Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
File: _30XNGbvuybSoRkpi7l5mgk8MjA.mft (raw, json)
Hash identifier: UYosDnqQ3/akUSQcestqkEGvj9NXQB/y560ecaoXv4Y=
Subject key identifier: E8:03:40:20:59:25:E0:23:9B:4D:6E:95:ED:4D:A9:06:35:EE:CE:A3
Authority key identifier: FF:7D:17:34:66:EF:BB:26:D2:A1:19:29:8B:B9:79:9A:09:3C:32:30
Certificate issuer: /CN=ff7d173466efbb26d2a119298bb9799a093c3230
Certificate serial: 01974EFC8446495339BE1C656E01D2819A23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
Manifest number: 11F9
Signing time: Sun 08 Jun 2025 10:01:01 +0000
Manifest this update: Sun 08 Jun 2025 10:01:01 +0000
Manifest next update: Mon 09 Jun 2025 10:01:01 +0000
Files and hashes: 1: _30XNGbvuybSoRkpi7l5mgk8MjA.crl (hash: RqRIn9cliYev5J9NaX+fQa5XyJEdT5dn//rPeFBCp/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:84:46:49:53:39:be:1c:65:6e:01:d2:81:9a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7d173466efbb26d2a119298bb9799a093c3230
Validity
Not Before: Jun 8 10:01:01 2025 GMT
Not After : Jun 9 10:01:01 2025 GMT
Subject: CN=e80340205925e0239b4d6e95ed4da90635eecea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:13:24:83:cf:bf:18:c6:db:0c:85:77:ba:dc:
49:cb:86:ac:c1:76:7f:82:8d:d9:10:cd:d3:b3:70:
14:3e:60:c6:b9:89:3f:83:f8:cb:4c:ff:99:12:f5:
9c:9c:3f:45:d6:47:d9:63:df:49:10:da:5c:fe:02:
a1:1b:23:22:df:07:d7:fc:2e:78:bb:88:a0:6d:7c:
49:3d:06:3f:ad:14:29:54:e9:db:90:a2:9a:9b:b5:
2c:e8:16:66:c9:28:bc:7d:7e:22:92:30:5e:aa:a5:
6d:4b:f0:22:12:e7:3c:ca:7b:e5:7c:2c:8c:fb:93:
0c:cb:74:38:c6:50:06:73:14:d9:07:44:05:3c:fa:
38:99:2a:f5:da:09:47:87:5d:e9:91:d8:17:bb:d6:
17:d2:c7:1b:73:15:8b:19:21:e7:54:13:93:16:84:
49:89:79:8b:78:a6:2f:af:fe:31:6f:06:79:6d:93:
a0:73:13:4b:10:3f:57:57:d5:d4:68:aa:5e:6e:f6:
ed:3d:0a:32:00:04:46:68:8d:80:ef:ab:ba:bf:6e:
9b:ae:f8:70:2d:d6:9e:dc:9d:33:06:9e:bb:e2:e5:
78:87:cc:02:54:9e:1e:38:1b:25:a0:09:5d:b6:8e:
52:c5:4f:f2:ac:c5:f9:4e:be:45:91:28:d0:b1:59:
ac:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:03:40:20:59:25:E0:23:9B:4D:6E:95:ED:4D:A9:06:35:EE:CE:A3
X509v3 Authority Key Identifier:
keyid:FF:7D:17:34:66:EF:BB:26:D2:A1:19:29:8B:B9:79:9A:09:3C:32:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:37:b3:c0:ae:49:84:db:0d:5b:3e:0a:c9:5f:e2:76:00:d8:
64:08:b4:6f:30:d0:a9:bb:b6:b6:ab:32:39:4b:f5:41:38:a6:
78:6d:78:16:d6:da:ab:2b:50:be:74:76:41:b5:5f:4d:f5:5c:
d6:0e:4c:fc:4e:a8:e4:f8:06:f9:08:d1:e1:b0:b3:36:aa:c1:
7d:3f:b0:fa:cf:54:22:b3:b5:63:c3:66:c2:53:75:78:d3:01:
09:63:1a:f4:9e:37:85:07:b0:e0:36:1b:bd:eb:9b:73:7d:8e:
11:7d:e3:be:10:d6:49:b1:87:ac:e3:9e:63:da:5e:75:e6:d3:
f2:f6:2a:45:04:a1:fe:bf:81:00:3b:a0:6e:5f:12:53:5d:84:
b4:43:fc:89:fa:96:0a:5f:b6:8a:b0:77:ab:99:c3:79:e8:60:
7b:7e:57:c7:b9:b9:f4:80:d8:b1:56:c2:59:7d:35:23:0b:bc:
83:c2:d2:30:9f:9b:b0:4d:90:00:9b:09:e4:d7:12:ca:19:6b:
c9:98:72:3e:c9:42:d3:b3:3e:49:92:f7:f3:46:6a:c5:6f:a3:
86:6b:c2:18:35:1c:e6:a1:7a:38:db:24:fd:c2:46:57:fe:cd:
89:a8:3f:8a:8c:be:35:87:4b:52:1f:66:56:d8:ab:34:8b:ee:
bb:14:04:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:15:31 2025 by rpki-client