Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
File: _30XNGbvuybSoRkpi7l5mgk8MjA.mft (raw, json)
Hash identifier: 1L5YpcG1wFxE6bddtW2piUGoOzGaZqJEPbdSTc3go6E=
Subject key identifier: 4E:6A:98:A0:82:01:EE:11:53:CC:07:0E:57:0B:AE:92:BE:DF:54:6D
Authority key identifier: FF:7D:17:34:66:EF:BB:26:D2:A1:19:29:8B:B9:79:9A:09:3C:32:30
Certificate issuer: /CN=ff7d173466efbb26d2a119298bb9799a093c3230
Certificate serial: 01963CC17DBD0D64D93CAB5A4E6D42C7A4CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
Manifest number: 116B
Signing time: Wed 16 Apr 2025 04:00:35 +0000
Manifest this update: Wed 16 Apr 2025 04:00:35 +0000
Manifest next update: Thu 17 Apr 2025 04:00:35 +0000
Files and hashes: 1: _30XNGbvuybSoRkpi7l5mgk8MjA.crl (hash: DfuEHZoNM6I41z/YqtbaDcKP8XL2EjM+5dgr3/0OvGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:c1:7d:bd:0d:64:d9:3c:ab:5a:4e:6d:42:c7:a4:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7d173466efbb26d2a119298bb9799a093c3230
Validity
Not Before: Apr 16 04:00:35 2025 GMT
Not After : Apr 17 04:00:35 2025 GMT
Subject: CN=4e6a98a08201ee1153cc070e570bae92bedf546d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b0:02:59:f9:1b:bd:ea:26:36:1a:6e:32:b9:
e5:46:0f:b4:a2:27:5d:7e:1a:c6:55:98:5a:b3:17:
98:65:90:7b:82:ce:03:8e:2b:5c:10:09:a0:0e:88:
92:e6:d5:52:be:ef:da:a9:9c:ca:3e:4d:97:6a:a4:
a5:b4:fc:bb:75:ae:59:24:c4:3a:d2:74:e0:3b:5d:
cb:c3:84:9f:dc:ff:52:92:ed:d1:c5:9c:f5:a3:16:
2b:97:d0:7e:ea:e3:c8:ac:e5:06:96:e9:88:49:8b:
20:3c:42:f7:33:fb:a6:08:3e:e1:79:a7:43:97:c5:
b4:6b:70:7f:a8:ba:87:8d:55:4a:51:55:e9:b1:78:
8c:56:5e:a7:40:ff:19:f6:79:c0:da:74:e5:05:f2:
a3:f0:eb:52:78:51:5a:23:58:c6:1c:02:5f:19:23:
14:af:3c:17:13:f2:a4:13:89:d2:f8:26:07:9f:b1:
0a:bd:38:5a:71:68:76:98:81:d8:89:b0:11:f1:a1:
74:fe:c3:50:a6:54:a3:ce:55:90:e0:49:9a:83:47:
3b:a0:e7:78:2e:9c:87:47:7b:be:17:b9:12:1a:f3:
88:02:36:90:a2:9b:55:74:da:a6:16:18:e6:3f:ad:
8b:8d:da:fa:e2:dc:cd:88:46:d5:49:96:99:cd:98:
c1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6A:98:A0:82:01:EE:11:53:CC:07:0E:57:0B:AE:92:BE:DF:54:6D
X509v3 Authority Key Identifier:
keyid:FF:7D:17:34:66:EF:BB:26:D2:A1:19:29:8B:B9:79:9A:09:3C:32:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e7:90:2c:9f:09:75:c5:82:e0:35:66:fd:7e:11:f8:96:66:
b2:5d:e6:51:ba:f0:fc:6f:e7:50:0a:19:1b:51:f9:f9:63:d1:
2b:e2:69:57:67:c4:60:b4:e7:0f:e4:09:a0:2a:48:93:f4:cf:
77:a8:20:1f:40:b0:14:86:5f:ce:fd:b8:f1:8e:2b:0b:42:1c:
2e:88:03:96:3c:d2:c6:54:34:b3:cb:de:2d:d3:94:21:c5:a7:
a3:76:97:c3:77:be:67:9d:7b:50:8b:73:b7:b6:38:49:3e:ed:
dc:d3:5c:a9:62:4c:ae:a0:da:0b:82:c5:f1:5c:e7:f6:24:b1:
d6:02:c9:91:0f:5c:cd:a1:3b:3c:87:7d:7a:77:47:a0:07:38:
2f:32:68:17:20:94:13:2b:13:22:de:fc:1e:3e:60:84:52:d1:
8a:c8:66:24:97:6d:5b:7a:8c:e5:a7:c9:9f:47:de:9a:bd:45:
37:6c:65:c1:b9:c9:f9:8c:2f:78:47:02:81:88:17:54:0e:5e:
a0:7c:be:0d:59:3f:8c:b2:23:0d:dc:b3:d5:c1:a2:53:26:34:
39:c7:4a:65:54:07:f3:3d:2a:a2:ba:29:51:36:cd:ec:9c:2d:
52:92:0b:b1:fa:85:48:1b:bc:b7:f7:ce:d6:f3:9c:e8:97:cb:
a3:ed:53:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 07:50:37 2025 by rpki-client