Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
File: k-zM3oXECxVPkZuvZO8DLscNdR4.mft (raw, json)
Hash identifier: GS657il47M9/XtUvE4P8sDEByseuzivt8LG9gmx/qPA=
Subject key identifier: 3D:8D:D1:28:48:E6:8F:65:14:5E:01:CE:1F:DB:DF:F4:71:AC:EE:43
Authority key identifier: 93:EC:CC:DE:85:C4:0B:15:4F:91:9B:AF:64:EF:03:2E:C7:0D:75:1E
Certificate issuer: /CN=93ecccde85c40b154f919baf64ef032ec70d751e
Certificate serial: 01965982F5EE85C984DAE84916112F03FEA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 18:01:16 +0000
Manifest this update: Mon 21 Apr 2025 18:01:16 +0000
Manifest next update: Tue 22 Apr 2025 18:01:16 +0000
Files and hashes: 1: GqA5UTC990ZFigxOynJ8MXXo8rI.roa (hash: YOFtkRTAig5lLMiPuaPFv21LA8hii5BrqwulK2FRjwI=)
2: k-zM3oXECxVPkZuvZO8DLscNdR4.crl (hash: bW8S+FtRyv/7ZZ3hkX+eEoXSzUaxRP1bAhyq80ImSGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:f5:ee:85:c9:84:da:e8:49:16:11:2f:03:fe:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93ecccde85c40b154f919baf64ef032ec70d751e
Validity
Not Before: Apr 21 18:01:16 2025 GMT
Not After : Apr 22 18:01:16 2025 GMT
Subject: CN=3d8dd12848e68f65145e01ce1fdbdff471acee43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5a:7b:e0:ed:97:aa:51:44:1b:38:b5:6f:6b:
01:2b:ad:27:f5:c9:e8:9a:3f:d4:16:81:cd:03:c0:
d7:14:83:fa:3b:1a:c2:ef:28:1f:3b:f3:25:ba:03:
2e:a2:a3:6f:fb:c5:9d:e2:3d:bc:f7:c4:3b:7c:8e:
40:c6:99:95:54:c7:db:b0:75:37:01:b0:ec:7e:8b:
32:f4:38:10:0d:91:6c:ed:d9:c5:1d:0d:7c:0c:96:
8e:67:32:b0:a7:09:3d:45:32:b4:d4:0a:36:a2:41:
ff:b4:a7:7b:52:7d:2b:41:dc:93:a7:c0:c3:f1:9d:
ab:04:7e:39:60:46:8e:25:68:15:7e:ee:87:19:c3:
4e:25:bc:4e:5e:ea:ad:b2:85:7e:a2:75:50:89:78:
a5:6f:e5:c5:be:f0:e1:6f:d4:89:64:a5:f9:9b:7b:
31:ef:26:b9:88:f0:bf:68:ab:40:a9:90:ac:5c:37:
de:47:bd:aa:a8:18:5f:81:8a:dd:e7:8e:5a:a1:a5:
80:9d:e2:58:60:bd:27:59:c9:cf:0f:4f:b6:c4:c6:
cf:0c:76:92:d9:d8:99:34:33:c0:81:7f:ea:e5:65:
b1:82:0c:00:83:56:ab:96:0a:0c:c6:ed:18:08:0e:
f5:34:d4:03:0b:1f:63:ed:17:c4:29:e3:8d:40:bb:
41:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8D:D1:28:48:E6:8F:65:14:5E:01:CE:1F:DB:DF:F4:71:AC:EE:43
X509v3 Authority Key Identifier:
keyid:93:EC:CC:DE:85:C4:0B:15:4F:91:9B:AF:64:EF:03:2E:C7:0D:75:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:03:c8:8c:0f:d6:0a:3d:6a:d9:e6:28:b8:02:cd:d9:00:6b:
5a:4b:91:57:e0:bc:93:21:5f:b2:f4:28:5e:67:70:69:6b:fc:
