Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
File: k0lZrev33pQ1VbyiUIgH65E85vI.mft (raw, json)
Hash identifier: UVnbgebnG3rYWfbE0+Ns94l6BbzsUYLZZezcpu1iBWQ=
Subject key identifier: A9:56:A6:E1:02:09:0C:E0:40:39:B3:D1:44:65:09:7F:F0:C6:84:2F
Authority key identifier: 93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2
Certificate issuer: /CN=934959adebf7de943555bca2508807eb913ce6f2
Certificate serial: 019659F06634C1D1852982B8D07813E0AD4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 20:00:49 +0000
Manifest this update: Mon 21 Apr 2025 20:00:49 +0000
Manifest next update: Tue 22 Apr 2025 20:00:49 +0000
Files and hashes: 1: dfUbk-VdzFxHfQpYYrY4XW0hmF4.roa (hash: ey6XnfMKe2KD1ABTE4f8EryWVZihQYn0Zy+yAjoGoiI=)
2: k0lZrev33pQ1VbyiUIgH65E85vI.crl (hash: wpnsv4AzenZG/NyC+v7wJOe9d3IUjYXVpnn76oCRDrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:66:34:c1:d1:85:29:82:b8:d0:78:13:e0:ad:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934959adebf7de943555bca2508807eb913ce6f2
Validity
Not Before: Apr 21 20:00:49 2025 GMT
Not After : Apr 22 20:00:49 2025 GMT
Subject: CN=a956a6e102090ce04039b3d14465097ff0c6842f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:45:8c:ab:c5:07:bd:40:25:96:e1:8c:33:a7:
c0:10:0b:d1:9a:4b:fb:62:18:b9:fc:bd:50:f7:8e:
72:aa:eb:45:8f:de:73:f9:1f:df:0e:0e:44:6d:da:
8c:7e:be:f7:22:fb:96:23:a8:a9:50:a3:b1:9a:6c:
14:b0:87:a3:a8:d6:4b:f0:73:a2:af:b5:c4:8f:76:
f6:be:3e:a6:9b:10:dd:d0:da:c9:35:c6:c8:ca:af:
99:e1:5f:d6:10:c0:77:91:a6:52:81:83:d3:ec:f6:
46:fb:9e:ee:32:d4:4f:59:e9:17:e8:92:96:39:9b:
b0:8a:c4:6e:31:8e:11:d4:3c:fd:80:41:15:0f:e4:
fc:ca:a7:88:fd:c9:5e:d0:af:ef:5d:3e:a0:ad:7b:
49:41:6c:ee:03:5e:d8:db:50:1a:2b:77:d2:8c:35:
c9:04:14:92:a5:fa:2d:f0:80:2c:21:a2:7f:a5:97:
9d:d4:e8:c1:6a:5b:9a:da:95:1f:a4:91:27:3f:21:
de:7c:89:3f:b3:8b:a0:97:46:35:5b:df:5a:bc:ad:
6c:eb:90:d7:45:7a:26:44:5d:23:1e:b4:57:af:f8:
ec:da:e8:d7:b2:0c:6d:12:2b:10:72:88:f3:e8:72:
4d:6d:f5:f1:6f:92:54:7b:88:15:45:f3:be:ca:dc:
9b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:56:A6:E1:02:09:0C:E0:40:39:B3:D1:44:65:09:7F:F0:C6:84:2F
X509v3 Authority Key Identifier:
keyid:93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:fb:99:7b:96:89:10:cb:d2:91:42:a1:02:10:d1:06:84:03:
d5:ce:3c:dc:4c:a3:5a:c8:94:8d:f9:30:d4:47:84:34:90:59:
