Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
File: k-zM3oXECxVPkZuvZO8DLscNdR4.mft (raw, json)
Hash identifier: SdOs4xzavcUIlX0SKoGduUmTAZRLzMk9NYxeiViJcmk=
Subject key identifier: 16:CB:7D:49:3B:CD:34:8D:03:FB:63:00:AC:04:A1:CE:C0:F6:9C:5B
Authority key identifier: 93:EC:CC:DE:85:C4:0B:15:4F:91:9B:AF:64:EF:03:2E:C7:0D:75:1E
Certificate issuer: /CN=93ecccde85c40b154f919baf64ef032ec70d751e
Certificate serial: 01977F0CF338D5260C8EDBFB2A9694F87AC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
Manifest number: 1599
Signing time: Tue 17 Jun 2025 18:00:44 +0000
Manifest this update: Tue 17 Jun 2025 18:00:44 +0000
Manifest next update: Wed 18 Jun 2025 18:00:44 +0000
Files and hashes: 1: GqA5UTC990ZFigxOynJ8MXXo8rI.roa (hash: YOFtkRTAig5lLMiPuaPFv21LA8hii5BrqwulK2FRjwI=)
2: k-zM3oXECxVPkZuvZO8DLscNdR4.crl (hash: DP9SqTWs7EX+4VTLAP/uGETv4kZkfOx++/geh1Cw2W8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:0c:f3:38:d5:26:0c:8e:db:fb:2a:96:94:f8:7a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93ecccde85c40b154f919baf64ef032ec70d751e
Validity
Not Before: Jun 17 18:00:44 2025 GMT
Not After : Jun 18 18:00:44 2025 GMT
Subject: CN=16cb7d493bcd348d03fb6300ac04a1cec0f69c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:26:b2:47:97:8c:73:2a:4b:17:5c:9a:19:5d:
aa:e6:64:0b:56:4e:a5:78:fa:8d:22:fa:2b:d3:ca:
91:a4:0e:4a:52:fe:f8:e4:9f:65:da:3a:76:b2:39:
42:d7:70:91:57:14:a8:72:7c:ff:15:b0:94:57:43:
01:1c:62:8e:16:6d:86:9e:02:aa:5a:af:75:94:7e:
21:e3:ec:76:a1:3a:bb:02:96:87:57:55:70:1d:2b:
44:9c:e8:c1:19:3d:c7:48:0f:1e:18:4e:26:ee:a5:
6e:9a:d6:1f:c5:b1:cf:bb:5e:f9:ee:a7:f3:63:6d:
90:cc:c3:6a:04:69:12:f5:92:52:38:c4:90:33:8d:
9a:dc:69:d7:d2:c5:31:6c:ca:ac:fd:64:9c:e5:63:
83:37:c7:de:68:18:80:74:79:d7:df:01:e9:07:95:
3e:ba:3d:bb:92:ad:0d:3d:34:2b:e7:61:59:82:d2:
27:d0:1c:5b:b5:c4:16:b8:0c:3f:f2:56:88:c5:d4:
51:40:ac:71:51:6f:ff:a9:d2:53:e4:5f:d8:f1:bd:
ae:d6:93:89:56:07:6b:06:2f:f1:e9:50:a5:01:a3:
9d:ed:fa:0e:52:7c:b2:37:63:46:75:4c:e4:6f:6a:
d9:98:90:68:64:59:78:40:b7:25:61:c0:21:2f:44:
a3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CB:7D:49:3B:CD:34:8D:03:FB:63:00:AC:04:A1:CE:C0:F6:9C:5B
X509v3 Authority Key Identifier:
keyid:93:EC:CC:DE:85:C4:0B:15:4F:91:9B:AF:64:EF:03:2E:C7:0D:75:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d1:cc:a1:20:68:22:bf:43:79:8b:58:1a:49:74:69:45:90:
99:64:ae:60:18:42:4f:59:39:24:61:2f:93:c0:fa:43:32:bf:
41:c4:c2:57:85:68:15:1f:87:f1:f3:9f:28:6c:a6:2d:50:b7:
c3:6d:ed:e5:7b:ac:db:34:f7:f1:ed:89:73:8f:3c:07:d2:b4:
5e:e9:2d:12:55:e9:66:8c:f6:23:33:3c:d2:13:59:c6:28:13:
16:28:d7:25:80:1b:75:36:7a:88:18:ea:18:1d:09:e8:06:1b:
cb:b1:9d:1a:14:ac:dd:79:d1:ef:9e:54:a9:0a:52:e7:5d:b9:
4f:64:74:58:0b:48:2d:a0:4c:b5:fd:6e:74:bf:62:3d:a2:a3:
8c:b8:54:92:22:6f:85:da:f7:fb:85:3c:7f:9a:40:47:5d:84:
f2:30:9b:bf:ad:24:9c:ef:8d:20:f8:7b:d9:b6:14:4f:02:65:
74:8e:05:38:12:4c:42:74:0e:8d:ac:da:47:fe:42:e9:cb:85:
f3:bf:6a:ab:2a:46:48:56:3a:95:d5:17:78:66:70:52:4e:d7:
34:31:c9:43:a4:3c:40:e3:30:f9:ec:2f:79:cc:5a:13:bf:8a:
94:46:ae:13:94:8f:92:85:f0:fc:bd:86:a5:37:67:c4:f2:e3:
60:e5:bc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 23:01:15 2025 by rpki-client