Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
File: k0lZrev33pQ1VbyiUIgH65E85vI.mft (raw, json)
Hash identifier: sk8jOPA+uCcx568sabDobIdhwSLABJ/+4/qCA9CRaCs=
Subject key identifier: 39:6F:5F:D8:57:63:8E:25:C3:1C:1F:61:2D:2A:61:E1:9C:DA:4E:D8
Authority key identifier: 93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2
Certificate issuer: /CN=934959adebf7de943555bca2508807eb913ce6f2
Certificate serial: 019754FE5608C79DB9E3F0B6BE5B37A93B57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
Manifest number: 1584
Signing time: Mon 09 Jun 2025 14:00:43 +0000
Manifest this update: Mon 09 Jun 2025 14:00:43 +0000
Manifest next update: Tue 10 Jun 2025 14:00:43 +0000
Files and hashes: 1: dfUbk-VdzFxHfQpYYrY4XW0hmF4.roa (hash: ey6XnfMKe2KD1ABTE4f8EryWVZihQYn0Zy+yAjoGoiI=)
2: k0lZrev33pQ1VbyiUIgH65E85vI.crl (hash: FogtNq2Zl02eX/VuUQ8bhvxJSWQp0uP62tR1FeuAo1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:fe:56:08:c7:9d:b9:e3:f0:b6:be:5b:37:a9:3b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934959adebf7de943555bca2508807eb913ce6f2
Validity
Not Before: Jun 9 14:00:43 2025 GMT
Not After : Jun 10 14:00:43 2025 GMT
Subject: CN=396f5fd857638e25c31c1f612d2a61e19cda4ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:04:56:df:d8:3c:6d:b0:10:a5:15:aa:9f:7e:
7d:87:20:f7:d7:55:ce:40:47:74:f4:d6:01:06:bf:
d5:2c:4c:a1:af:b9:1e:fb:fd:be:4b:f3:bf:4a:cd:
07:27:33:21:8b:d6:4b:fc:93:a0:70:02:e9:6a:17:
a5:29:71:15:07:5c:ba:b9:13:b7:cb:87:c3:b6:57:
7f:3b:dc:e8:0a:31:3c:40:24:7c:91:51:02:ed:8a:
fc:a5:b4:b0:48:b5:07:23:e4:b9:8e:49:32:7f:0b:
01:c6:e8:5e:fa:43:97:4a:1a:88:e2:4d:82:b0:9e:
ca:69:f5:42:ce:08:c1:66:32:b0:5b:b6:fa:15:f0:
62:45:b9:b7:49:66:00:8d:4b:d9:4f:7d:e4:2f:d3:
9c:67:54:58:79:32:37:7c:bd:6f:35:d5:90:8c:fd:
ab:9c:cf:b8:ac:8f:a2:28:6a:a1:51:7f:2a:49:96:
e7:76:0f:8f:98:cd:ff:db:7a:5c:dc:61:16:9a:ea:
bf:0f:ea:71:19:33:ad:f5:6a:b2:54:be:61:65:fc:
6f:3c:10:16:18:bd:02:b1:9b:77:f1:f4:1f:94:26:
f2:24:98:4c:04:65:1c:71:f3:1a:2d:17:07:57:31:
3c:82:40:da:71:2f:7b:c2:85:c7:08:f3:c5:58:c3:
c7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6F:5F:D8:57:63:8E:25:C3:1C:1F:61:2D:2A:61:E1:9C:DA:4E:D8
X509v3 Authority Key Identifier:
keyid:93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:da:33:a2:72:05:de:98:62:0b:9f:c7:d6:73:68:19:44:4d:
65:a0:aa:a7:c1:b3:5c:e0:25:34:9e:f6:7f:36:e0:b7:99:b4:
1d:71:47:6f:bd:ff:ce:48:c2:c2:b4:e8:78:56:51:b6:79:8c:
2e:e4:e5:41:dc:8b:0b:89:fa:be:68:46:84:2b:27:14:e5:46:
da:4c:bd:c0:38:14:c7:a4:8c:b3:e3:3a:77:24:80:a0:1e:30:
9e:64:98:e4:3d:63:68:5f:b9:2a:44:8b:83:25:cf:b3:c0:13:
72:39:09:d4:82:34:1b:61:ac:bc:1f:2a:ae:51:1a:f1:0a:de:
da:f3:fb:c0:42:d4:3b:6f:b5:84:c3:e5:79:c2:97:64:0a:ad:
81:42:b9:0d:05:d2:4c:ae:81:e8:19:a2:94:7a:46:aa:3c:b6:
71:83:bd:bc:c4:a6:b8:2c:cd:94:d4:41:a3:1c:0a:45:13:aa:
6c:e0:dc:ca:4d:3a:df:0b:20:9e:c8:e0:b7:15:05:e0:21:62:
1b:86:3a:92:e1:52:b4:b9:24:79:4e:ef:11:ec:4d:db:ce:61:
b6:16:34:f1:fd:1c:4d:9b:9d:de:74:95:b3:95:07:bd:03:c4:
c9:0a:ae:1b:3c:f1:d4:3d:6c:2e:c9:41:14:94:17:0a:ed:32:
1c:79:ba:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 17:28:49 2025 by rpki-client