Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
File: K-zvlD00yA4KD9gUJuYTazFQj-4.mft (raw, json)
Hash identifier: el/6ezVoAk7X5uBBMfVVsvqzMkcCro1Fp1AG65/XN7M=
Subject key identifier: E0:1B:94:D1:5F:4F:5F:E4:9F:36:71:31:8A:23:AC:D9:0B:67:B4:E9
Authority key identifier: 2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
Certificate issuer: /CN=2becef943d34c80e0a0fd81426e6136b31508fee
Certificate serial: 0197579152F00A37E3F6DC1CA8E34C531E00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
Manifest number: 1223
Signing time: Tue 10 Jun 2025 02:00:30 +0000
Manifest this update: Tue 10 Jun 2025 02:00:30 +0000
Manifest next update: Wed 11 Jun 2025 02:00:30 +0000
Files and hashes: 1: K-zvlD00yA4KD9gUJuYTazFQj-4.crl (hash: wAZeDOrO4nTw3GTvftihvKyfjlk0vb42FvOkTW6qFC4=)
2: uyTAYMzc27HPC3St2DUdxuZl0vQ.roa (hash: nhOGHiWnpfS9y1HiircEbA65FySC+R6VBPodKzedGIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 19:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:91:52:f0:0a:37:e3:f6:dc:1c:a8:e3:4c:53:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2becef943d34c80e0a0fd81426e6136b31508fee
Validity
Not Before: Jun 10 02:00:30 2025 GMT
Not After : Jun 11 02:00:30 2025 GMT
Subject: CN=e01b94d15f4f5fe49f3671318a23acd90b67b4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d3:93:c3:73:c4:01:45:b7:58:85:03:e7:79:
55:87:af:8f:72:f4:47:4d:c2:da:e1:7e:a3:ba:56:
b0:34:9a:83:1d:10:4c:72:34:8d:73:3d:61:c8:b2:
c8:dc:36:c7:19:57:c7:9a:fe:45:a5:96:09:4f:7e:
ba:fd:93:67:f0:31:a8:33:a5:07:09:99:03:22:ca:
92:3e:09:74:63:4e:5f:23:25:8a:e7:ef:1b:3a:34:
0c:df:4d:09:b8:01:2d:22:51:80:da:06:09:3d:42:
9f:d1:ff:8f:6e:f2:76:4a:e9:68:54:9a:c0:50:fc:
22:f9:ce:cb:83:69:82:22:cf:4b:72:21:fd:50:79:
9f:34:0d:0b:00:bc:09:30:79:f9:6e:d8:c4:84:6e:
ae:e6:7f:5c:a6:07:7e:e8:b6:df:10:1d:41:ae:d3:
f3:ce:fd:d8:bb:fc:1b:e6:d7:95:ed:27:39:c1:7d:
85:a2:71:4c:97:77:0a:07:d9:0f:38:a0:58:0b:81:
50:9e:4b:1f:28:0f:07:0c:84:50:7a:24:35:45:0d:
20:76:b3:0d:73:40:df:c5:0b:de:f1:01:6f:9e:9b:
f7:dc:07:68:52:9b:c0:a1:1c:10:76:db:b6:8a:02:
c9:78:93:b7:39:a6:41:34:6c:d9:37:81:36:b2:40:
ac:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1B:94:D1:5F:4F:5F:E4:9F:36:71:31:8A:23:AC:D9:0B:67:B4:E9
X509v3 Authority Key Identifier:
keyid:2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:8a:5f:47:2b:b5:be:9c:51:59:9e:2c:02:b6:5b:94:30:e6:
4a:ea:52:f6:6a:b0:7e:e1:24:4f:2b:39:82:e9:a6:70:46:aa:
