Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
File: k0lZrev33pQ1VbyiUIgH65E85vI.mft (raw, json)
Hash identifier: P7PQvq5iAmNWYgY2MHZNhsT9py7nNwNZttf8zqlgu5s=
Subject key identifier: 3A:D2:F8:39:D7:DC:73:8E:25:7B:35:9C:EF:42:60:AB:54:EE:88:ED
Authority key identifier: 93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2
Certificate issuer: /CN=934959adebf7de943555bca2508807eb913ce6f2
Certificate serial: 01976094FF203646542132D5A4C0654A9424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
Manifest number: 158A
Signing time: Wed 11 Jun 2025 20:01:06 +0000
Manifest this update: Wed 11 Jun 2025 20:01:06 +0000
Manifest next update: Thu 12 Jun 2025 20:01:06 +0000
Files and hashes: 1: dfUbk-VdzFxHfQpYYrY4XW0hmF4.roa (hash: ey6XnfMKe2KD1ABTE4f8EryWVZihQYn0Zy+yAjoGoiI=)
2: k0lZrev33pQ1VbyiUIgH65E85vI.crl (hash: ieKsWXVBqDDfSevQkDGJh1t7xuAhT3rZxD9Eh3+pei4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:94:ff:20:36:46:54:21:32:d5:a4:c0:65:4a:94:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934959adebf7de943555bca2508807eb913ce6f2
Validity
Not Before: Jun 11 20:01:06 2025 GMT
Not After : Jun 12 20:01:06 2025 GMT
Subject: CN=3ad2f839d7dc738e257b359cef4260ab54ee88ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:08:c5:0a:fc:dd:37:ef:08:6a:9d:4c:7f:fc:
ed:5c:3a:90:52:c4:e0:5f:c2:58:1c:58:23:71:3a:
a0:f1:32:31:3f:a2:a4:66:c5:58:96:d0:0f:33:65:
36:03:45:94:e7:e3:fd:58:93:24:4d:6f:47:d4:70:
2a:c6:78:1c:7e:80:4c:d8:1f:75:12:14:de:ab:04:
66:a4:78:25:ed:63:93:a3:83:0f:b4:59:33:0d:72:
91:be:a3:f9:71:e9:53:d9:67:ff:06:45:1e:df:16:
e7:77:55:fd:90:aa:b7:55:7c:57:b5:4a:80:42:fd:
61:3c:34:c0:e5:2f:36:26:6b:ff:30:ad:1c:b1:d9:
21:2f:8d:fe:fe:fb:cf:8d:40:72:d8:cd:2f:35:c3:
e3:f0:ff:8e:53:d6:cc:e8:f6:20:0b:fd:e0:0a:27:
59:7b:06:d7:81:fb:92:8b:02:85:5d:61:7c:10:ce:
db:c5:d8:e6:e9:53:a7:8b:22:2f:66:47:fe:f2:a8:
ad:68:25:a7:e3:8f:fa:6a:20:8d:ed:dd:dc:bd:16:
ed:26:d7:43:09:ac:e6:cd:95:54:f4:b9:4d:5c:7d:
96:55:91:a1:dd:cb:f3:26:4c:47:9d:8b:7a:0d:40:
6a:46:af:0c:43:2f:fe:8d:86:9c:f1:42:f6:9c:68:
4a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D2:F8:39:D7:DC:73:8E:25:7B:35:9C:EF:42:60:AB:54:EE:88:ED
X509v3 Authority Key Identifier:
keyid:93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:93:7f:fa:07:99:55:bb:ca:f1:f4:eb:57:2e:bf:4a:eb:6f:
e3:5e:70:ac:1c:a4:dc:aa:4a:b7:e4:40:8c:85:75:d8:8e:59:
