Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
File: k-zM3oXECxVPkZuvZO8DLscNdR4.mft (raw, json)
Hash identifier: +XLP+Mc3rrw0ZrUc8ODoWTCtPR6Ld5bGiM8IQFzSH2k=
Subject key identifier: EB:55:11:9E:30:5E:62:7D:4E:11:7A:7B:CB:5C:7E:9D:D0:8A:56:B3
Authority key identifier: 93:EC:CC:DE:85:C4:0B:15:4F:91:9B:AF:64:EF:03:2E:C7:0D:75:1E
Certificate issuer: /CN=93ecccde85c40b154f919baf64ef032ec70d751e
Certificate serial: 019750B3B402EAC34B09519AE4E02DE8BC44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 18:00:43 +0000
Manifest this update: Sun 08 Jun 2025 18:00:43 +0000
Manifest next update: Mon 09 Jun 2025 18:00:43 +0000
Files and hashes: 1: GqA5UTC990ZFigxOynJ8MXXo8rI.roa (hash: YOFtkRTAig5lLMiPuaPFv21LA8hii5BrqwulK2FRjwI=)
2: k-zM3oXECxVPkZuvZO8DLscNdR4.crl (hash: U2A3zhavG1qgKzn4EXc2awM5i4MoNpZ87kPQO7oMusI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b3:b4:02:ea:c3:4b:09:51:9a:e4:e0:2d:e8:bc:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93ecccde85c40b154f919baf64ef032ec70d751e
Validity
Not Before: Jun 8 18:00:43 2025 GMT
Not After : Jun 9 18:00:43 2025 GMT
Subject: CN=eb55119e305e627d4e117a7bcb5c7e9dd08a56b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cb:c0:c5:12:f8:aa:58:45:df:19:b7:06:62:
dd:73:75:93:5f:ad:1c:8d:7d:34:2b:0a:bf:74:4b:
24:97:8c:b4:3d:7a:40:95:b6:82:83:34:65:e4:bb:
0c:6c:44:b1:4a:05:fc:85:70:18:08:6a:41:93:1b:
cb:84:53:b3:2c:bb:7a:cb:7c:8a:39:72:d8:f0:4a:
fd:31:f5:67:f9:f5:6a:6f:3c:c9:f2:99:77:2a:67:
73:b4:05:df:96:73:6a:28:46:06:ff:db:98:3f:2e:
cf:94:26:c7:99:f9:73:d0:fc:77:54:6c:e9:7f:b2:
61:3d:0b:2c:5d:89:77:16:fb:b7:fa:de:1d:e6:22:
bb:14:dd:d3:da:e3:04:95:98:c1:82:bb:bf:47:2d:
0b:a6:db:50:96:89:60:91:41:87:02:7d:ac:1a:df:
01:35:e0:3c:e7:c9:80:81:06:b8:1d:4c:76:a3:32:
48:cf:f9:a8:84:53:54:01:b2:21:b8:37:b0:c8:a8:
80:17:b0:6c:7a:c0:c5:3f:2c:2d:08:ec:66:82:f9:
94:1d:44:6e:d2:50:74:dd:f4:18:9c:01:c5:84:e1:
14:20:eb:dc:a0:58:69:6d:bc:01:a4:79:2c:1e:c1:
72:c0:25:0e:e7:6d:eb:e0:2a:05:51:bd:8b:ad:2e:
9c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:55:11:9E:30:5E:62:7D:4E:11:7A:7B:CB:5C:7E:9D:D0:8A:56:B3
X509v3 Authority Key Identifier:
keyid:93:EC:CC:DE:85:C4:0B:15:4F:91:9B:AF:64:EF:03:2E:C7:0D:75:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:af:21:c0:4b:94:52:43:82:a6:3d:8a:b9:e1:13:58:04:fe:
b6:d8:81:0c:06:48:47:aa:6d:70:99:24:f9:7d:d0:c4:69:ab:
04:27:61:34:84:6a:7b:3d:fb:c4:e2:fb:b9:81:d8:8b:23:f1:
c7:29:04:86:d3:cd:bc:e4:27:d9:b9:6b:b0:7b:5e:2c:19:38:
0d:d2:c4:56:55:c7:73:3e:11:b0:4c:69:59:74:cb:89:fc:89:
55:d2:b6:95:bd:74:bd:7f:a5:f6:5b:2f:f9:37:29:0c:6a:59:
d2:f2:4e:04:37:92:f8:cc:5d:0d:5f:1c:9f:8d:12:02:03:06:
86:d4:2c:3e:5a:95:5e:84:6a:43:3a:15:94:96:68:2b:9c:5a:
60:f1:d9:b2:6d:d5:5c:c3:94:5b:32:c8:4e:b7:89:cc:ea:db:
78:29:db:09:ef:7a:29:8e:60:74:d1:63:87:71:99:49:21:8b:
a4:d7:af:39:57:e1:0d:aa:7f:51:a2:58:0a:37:05:e8:12:0d:
a4:22:c2:7d:80:15:9d:93:a3:70:40:d9:9e:8a:a6:09:fa:2f:
36:e3:54:79:b5:2b:b2:f6:ef:aa:00:30:cd:e3:7b:9c:fd:ff:
1f:ac:dc:a8:16:42:51:23:0f:9a:4c:89:1b:9c:af:41:05:4b:
f3:b4:6f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:26:02 2025 by rpki-client