6c:cf:e8:fa:65:19:ec:ac:69:41:08:70:e0:56:bf:31:ed:ad:
c5:69:cd:bd:2d:17:2d:e9:7b:bf:47:47:5c:37:6c:d1:13:c2:
5b:01:ed:58:3f:cc:ac:cc:c3:48:fa:a6:ec:f2:36:f3:6b:b0:
9f:73:f5:83:f7:10:11:ed:a2:a5:fd:0b:05:cf:a2:25:5f:4f:
29:71:7f:c7:59:4e:19:bf:d8:e8:a9:ca:f4:8e:00:3e:a6:d7:
94:01:08:1d:81:c6:66:f1:eb:7c:cd:3d:84:a4:90:eb:41:03:
a7:49:71:ce:22:e9:1d:41:cc:1b:08:5f:07:4c:cc:04:04:af:
45:16:d1:f1:a5:e7:ba:f0:f6:7f:7b:b6:b0:fc:0d:89:40:27:
af:ed:c7:e6:7f:e1:b6:51:75:67:9a:87:bd:d7:5b:dd:82:c6:
01:64:04:d5:0d:0a:bd:37:20:83:32:eb:74:65:c6:b2:49:c4:
c0:62:34:08:ee:25:f7:98:d8:0b:3d:a0:cb:04:2f:7d:4e:c6:
bd:c2:05:21:df:af:e0:93:85:79:df:a2:d0:09:29:e6:c5:f5:
e0:2d:4d:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdXkVLwCjfj9twcqONMUx4AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZWNlZjk0M2QzNGM4MGUwYTBmZDgxNDI2ZTYxMzZiMzE1
MDhmZWUwHhcNMjUwNjEwMDIwMDMwWhcNMjUwNjExMDIwMDMwWjAzMTEwLwYDVQQD
EyhlMDFiOTRkMTVmNGY1ZmU0OWYzNjcxMzE4YTIzYWNkOTBiNjdiNGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9OTw3PEAUW3WIUD53lVh6+PcvRH
TcLa4X6julawNJqDHRBMcjSNcz1hyLLI3DbHGVfHmv5FpZYJT366/ZNn8DGoM6UH
CZkDIsqSPgl0Y05fIyWK5+8bOjQM300JuAEtIlGA2gYJPUKf0f+PbvJ2SuloVJrA
UPwi+c7Lg2mCIs9LciH9UHmfNA0LALwJMHn5btjEhG6u5n9cpgd+6LbfEB1BrtPz
zv3Yu/wb5teV7Sc5wX2FonFMl3cKB9kPOKBYC4FQnksfKA8HDIRQeiQ1RQ0gdrMN
c0DfxQve8QFvnpv33AdoUpvAoRwQdtu2igLJeJO3OaZBNGzZN4E2skCshwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOAblNFfT1/knzZxMYojrNkLZ7TpMB8GA1UdIwQY
MBaAFCvs75Q9NMgOCg/YFCbmE2sxUI/uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSy16dmxEMDB5QTRLRDlnVUp1WVRhekZRai00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lZmJhOTMtMjk3My00MjEzLWI2ZjEt
NDQ5MTI0YWNlMDI2LzEvSy16dmxEMDB5QTRLRDlnVUp1WVRhekZRai00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9lZmJhOTMtMjk3My00MjEzLWI2ZjEtNDQ5MTI0YWNlMDI2
LzEvSy16dmxEMDB5QTRLRDlnVUp1WVRhekZRai00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqopfRyu1
vpxRWZ4sArZblDDmSupS9mqwfuEkTys5gummcEaqbM/o+mUZ7KxpQQhw4Fa/Me2t
xWnNvS0XLel7v0dHXDds0RPCWwHtWD/MrMzDSPqm7PI282uwn3P1g/cQEe2ipf0L
Bc+iJV9PKXF/x1lOGb/Y6KnK9I4APqbXlAEIHYHGZvHrfM09hKSQ60EDp0lxziLp
HUHMGwhfB0zMBASvRRbR8aXnuvD2f3u2sPwNiUAnr+3H5n/htlF1Z5qHvddb3YLG
AWQE1Q0KvTcggzLrdGXGsknEwGI0CO4l95jYCz2gywQvfU7GvcIFId+v4JOFed+i
0Akp5sX14C1Nkw==
-----END CERTIFICATE-----
Generated at Tue Jun 10 05:35:09 2025 by rpki-client