bd:69:b5:f4:4a:77:80:aa:ab:52:50:2d:73:c5:a5:02:43:fd:
5b:0c:f7:41:cd:17:5f:32:a0:2c:8a:ef:fe:4e:68:bb:3c:4f:
c9:cb:ce:8f:1f:7c:53:07:3f:c4:15:05:ba:0c:9c:eb:39:42:
b9:55:c1:83:f4:38:25:bc:6b:0f:42:a9:fc:8f:74:23:20:d2:
51:1a:0b:02:81:b4:18:bc:cc:5d:63:88:72:d6:0c:11:d0:da:
2b:43:62:02:70:79:0e:49:20:9b:1f:0b:8f:72:ea:36:83:73:
bc:b3:62:cc:ee:3f:33:28:ad:6f:db:f4:6a:66:87:e3:cd:1d:
57:e4:39:76:84:ca:d8:74:bc:7e:04:c5:dd:30:df:6c:cb:68:
48:19:01:6e:b9:b5:7f:b1:45:cb:cc:9a:b2:68:db:7a:ac:15:
86:39:8b:25:a3:d1:92:98:1c:ae:71:10:99:eb:cf:c8:21:47:
31:65:63:bb:b3:20:f4:65:6c:26:55:1a:b1:3f:18:20:03:8b:
dd:a3:64:2d:a7:c2:e0:a4:7c:25:aa:62:b1:9b:f3:05:48:f6:
b9:b9:26:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdglP8gNkZUITLVpMBlSpQkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNDk1OWFkZWJmN2RlOTQzNTU1YmNhMjUwODgwN2ViOTEz
Y2U2ZjIwHhcNMjUwNjExMjAwMTA2WhcNMjUwNjEyMjAwMTA2WjAzMTEwLwYDVQQD
EygzYWQyZjgzOWQ3ZGM3MzhlMjU3YjM1OWNlZjQyNjBhYjU0ZWU4OGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AjFCvzdN+8Iap1Mf/ztXDqQUsTg
X8JYHFgjcTqg8TIxP6KkZsVYltAPM2U2A0WU5+P9WJMkTW9H1HAqxngcfoBM2B91
EhTeqwRmpHgl7WOTo4MPtFkzDXKRvqP5celT2Wf/BkUe3xbnd1X9kKq3VXxXtUqA
Qv1hPDTA5S82Jmv/MK0csdkhL43+/vvPjUBy2M0vNcPj8P+OU9bM6PYgC/3gCidZ
ewbXgfuSiwKFXWF8EM7bxdjm6VOniyIvZkf+8qitaCWn44/6aiCN7d3cvRbtJtdD
CazmzZVU9LlNXH2WVZGh3cvzJkxHnYt6DUBqRq8MQy/+jYac8UL2nGhKzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDrS+DnX3HOOJXs1nO9CYKtU7ojtMB8GA1UdIwQY
MBaAFJNJWa3r996UNVW8olCIB+uRPObyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazBsWnJldjMzcFExVmJ5aVVJZ0g2NUU4NXZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xNzU3NjItNjkyOS00ZTcwLWIzZWIt
ZmIwZWU1Zjk5N2RhLzEvazBsWnJldjMzcFExVmJ5aVVJZ0g2NUU4NXZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8xNzU3NjItNjkyOS00ZTcwLWIzZWItZmIwZWU1Zjk5N2Rh
LzEvazBsWnJldjMzcFExVmJ5aVVJZ0g2NUU4NXZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArZN/+geZ
VbvK8fTrVy6/Sutv415wrByk3KpKt+RAjIV12I5ZvWm19Ep3gKqrUlAtc8WlAkP9
Wwz3Qc0XXzKgLIrv/k5ouzxPycvOjx98Uwc/xBUFugyc6zlCuVXBg/Q4JbxrD0Kp
/I90IyDSURoLAoG0GLzMXWOIctYMEdDaK0NiAnB5Dkkgmx8Lj3LqNoNzvLNizO4/
Myitb9v0amaH480dV+Q5doTK2HS8fgTF3TDfbMtoSBkBbrm1f7FFy8yasmjbeqwV
hjmLJaPRkpgcrnEQmevPyCFHMWVju7Mg9GVsJlUasT8YIAOL3aNkLafC4KR8Japi
sZvzBUj2ubkmbQ==
-----END CERTIFICATE-----
Generated at Thu Jun 12 00:24:13 2025 by rpki-client