aa:b1:64:82:60:38:b2:25:d8:67:b2:7d:ee:84:30:2e:44:21:
2f:d3:35:87:eb:2b:d4:c7:f6:07:46:c0:ee:54:94:c6:4f:b9:
ba:68:30:4a:8b:ab:46:b1:48:d7:30:b5:43:bd:38:63:7e:36:
63:e1:84:b2:67:bb:23:eb:59:f4:01:ca:db:2f:44:42:1e:38:
19:5d:36:45:45:5f:f9:a0:86:44:d9:d2:41:38:07:47:7b:52:
ae:e1:a8:47:86:1c:53:0b:8b:d3:6f:99:1b:6f:59:67:cc:cf:
a3:b4:97:ad:99:87:ca:01:7c:1a:d5:99:6d:d3:47:ac:03:8e:
17:ac:ab:6a:b1:f5:e9:3a:05:af:d7:b6:d4:8d:86:62:ff:a5:
4f:ea:85:ea:d5:55:03:39:80:6e:b1:45:2b:ec:e6:84:17:5b:
e3:6e:c2:fe:5c:a5:fa:af:b7:e0:3a:38:65:7b:dc:b9:cd:b0:
51:7d:e5:c0:1c:12:2f:bc:1a:d2:54:e6:1d:f8:f1:42:39:7e:
a7:2e:7c:19:69:42:9f:09:91:89:12:cc:66:a9:ca:dc:0d:ad:
01:9b:88:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZgvXuhcmE2uhJFhEvA/6oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZWNjY2RlODVjNDBiMTU0ZjkxOWJhZjY0ZWYwMzJlYzcw
ZDc1MWUwHhcNMjUwNDIxMTgwMTE2WhcNMjUwNDIyMTgwMTE2WjAzMTEwLwYDVQQD
EygzZDhkZDEyODQ4ZTY4ZjY1MTQ1ZTAxY2UxZmRiZGZmNDcxYWNlZTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVp74O2XqlFEGzi1b2sBK60n9cno
mj/UFoHNA8DXFIP6OxrC7ygfO/MlugMuoqNv+8Wd4j2898Q7fI5AxpmVVMfbsHU3
AbDsfosy9DgQDZFs7dnFHQ18DJaOZzKwpwk9RTK01Ao2okH/tKd7Un0rQdyTp8DD
8Z2rBH45YEaOJWgVfu6HGcNOJbxOXuqtsoV+onVQiXilb+XFvvDhb9SJZKX5m3sx
7ya5iPC/aKtAqZCsXDfeR72qqBhfgYrd545aoaWAneJYYL0nWcnPD0+2xMbPDHaS
2diZNDPAgX/q5WWxggwAg1arlgoMxu0YCA71NNQDCx9j7RfEKeONQLtBzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2N0ShI5o9lFF4Bzh/b3/RxrO5DMB8GA1UdIwQY
MBaAFJPszN6FxAsVT5Gbr2TvAy7HDXUeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay16TTNvWEVDeFZQa1p1dlpPOERMc2NOZFI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC85NjU1ODAtODczNi00MTczLWJkZTMt
MmMzMDI4ZmNlY2U5LzEvay16TTNvWEVDeFZQa1p1dlpPOERMc2NOZFI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC85NjU1ODAtODczNi00MTczLWJkZTMtMmMzMDI4ZmNlY2U5
LzEvay16TTNvWEVDeFZQa1p1dlpPOERMc2NOZFI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQPIjA/W
Cj1q2eYouALN2QBrWkuRV+C8kyFfsvQoXmdwaWv8qrFkgmA4siXYZ7J97oQwLkQh
L9M1h+sr1Mf2B0bA7lSUxk+5umgwSourRrFI1zC1Q704Y342Y+GEsme7I+tZ9AHK
2y9EQh44GV02RUVf+aCGRNnSQTgHR3tSruGoR4YcUwuL02+ZG29ZZ8zPo7SXrZmH
ygF8GtWZbdNHrAOOF6yrarH16ToFr9e21I2GYv+lT+qF6tVVAzmAbrFFK+zmhBdb
427C/lyl+q+34Do4ZXvcuc2wUX3lwBwSL7wa0lTmHfjxQjl+py58GWlCnwmRiRLM
ZqnK3A2tAZuIHg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:21:15 2025 by rpki-client