Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
File: 04zZRAVS59q5zVYx1KuHJFFTW3o.mft (raw, json)
Hash identifier: ohB2g5bNgno60AUc0RyWabkQvb4fSoVb75ka6TtuwSk=
Subject key identifier: AE:1B:80:03:62:1B:DA:BF:A3:45:80:27:DD:60:A6:77:1E:48:66:C6
Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
Certificate issuer: /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Certificate serial: 0198D6CD9549D76294FCBA367A3F4CECDFD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
Manifest number: 0AAC
Signing time: Sat 23 Aug 2025 12:00:54 +0000
Manifest this update: Sat 23 Aug 2025 12:00:54 +0000
Manifest next update: Sun 24 Aug 2025 12:00:54 +0000
Files and hashes: 1: 04zZRAVS59q5zVYx1KuHJFFTW3o.crl (hash: v5TiM/EYiX4Ac4ncnQakA6Q1kFM8dVaYnJObXHQs8bs=)
2: 9T6vBYcsoKUn-R9cdzldyxGgHWM.roa (hash: 0ZHVPooYjEnANwVNoXwkqmIvZvnTskWkej+YHMUhiEI=)
3: XrqeZlVPArjVN5_uF6vXdWiqnXY.roa (hash: HzAhZpTtsFcjrQoG9BcE+tsdXOYDnX7JekwCMYp1Fu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:95:49:d7:62:94:fc:ba:36:7a:3f:4c:ec:df:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Validity
Not Before: Aug 23 12:00:54 2025 GMT
Not After : Aug 24 12:00:54 2025 GMT
Subject: CN=ae1b8003621bdabfa3458027dd60a6771e4866c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6c:e4:91:2a:b8:fb:61:60:93:77:bd:f4:16:
df:a8:8b:fe:39:38:9e:ba:33:28:f2:23:c5:22:a7:
1f:4c:00:99:94:12:14:b1:8e:b2:53:a7:a1:c6:77:
ec:66:84:43:4d:1e:64:e6:f2:5c:d5:e2:32:6a:7b:
ab:ea:97:f5:54:15:99:dc:33:39:83:43:f5:41:b7:
55:ab:a5:16:10:b6:01:51:a6:1d:a7:df:6c:f4:23:
69:76:cb:9c:e3:47:de:f3:a5:90:f9:72:22:b0:d4:
fa:59:3f:ed:82:aa:f1:ff:ac:12:89:a4:ef:62:8e:
7a:1d:c6:a9:18:d5:f6:94:70:72:7a:87:b2:29:e1:
07:8f:62:49:ce:d7:f4:34:a1:b3:00:f3:35:d7:72:
f0:1c:f1:19:f7:72:36:a8:58:e8:ea:c8:62:4a:a7:
f1:46:81:c4:79:9a:39:75:b2:b0:ca:8b:fd:6e:a1:
6d:e2:a7:6d:01:8c:c1:f4:04:78:4d:7b:3e:a9:c6:
9b:fb:15:0e:45:15:00:1d:d5:54:48:cc:bc:7c:c1:
53:7d:ed:2e:40:a2:19:76:e8:cb:77:b4:a0:d0:1b:
32:56:0b:f1:b6:0b:8e:9e:01:6d:4c:73:92:fc:04:
d7:0b:2e:c6:e1:38:4c:55:7c:ad:d7:4c:3b:fd:62:
16:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1B:80:03:62:1B:DA:BF:A3:45:80:27:DD:60:A6:77:1E:48:66:C6
X509v3 Authority Key Identifier:
keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:9d:25:bc:80:4a:a0:fd:78:7f:86:bf:20:64:2f:83:19:cc:
6a:2b:ff:8a:45:53:cd:37:29:2e:b6:eb:fb:1b:47:d6:d4:f9:
24:65:75:6f:07:aa:25:3c:7f:f0:c8:15:d3:29:2d:50:2a:8d:
1a:af:c1:23:0e:c3:ea:20:8e:d6:a0:4b:b7:97:6e:a5:45:dd:
59:e8:1b:ac:0f:57:e3:78:a2:90:28:df:0f:bb:3a:6a:5f:c0:
94:66:6e:dc:5a:50:87:d7:9f:a0:fc:82:fc:48:11:9f:0b:e1:
65:63:c5:be:69:db:9e:01:a5:88:55:96:35:70:6e:44:4a:d1:
b1:ec:8c:82:0c:dd:8e:4e:a5:a3:85:6d:e1:dd:2e:99:f8:3a:
22:1b:c1:95:38:b8:ea:79:16:b1:6d:68:47:32:91:e5:4d:06:
49:4c:89:e3:7d:d2:46:fb:cb:d0:c2:a8:05:a3:aa:71:42:1e:
00:7e:4d:e4:40:60:7f:eb:2f:38:72:ab:04:28:78:71:ef:cf:
e8:c3:f5:27:42:d4:25:3c:4b:b2:dc:e0:18:ee:a9:f2:14:57:
06:cc:dd:3f:a0:4a:88:26:d3:18:23:b2:25:ec:cc:5b:a6:4c:
79:74:14:b6:df:e7:4c:5c:b9:5e:b7:7d:af:fb:64:47:f3:4d:
ab:2b:f8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:10:34 2025 by rpki-client