Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
File: 30KpUq9vhPKfHRse6XQbBXKGh4Q.mft (raw, json)
Hash identifier: 9bcImBVD6zcSEWlyS/ADdZV57Mb5SYkK/6QD0EYgGz4=
Subject key identifier: 0E:06:C1:8A:AE:72:70:56:3D:13:4A:46:15:24:34:A2:12:A0:76:09
Authority key identifier: DF:42:A9:52:AF:6F:84:F2:9F:1D:1B:1E:E9:74:1B:05:72:86:87:84
Certificate issuer: /CN=df42a952af6f84f29f1d1b1ee9741b0572868784
Certificate serial: 01984A09BC8CBE7CB6AF0B6971F36F5E60DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
Manifest number: 1190
Signing time: Sun 27 Jul 2025 04:00:08 +0000
Manifest this update: Sun 27 Jul 2025 04:00:08 +0000
Manifest next update: Mon 28 Jul 2025 04:00:08 +0000
Files and hashes: 1: 30KpUq9vhPKfHRse6XQbBXKGh4Q.crl (hash: C6CvBAb8MV5rvXs2aRC5Ij1FwFxiYinotnNgdJ570gY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:bc:8c:be:7c:b6:af:0b:69:71:f3:6f:5e:60:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df42a952af6f84f29f1d1b1ee9741b0572868784
Validity
Not Before: Jul 27 04:00:08 2025 GMT
Not After : Jul 28 04:00:08 2025 GMT
Subject: CN=0e06c18aae7270563d134a46152434a212a07609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:22:e2:aa:4c:82:c3:3e:40:08:0a:49:49:88:
2f:f5:a8:9c:08:98:ee:75:6a:8f:16:2d:5f:b3:a0:
af:47:fa:49:26:64:69:8c:d4:3e:39:31:d2:a9:3f:
57:9a:28:b0:44:76:64:1e:55:97:23:6a:88:5b:1b:
b9:8f:57:a4:d4:7f:3a:d7:53:3b:20:5d:82:e1:ac:
59:1d:48:9f:3c:ca:94:e0:23:0a:c5:f0:63:66:dc:
93:35:32:07:9f:7b:53:39:bb:f4:63:17:9f:01:e2:
c0:17:fb:02:4c:6a:e0:5a:27:ac:09:da:aa:95:a9:
4c:e4:05:b1:89:8a:41:c7:8a:f1:7d:84:2d:c5:a7:
f7:13:f3:da:a5:bf:a8:ed:73:09:7e:a8:d1:82:ad:
5e:98:db:d2:63:bb:fe:a7:4c:f2:2d:69:23:4d:38:
45:a6:01:54:fc:ea:ef:a7:57:bb:fa:fb:3b:43:5c:
b9:5b:68:98:36:cb:92:6c:d9:7b:75:f3:d1:36:62:
88:9c:6a:f7:46:94:28:e0:f7:5b:9c:03:fc:d0:a7:
8d:90:7f:12:25:44:ba:64:c4:68:fc:b9:b0:89:c1:
97:0e:d3:42:b6:05:8e:16:26:4c:74:f3:e2:c8:ea:
cc:96:87:71:68:ca:6a:73:e3:c2:10:21:fa:44:59:
25:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:06:C1:8A:AE:72:70:56:3D:13:4A:46:15:24:34:A2:12:A0:76:09
X509v3 Authority Key Identifier:
keyid:DF:42:A9:52:AF:6F:84:F2:9F:1D:1B:1E:E9:74:1B:05:72:86:87:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:33:3d:91:55:0b:ed:e4:8c:dd:10:3c:c9:54:3f:7b:6d:64:
1f:41:7c:c8:e6:88:84:e7:6e:3e:b3:bb:d5:c4:3a:35:82:b4:
61:a0:d2:6d:c1:3e:9f:a5:b0:cc:a6:1c:18:3c:3e:24:95:ee:
35:5d:e5:29:ff:c3:03:74:41:c0:9a:6a:49:eb:b5:60:d2:cf:
b4:56:13:e9:9d:0b:36:6b:a2:ac:9d:94:99:37:3e:70:60:c6:
3f:fe:d0:02:46:b8:24:45:02:be:da:73:5a:ed:04:67:24:b1:
08:66:3a:6d:1b:ec:24:fa:93:d4:64:40:78:db:7d:3a:60:25:
56:1d:be:8c:46:51:b1:8a:a8:ed:7e:8d:0a:9e:4f:f5:2b:7d:
0a:2b:f9:77:d8:e8:77:27:d5:03:b6:b6:a9:ff:77:bc:9e:3d:
e2:ad:85:f0:03:a2:71:08:20:c4:73:10:88:7d:d9:89:1e:e2:
4a:e8:4a:31:ab:ca:f1:fe:00:2a:d0:e3:a4:e5:17:c7:c0:9d:
de:ad:b3:78:7b:19:93:84:3c:c7:26:20:c2:8a:51:15:68:12:
ff:8a:eb:5c:71:60:94:8e:90:1a:2d:a3:34:29:56:b1:9e:15:
76:e4:5d:59:36:d5:73:bc:0b:a0:12:0d:e2:be:64:d6:97:d0:
ab:90:36:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:14:03 2025 by rpki-client