Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
File: _30XNGbvuybSoRkpi7l5mgk8MjA.mft (raw, json)
Hash identifier: QMu7g6V4hyhUz8URRlZOb7ZQzTXlIfdXwkKDdWjNwnE=
Subject key identifier: 30:4F:5C:71:A7:23:D6:21:42:2C:23:38:97:E1:15:5B:D6:AF:AC:26
Authority key identifier: FF:7D:17:34:66:EF:BB:26:D2:A1:19:29:8B:B9:79:9A:09:3C:32:30
Certificate issuer: /CN=ff7d173466efbb26d2a119298bb9799a093c3230
Certificate serial: 0194C42C57AF3C1026B979E55E06FC2A17DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
Manifest number: 10A8
Signing time: Sun 02 Feb 2025 01:00:27 +0000
Manifest this update: Sun 02 Feb 2025 01:00:27 +0000
Manifest next update: Mon 03 Feb 2025 01:00:27 +0000
Files and hashes: 1: _30XNGbvuybSoRkpi7l5mgk8MjA.crl (hash: n5GNrClSyZJ4nPmDntFzYtuuZhVhRiPhdy0/oAyWTdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:57:af:3c:10:26:b9:79:e5:5e:06:fc:2a:17:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7d173466efbb26d2a119298bb9799a093c3230
Validity
Not Before: Feb 2 01:00:27 2025 GMT
Not After : Feb 3 01:00:27 2025 GMT
Subject: CN=304f5c71a723d621422c233897e1155bd6afac26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:01:2b:a3:34:26:46:05:62:5a:f8:ee:4d:91:
ef:3a:aa:67:81:50:77:c0:e5:fe:ef:6d:4a:f4:fd:
f0:76:5c:df:54:a8:20:ed:dd:eb:6b:52:52:84:62:
49:d1:49:36:ef:f0:85:e5:fd:23:1c:1b:af:4e:81:
66:72:74:10:fc:d1:94:a6:a7:aa:c2:ac:1c:8b:cf:
b3:4e:b0:4e:79:89:94:cf:f8:87:ef:10:31:c2:2b:
ca:cb:e9:4f:99:b2:4e:c1:18:cd:1e:0c:3d:53:a2:
1f:e2:96:f9:44:d8:c9:48:01:e0:cd:12:c8:6e:cc:
78:78:3a:0a:a1:08:99:fa:fa:3b:c3:86:21:ea:c8:
ca:65:06:8c:bb:b1:b6:b2:79:e4:3d:00:6d:5e:bd:
66:4f:a8:90:5a:c6:e4:4c:62:20:f7:6f:c7:a8:65:
3e:32:1c:28:45:48:89:3b:c9:50:02:21:d7:4e:cb:
b8:00:1c:55:15:2c:d4:27:8a:36:25:2c:84:58:e8:
9c:f5:99:99:b6:02:8a:73:c4:ec:9c:85:68:79:d3:
33:16:3f:34:cf:75:bb:b7:c4:49:dd:d2:5e:7b:34:
b9:f5:c2:29:b7:ed:53:be:b1:66:62:37:8e:32:0f:
f3:d8:21:7c:9a:ee:77:23:96:9d:46:e3:a0:04:e9:
39:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4F:5C:71:A7:23:D6:21:42:2C:23:38:97:E1:15:5B:D6:AF:AC:26
X509v3 Authority Key Identifier:
keyid:FF:7D:17:34:66:EF:BB:26:D2:A1:19:29:8B:B9:79:9A:09:3C:32:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:57:eb:6c:04:b3:2a:3c:a3:08:43:54:bc:a2:64:00:ca:61:
a9:00:9d:f8:1e:ef:d9:ba:52:c9:d4:f0:a9:44:d8:fa:92:6c:
