 1: 04zZRAVS59q5zVYx1KuHJFFTW3o.crl (hash: NQVgCCQTl8WLp/44/enBCzVJ2PA+EFPUlA+0Z7pmRWE=)
2: 9T6vBYcsoKUn-R9cdzldyxGgHWM.roa (hash: 0ZHVPooYjEnANwVNoXwkqmIvZvnTskWkej+YHMUhiEI=)
3: XrqeZlVPArjVN5_uF6vXdWiqnXY.roa (hash: HzAhZpTtsFcjrQoG9BcE+tsdXOYDnX7JekwCMYp1Fu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:cd:8f:6d:b9:d5:71:9d:ba:86:7a:0b:59:a4:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Validity
Not Before: Oct 20 06:01:57 2025 GMT
Not After : Oct 21 06:01:57 2025 GMT
Subject: CN=cb4a42cbf3b961d61208cc918c1225ef1b890724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:92:58:c1:9f:13:2e:41:f4:fa:8b:5a:15:e1:
78:12:7e:11:74:7b:55:01:13:53:82:86:0a:3b:0c:
52:48:ec:07:e5:39:32:ad:ad:38:cc:d5:90:b3:2f:
e4:54:03:64:1e:9b:70:cd:1d:e0:77:b9:1b:6f:b2:
78:22:c1:83:3b:2f:ca:b5:d1:87:7b:01:f4:4d:2a:
20:3b:23:56:a6:e8:17:55:b7:db:44:1d:f9:8e:9f:
9e:6e:27:a8:fc:48:3e:c9:28:f0:7a:d9:1c:e5:58:
80:e2:98:fb:39:94:7f:2d:6a:bb:f9:c5:19:9a:91:
19:22:45:0d:1e:f3:cd:6a:39:31:52:97:03:b4:53:
9b:87:32:1b:35:9a:d8:3a:02:3c:52:ec:ff:ec:29:
a3:fc:27:18:67:d7:02:c5:24:cf:f4:a4:8a:fd:e6:
5e:06:97:a1:51:0e:0d:51:0b:de:19:d5:0b:d2:f0:
04:5a:d4:bb:d0:cd:a5:1e:9a:b6:6a:36:e2:17:17:
32:97:bb:bb:a3:5f:1d:3f:b1:4f:be:45:1d:43:43:
06:ad:6c:5b:d9:46:c5:82:28:29:5c:c9:d5:39:f5:
52:f5:84:25:6d:ec:c9:d6:ce:50:69:40:1c:ae:1a:
09:25:9a:d3:5f:6d:e9:8a:27:51:09:9c:01:7c:ae:
b3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4A:42:CB:F3:B9:61:D6:12:08:CC:91:8C:12:25:EF:1B:89:07:24
X509v3 Authority Key Identifier:
keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:8d:09:08:8d:8b:53:cf:57:a8:89:50:90:63:50:0f:c7:e4:
12:ec:18:12:7b:83:40:d4:9e:e5:5a:c7:c0:ea:89:f7:7b:79:
97:6c:8e:bd:33:11:25:c4:b2:1c:90:71:82:fd:3e:ac:9f:d3:
5f:7b:b3:a2:a0:06:f9:c0:67:e9:91:6f:ca:2d:10:d6:63:5d:
d6:86:ae:bb:50:d8:68:b1:a5:1b:93:9e:9a:36:57:9b:c2:bd:
2b:4e:21:1a:4e:76:d0:81:52:75:5e:08:4a:0c:cb:be:25:71:
31:64:ce:cb:a6:e0:50:ba:cb:f2:44:53:ab:db:ad:4f:c4:f0:
5d:9e:55:f5:c5:0c:10:97:e8:9c:a2:78:ff:57:6f:db:53:ae:
a9:26:18:dc:1a:59:07:bf:67:05:20:79:57:20:10:a9:3f:1a:
d3:21:06:59:1d:be:c7:84:ed:6b:20:9d:48:5d:33:5c:c3:06:
fe:c8:6f:27:bc:55:4f:cf:95:7b:f4:eb:db:fc:2f:f3:91:09:
53:fe:f1:79:29:4d:25:b7:1f:cc:d7:4e:ce:ec:22:04:47:08:
28:f2:93:d7:56:79:05:4a:b3:11:56:50:9d:be:46:eb:1b:e0:
54:80:63:56:6d:a5:e8:34:a1:62:ad:26:f2:8b:9a:0f:45:74:
8c:9b:9d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:56:08 2025 by rpki-client