Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
File: k0lZrev33pQ1VbyiUIgH65E85vI.mft (raw, json)
Hash identifier: J9o8fGteo4Dcs+WeoznAjCnanXu0+STEP7qMEQOjQ8w=
Subject key identifier: 73:6B:1C:E4:23:EF:F3:13:FE:A6:0F:2F:6A:F9:CF:26:CA:C0:03:F2
Authority key identifier: 93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2
Certificate issuer: /CN=934959adebf7de943555bca2508807eb913ce6f2
Certificate serial: 019758DAEA91C5B270E7112FA0B2AAD58245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
Manifest number: 1586
Signing time: Tue 10 Jun 2025 08:00:31 +0000
Manifest this update: Tue 10 Jun 2025 08:00:31 +0000
Manifest next update: Wed 11 Jun 2025 08:00:31 +0000
Files and hashes: 1: dfUbk-VdzFxHfQpYYrY4XW0hmF4.roa (hash: ey6XnfMKe2KD1ABTE4f8EryWVZihQYn0Zy+yAjoGoiI=)
2: k0lZrev33pQ1VbyiUIgH65E85vI.crl (hash: oxsfZLPKlIEk80BmWJOQI2db63N+IA1A2E4NKB97c88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:da:ea:91:c5:b2:70:e7:11:2f:a0:b2:aa:d5:82:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934959adebf7de943555bca2508807eb913ce6f2
Validity
Not Before: Jun 10 08:00:31 2025 GMT
Not After : Jun 11 08:00:31 2025 GMT
Subject: CN=736b1ce423eff313fea60f2f6af9cf26cac003f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:58:a2:65:d6:b2:7a:7c:ff:09:e6:25:80:42:
b4:2c:b8:0d:de:d2:a9:38:0c:82:fb:3d:57:db:89:
6c:35:83:ff:c8:a7:94:85:21:cc:17:45:33:4d:dd:
75:28:5f:a9:5f:2d:50:33:37:5b:62:32:c2:06:59:
80:54:f9:85:c6:e2:db:12:ca:1a:fd:0f:db:a2:44:
1d:dd:cd:bf:9c:9e:df:65:ef:23:e2:f2:16:cb:e2:
6f:80:01:41:f9:0e:be:66:81:65:d2:5e:fb:4d:31:
ce:85:08:46:15:78:3e:90:d9:d5:a1:4d:cf:1d:71:
91:e1:18:2d:a2:3b:88:fc:74:47:fd:3b:25:24:65:
15:b6:eb:4f:c4:9c:f4:3a:b6:26:fd:3a:8f:2e:69:
0c:8f:38:0d:50:77:d2:ec:90:55:8c:8c:9e:c2:73:
0d:aa:3d:eb:49:92:bb:84:ff:7d:7c:30:b6:92:6e:
e0:02:be:4a:1f:b1:10:e7:00:e5:e2:b7:82:4a:2e:
08:1e:f5:9d:7b:a0:57:45:bc:88:59:a4:6d:8f:8a:
2e:0d:ee:70:e8:06:e3:37:86:60:7d:82:22:8f:92:
93:fe:27:d2:94:15:fc:e8:2d:6d:21:1e:ad:9e:af:
68:4e:97:34:00:c2:af:95:c2:f7:e9:47:0a:8a:05:
1e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6B:1C:E4:23:EF:F3:13:FE:A6:0F:2F:6A:F9:CF:26:CA:C0:03:F2
X509v3 Authority Key Identifier:
keyid:93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b9:71:3c:bc:65:a5:e6:1a:b0:fe:99:83:71:7b:f7:f9:e0:
05:5b:9a:45:36:1d:41:63:48:8a:fe:5d:2c:2e:26:48:35:ae:
56:da:df:79:43:96:fd:9e:58:21:8c:b0:b2:b4:c5:66:36:c0:
6e:2b:a5:29:6a:ec:b6:5f:dc:6e:ce:62:13:93:4c:07:cb:64:
ba:55:6e:6b:9d:8e:5a:e3:ef:70:c9:2b:74:28:d1:ca:86:b8:
c5:1e:b2:9c:08:95:d0:a6:f5:ba:47:c6:26:1e:f3:5c:be:16:
f2:75:ec:ea:d5:0e:3a:26:24:51:81:46:02:6e:a3:1b:7b:57:
4d:ee:f2:45:24:d7:1b:20:3a:ce:6b:46:68:46:a8:9b:a3:3c:
f1:4b:3b:11:68:04:e8:c6:ef:45:48:4a:e1:8b:6a:97:ef:38:
38:d6:fe:f9:24:0a:6e:bb:f6:cf:87:f8:44:bf:ff:a2:c8:df:
48:7c:3d:c6:cf:fe:83:32:ff:f2:c3:81:6c:cd:13:ae:31:99:
90:23:2b:c8:38:ac:6f:33:dd:e1:d3:03:26:2b:ac:82:40:94:
aa:bd:18:c4:12:6a:4d:dd:f3:1d:f0:ab:f9:77:3c:a8:3e:0f:
c4:c5:69:70:cb:6e:6e:7a:7f:68:32:57:65:f8:bd:d1:0e:ee:
28:e6:57:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:48:02 2025 by rpki-client