2c:6f:06:42:84:13:8a:d6:f9:ad:da:37:eb:b9:1a:21:ee:f6:
be:a5:8a:d9:fb:4c:81:21:00:e9:a1:19:75:a2:58:f8:0d:38:
81:3c:66:dd:78:4a:78:25:90:c9:af:88:94:6c:30:b1:88:09:
0a:e8:f3:94:fb:74:10:1d:73:c3:42:06:c3:13:3d:50:f9:6f:
d2:34:0a:7a:64:da:ad:59:9b:fd:ef:38:0b:e6:f2:df:cb:02:
ce:e5:21:77:f4:6b:40:89:99:09:5a:50:61:e0:14:4e:b6:4d:
c1:01:b5:31:40:7b:ab:5a:57:72:37:b7:21:81:61:2f:9b:37:
c7:8f:37:51:e4:5c:24:d1:21:0d:94:fd:47:2c:58:70:91:33:
79:5d:c4:15:1c:2e:14:f3:af:18:96:97:d6:2e:f2:08:7d:cf:
6c:04:4e:6c:49:8b:0e:b0:b5:0b:b4:fc:4d:cd:d6:a0:77:de:
a6:32:48:81:5d:7d:d6:fc:12:8a:27:36:1e:9a:5c:de:97:c7:
c2:2c:10:ec:dc:f2:a1:1f:bc:6a:43:ab:cc:26:63:ed:14:f6:
32:32:8c:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTELFevPBAmuXnlXgb8KhfeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmN2QxNzM0NjZlZmJiMjZkMmExMTkyOThiYjk3OTlhMDkz
YzMyMzAwHhcNMjUwMjAyMDEwMDI3WhcNMjUwMjAzMDEwMDI3WjAzMTEwLwYDVQQD
EygzMDRmNWM3MWE3MjNkNjIxNDIyYzIzMzg5N2UxMTU1YmQ2YWZhYzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAErozQmRgViWvjuTZHvOqpngVB3
wOX+721K9P3wdlzfVKgg7d3ra1JShGJJ0Uk27/CF5f0jHBuvToFmcnQQ/NGUpqeq
wqwci8+zTrBOeYmUz/iH7xAxwivKy+lPmbJOwRjNHgw9U6If4pb5RNjJSAHgzRLI
bsx4eDoKoQiZ+vo7w4Yh6sjKZQaMu7G2snnkPQBtXr1mT6iQWsbkTGIg92/HqGU+
MhwoRUiJO8lQAiHXTsu4ABxVFSzUJ4o2JSyEWOic9ZmZtgKKc8TsnIVoedMzFj80
z3W7t8RJ3dJeezS59cIpt+1TvrFmYjeOMg/z2CF8mu53I5adRuOgBOk5NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBPXHGnI9YhQiwjOJfhFVvWr6wmMB8GA1UdIwQY
MBaAFP99FzRm77sm0qEZKYu5eZoJPDIwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzMwWE5HYnZ1eWJTb1JrcGk3bDVtZ2s4TWpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9iMTNmMDAtYWI3MS00NDM2LWI2Yjkt
YmJhZGZmOGMwNTlhLzEvXzMwWE5HYnZ1eWJTb1JrcGk3bDVtZ2s4TWpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9iMTNmMDAtYWI3MS00NDM2LWI2YjktYmJhZGZmOGMwNTlh
LzEvXzMwWE5HYnZ1eWJTb1JrcGk3bDVtZ2s4TWpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF1frbASz
KjyjCENUvKJkAMphqQCd+B7v2bpSydTwqUTY+pJsLG8GQoQTitb5rdo367kaIe72
vqWK2ftMgSEA6aEZdaJY+A04gTxm3XhKeCWQya+IlGwwsYgJCujzlPt0EB1zw0IG
wxM9UPlv0jQKemTarVmb/e84C+by38sCzuUhd/RrQImZCVpQYeAUTrZNwQG1MUB7
q1pXcje3IYFhL5s3x483UeRcJNEhDZT9RyxYcJEzeV3EFRwuFPOvGJaX1i7yCH3P
bARObEmLDrC1C7T8Tc3WoHfepjJIgV191vwSiic2Hppc3pfHwiwQ7NzyoR+8akOr
zCZj7RT2MjKM6A==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:59:24 2025 by rpki-client