Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
File: k0lZrev33pQ1VbyiUIgH65E85vI.mft (raw, json)
Hash identifier: ot1gTO/PEXZJvxJpCLp8QyZKC36aOY5kbuVPZJD0YiE=
Subject key identifier: BA:57:A5:09:25:5D:05:83:10:3E:4F:79:AF:12:03:1F:83:7D:FA:8F
Authority key identifier: 93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2
Certificate issuer: /CN=934959adebf7de943555bca2508807eb913ce6f2
Certificate serial: 0198D54E8D4665E669A639182239D1B0258A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 05:02:31 +0000
Manifest this update: Sat 23 Aug 2025 05:02:31 +0000
Manifest next update: Sun 24 Aug 2025 05:02:31 +0000
Files and hashes: 1: dfUbk-VdzFxHfQpYYrY4XW0hmF4.roa (hash: ey6XnfMKe2KD1ABTE4f8EryWVZihQYn0Zy+yAjoGoiI=)
2: k0lZrev33pQ1VbyiUIgH65E85vI.crl (hash: fTgKe5wq2llpjP2fdNR7iwZ16CEd8elKcSgcssThL5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:8d:46:65:e6:69:a6:39:18:22:39:d1:b0:25:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934959adebf7de943555bca2508807eb913ce6f2
Validity
Not Before: Aug 23 05:02:31 2025 GMT
Not After : Aug 24 05:02:31 2025 GMT
Subject: CN=ba57a509255d0583103e4f79af12031f837dfa8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a5:96:70:3c:32:fb:ae:2c:33:01:98:49:2e:
86:d2:e8:72:4b:8a:d5:57:7a:36:f7:16:b4:42:64:
8a:33:eb:65:fb:e4:47:71:db:80:63:3c:c3:f8:b2:
5a:b8:d8:4f:e6:5c:06:3d:b5:a9:8c:67:2f:2d:d0:
33:f8:1c:00:55:19:14:24:3b:f1:77:cd:56:20:0d:
bd:36:6e:6a:7b:96:78:15:ea:62:8d:9d:ce:b9:0c:
f0:f7:f4:15:16:21:5c:8f:21:bc:42:e0:e5:d4:98:
7c:c1:83:3d:87:c6:cc:35:52:08:75:29:23:78:6e:
c7:17:d4:af:36:4c:f1:78:85:5e:78:03:f8:2e:47:
bb:cb:e7:29:b5:7a:f6:89:40:82:ae:a1:0d:8d:b1:
3b:45:94:89:08:57:87:b9:82:c0:13:9a:79:7d:30:
c2:b6:1f:90:1f:6a:8d:5d:e1:82:1c:b5:1d:28:cc:
12:1c:7b:96:d2:01:dd:50:68:4e:75:fb:57:b7:f6:
57:24:c4:79:cf:d5:f1:e3:a0:6e:19:16:de:34:53:
45:cc:df:97:9d:4f:c4:56:62:fc:ca:2c:11:ff:9c:
bd:1e:9d:99:6a:cf:cd:c1:82:d4:0e:77:79:7c:25:
2f:d9:0a:10:ab:dc:19:33:e1:7b:0c:4f:b2:da:e3:
86:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:57:A5:09:25:5D:05:83:10:3E:4F:79:AF:12:03:1F:83:7D:FA:8F
X509v3 Authority Key Identifier:
keyid:93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:75:55:a0:5e:0a:02:3c:13:50:7f:3c:8a:c6:e8:41:ae:1a:
2a:b9:d2:7e:13:d3:21:e0:d8:41:af:ed:7c:35:6f:09:f9:a5:
f5:9a:18:de:ef:e4:85:3c:6d:e4:dd:79:62:18:55:e6:d4:df:
ed:28:43:98:53:df:83:56:13:3b:ae:24:9e:ad:ff:1b:56:16:
f2:e3:83:ea:d2:9e:e1:bd:5f:a8:e8:60:84:d7:05:f2:36:29:
a6:34:7b:be:6c:e7:36:b1:43:41:70:28:43:ab:7f:d0:f9:16:
34:24:82:66:c8:fe:ad:5b:2d:0c:70:21:52:f6:7f:0f:a6:97:
30:9d:93:4b:34:21:9f:75:89:42:3a:11:35:c4:54:6c:9c:69:
0f:53:3c:31:af:e2:c8:a4:8c:30:85:c0:e9:4d:5a:03:3f:b3:
6a:ba:a8:4a:ef:88:b1:a8:ae:30:4a:f6:a3:3a:fa:3e:56:38:
fc:9a:ad:cb:78:e2:f8:c0:7c:7d:64:31:9d:d0:1b:bb:29:83:
ba:8f:1f:fc:47:0f:6f:a3:d4:5e:21:7a:74:f4:fd:46:e3:07:
16:78:f9:76:3a:3c:4f:d6:e8:5a:31:c7:e6:70:9b:ec:32:1e:
42:29:02:5f:ec:15:68:b6:b2:9c:9f:8b:d8:f6:5c:40:ef:e4:
3c:9e:33:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:43:28 2025 by rpki-client