2e:d6:00:d4:2f:31:e4:d9:be:32:3a:aa:8a:25:b1:9d:b7:13:
2e:7d:bd:ab:4a:94:6a:81:e6:75:8d:d4:38:64:20:80:ca:ac:
85:77:5b:f2:83:f7:28:e7:35:3c:31:c7:b6:28:ff:65:0d:04:
35:cb:61:64:63:fb:f2:7d:97:da:c4:3d:57:f6:99:b4:36:97:
f9:5e:73:8d:95:71:59:bb:22:2a:64:da:fc:cf:a7:07:ee:32:
60:1c:f0:89:33:d2:c0:df:7a:08:01:98:48:01:0d:a1:2f:2b:
b2:56:9a:86:38:29:47:37:17:5a:8b:9f:61:4f:2e:08:da:43:
cb:00:e8:79:3b:1a:df:d5:68:d1:89:81:b1:d2:3e:c0:32:17:
71:96:66:ee:fb:3c:a5:19:11:6b:2b:64:24:4c:0a:40:9a:57:
4f:af:58:51:5c:3f:ac:c7:3d:a1:95:a3:33:82:94:fc:5a:dd:
03:fe:35:5d:47:18:d3:3f:2f:6e:43:25:28:23:4c:94:ee:6b:
53:0b:71:ac:6c:f5:f6:b2:44:69:51:ad:5a:98:b1:e3:a4:93:
49:40:11:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZ8GY0wdGFKYK40HgT4K1OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNDk1OWFkZWJmN2RlOTQzNTU1YmNhMjUwODgwN2ViOTEz
Y2U2ZjIwHhcNMjUwNDIxMjAwMDQ5WhcNMjUwNDIyMjAwMDQ5WjAzMTEwLwYDVQQD
EyhhOTU2YTZlMTAyMDkwY2UwNDAzOWIzZDE0NDY1MDk3ZmYwYzY4NDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8kWMq8UHvUAlluGMM6fAEAvRmkv7
Yhi5/L1Q945yqutFj95z+R/fDg5EbdqMfr73IvuWI6ipUKOxmmwUsIejqNZL8HOi
r7XEj3b2vj6mmxDd0NrJNcbIyq+Z4V/WEMB3kaZSgYPT7PZG+57uMtRPWekX6JKW
OZuwisRuMY4R1Dz9gEEVD+T8yqeI/cle0K/vXT6grXtJQWzuA17Y21AaK3fSjDXJ
BBSSpfot8IAsIaJ/pZed1OjBalua2pUfpJEnPyHefIk/s4ugl0Y1W99avK1s65DX
RXomRF0jHrRXr/js2ujXsgxtEisQcojz6HJNbfXxb5JUe4gVRfO+ytybhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKlWpuECCQzgQDmz0URlCX/wxoQvMB8GA1UdIwQY
MBaAFJNJWa3r996UNVW8olCIB+uRPObyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazBsWnJldjMzcFExVmJ5aVVJZ0g2NUU4NXZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xNzU3NjItNjkyOS00ZTcwLWIzZWIt
ZmIwZWU1Zjk5N2RhLzEvazBsWnJldjMzcFExVmJ5aVVJZ0g2NUU4NXZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8xNzU3NjItNjkyOS00ZTcwLWIzZWItZmIwZWU1Zjk5N2Rh
LzEvazBsWnJldjMzcFExVmJ5aVVJZ0g2NUU4NXZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPuZe5aJ
EMvSkUKhAhDRBoQD1c483EyjWsiUjfkw1EeENJBZLtYA1C8x5Nm+MjqqiiWxnbcT
Ln29q0qUaoHmdY3UOGQggMqshXdb8oP3KOc1PDHHtij/ZQ0ENcthZGP78n2X2sQ9
V/aZtDaX+V5zjZVxWbsiKmTa/M+nB+4yYBzwiTPSwN96CAGYSAENoS8rslaahjgp
RzcXWoufYU8uCNpDywDoeTsa39Vo0YmBsdI+wDIXcZZm7vs8pRkRaytkJEwKQJpX
T69YUVw/rMc9oZWjM4KU/FrdA/41XUcY0z8vbkMlKCNMlO5rUwtxrGz19rJEaVGt
Wpix46STSUARgg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 04:51:36 2025 by rpki-client