Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
File: k0lZrev33pQ1VbyiUIgH65E85vI.mft (raw, json)
Hash identifier: wqqkI92BaAuCVrSDONWUdyHv2MVVkHVmKQ3FM+eCaaw=
Subject key identifier: DF:FB:E8:CC:C6:F5:C8:44:0A:34:C0:3B:42:DF:CC:DA:9C:A8:3F:E6
Authority key identifier: 93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2
Certificate issuer: /CN=934959adebf7de943555bca2508807eb913ce6f2
Certificate serial: 0196CBE13891F88E4672CE5CBF38D3585EB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
Manifest number: 153D
Signing time: Tue 13 May 2025 23:00:57 +0000
Manifest this update: Tue 13 May 2025 23:00:57 +0000
Manifest next update: Wed 14 May 2025 23:00:57 +0000
Files and hashes: 1: dfUbk-VdzFxHfQpYYrY4XW0hmF4.roa (hash: ey6XnfMKe2KD1ABTE4f8EryWVZihQYn0Zy+yAjoGoiI=)
2: k0lZrev33pQ1VbyiUIgH65E85vI.crl (hash: /dwx/EPQzKfHSHJJWtAQJ0l0jPoJIkwvFehAYbz/ruM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:e1:38:91:f8:8e:46:72:ce:5c:bf:38:d3:58:5e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934959adebf7de943555bca2508807eb913ce6f2
Validity
Not Before: May 13 23:00:57 2025 GMT
Not After : May 14 23:00:57 2025 GMT
Subject: CN=dffbe8ccc6f5c8440a34c03b42dfccda9ca83fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:52:e1:d7:ba:27:34:bb:31:92:e7:6e:d0:ca:
a0:96:01:89:4a:51:ce:6f:6e:dd:ca:61:d1:a0:6e:
58:65:ba:b2:71:07:93:df:2c:3c:00:8b:92:10:a4:
d3:8e:d7:18:04:c1:63:d4:ca:97:02:a8:11:7a:06:
c5:c5:23:3c:b8:f0:e5:1c:88:d2:0a:62:b0:1b:20:
51:fa:cc:36:0f:78:f6:8d:ca:d7:b9:e0:13:a0:41:
82:48:f4:08:1f:62:02:a6:fe:a1:d9:fa:d8:50:b5:
a7:3f:36:1d:7c:b9:70:74:79:dc:1e:04:f9:d5:2e:
95:ae:cc:50:20:22:f8:18:97:e5:1b:c5:4f:14:89:
4f:b3:39:a2:3d:fd:06:f0:af:7b:86:23:bd:9a:f2:
f3:ba:63:7c:10:51:6e:34:e7:c2:bb:fb:90:42:4e:
e0:de:fa:e5:50:cb:13:3b:f5:70:20:12:ba:b0:bc:
01:5d:a0:f5:c8:49:3b:2c:7f:cc:af:d6:32:f7:7a:
87:91:69:39:4c:de:40:c2:cb:02:75:16:b6:90:29:
1d:43:13:67:0a:10:1e:1e:2f:10:4e:4f:56:76:05:
92:b2:40:18:02:f7:ea:58:c7:3e:6d:98:34:93:02:
74:1b:12:0d:7c:18:bb:ac:4c:19:88:22:24:cc:c7:
12:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FB:E8:CC:C6:F5:C8:44:0A:34:C0:3B:42:DF:CC:DA:9C:A8:3F:E6
X509v3 Authority Key Identifier:
keyid:93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:92:e7:de:0e:9c:43:0d:a0:00:0a:cc:45:c3:41:ec:ec:88:
2f:db:31:93:57:fb:ac:09:da:2f:0c:e5:38:21:25:02:d7:6b:
23:a1:7d:4c:69:ce:d0:d3:7b:a6:91:8b:2d:38:b8:a9:88:76:
98:d0:d1:03:52:3a:2c:e2:3a:6e:4d:e0:30:7a:41:c6:64:59:
3a:4f:73:af:ad:6d:be:18:d7:34:99:a2:9e:ee:fd:ec:ef:9d:
fa:3a:a6:9d:0d:51:2a:44:80:c2:2b:45:4f:e2:4d:4f:8b:54:
cd:b0:e0:bd:05:a5:ca:1a:a0:cc:eb:0d:c5:0d:a3:ee:fc:37:
e4:97:17:de:c3:d8:64:db:e0:29:44:46:e3:26:96:75:81:c4:
1c:67:d6:bd:74:e6:40:0a:df:06:1d:7e:e6:80:c4:6f:01:78:
c4:03:2a:86:d5:96:26:be:02:a0:16:b1:95:b0:8a:e1:da:85:
47:36:fc:6c:42:9c:15:de:4a:38:54:12:0c:70:39:13:c4:61:
37:c0:35:fa:41:73:f2:64:81:94:1e:c0:e4:42:2b:0e:bb:74:
b1:c9:5a:7c:c4:b3:3d:49:a9:49:08:d3:68:44:b7:84:fd:57:
9d:be:72:32:73:7d:aa:05:c2:2b:df:58:53:7e:88:19:ea:a8:
0b:20:63:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 04:25:15 2025 by rpki-client