Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
File: 30bUnMNHZ_jQJK_yla1qky55FeA.mft (raw, json)
Hash identifier: bfNFtVVhrcVy3RmqQkmCKQ4aPc0aiUMPT/9gyrG6zg4=
Subject key identifier: BD:E7:42:1A:A5:1E:94:AB:0D:D2:96:17:AA:BD:8D:2F:6F:98:29:81
Authority key identifier: DF:46:D4:9C:C3:47:67:F8:D0:24:AF:F2:95:AD:6A:93:2E:79:15:E0
Certificate issuer: /CN=df46d49cc34767f8d024aff295ad6a932e7915e0
Certificate serial: 01964FDAED349597C6A6FB244AEEC60FF205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
Manifest number: 07D9
Signing time: Sat 19 Apr 2025 21:01:09 +0000
Manifest this update: Sat 19 Apr 2025 21:01:09 +0000
Manifest next update: Sun 20 Apr 2025 21:01:09 +0000
Files and hashes: 1: 30bUnMNHZ_jQJK_yla1qky55FeA.crl (hash: yfTGQbqqR0xgGZfJnKTgV0BcEnByGeBCl9/onubu6nU=)
2: ZqG9ZXQwlRQgv2SuPLTOJwS07bA.roa (hash: JZgT3iIXQIZJHifSbhHNXa/qOoNcRciphxipRif7+Xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:ed:34:95:97:c6:a6:fb:24:4a:ee:c6:0f:f2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df46d49cc34767f8d024aff295ad6a932e7915e0
Validity
Not Before: Apr 19 21:01:09 2025 GMT
Not After : Apr 20 21:01:09 2025 GMT
Subject: CN=bde7421aa51e94ab0dd29617aabd8d2f6f982981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:98:34:4d:41:9f:b7:7b:89:80:c4:3b:d3:03:
ce:06:4d:fe:f5:bf:da:92:66:55:4c:9e:9c:7b:e0:
fc:44:6f:4d:4f:cf:a5:4a:a4:7b:34:97:9c:1c:80:
01:aa:00:11:1e:81:31:38:4c:32:6a:75:61:d8:45:
0c:53:66:d7:24:3f:19:61:43:98:76:47:0a:27:1c:
b0:38:d1:c4:13:9e:d3:10:d6:45:91:d6:fc:bb:ef:
5e:44:52:0f:e3:fe:f3:d8:4d:ee:6a:83:68:b9:1a:
b6:0b:96:23:1b:7f:99:af:52:a8:a7:9e:6d:84:15:
fa:d4:e4:ae:e1:f7:ef:62:ea:4b:bd:d1:55:15:fa:
06:47:e9:1b:29:73:be:26:73:00:12:ec:fa:a8:45:
95:9f:f0:53:b7:c3:ed:9d:30:b1:fb:01:8e:79:45:
9c:b9:1c:59:40:97:57:9b:c7:60:f2:f3:71:5f:4f:
5b:3d:31:d6:da:88:3f:0b:02:4b:2e:db:11:e7:51:
22:c4:42:0d:ce:78:da:59:28:44:f2:a7:16:53:a4:
08:12:78:45:96:1a:7c:c6:53:08:8e:08:1e:e2:07:
12:c1:5d:2f:2f:1f:0b:47:88:ca:32:c5:39:92:48:
8b:a6:80:c6:0b:74:9a:94:bd:ec:29:d6:fe:28:e9:
d5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E7:42:1A:A5:1E:94:AB:0D:D2:96:17:AA:BD:8D:2F:6F:98:29:81
X509v3 Authority Key Identifier:
keyid:DF:46:D4:9C:C3:47:67:F8:D0:24:AF:F2:95:AD:6A:93:2E:79:15:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b7:76:ee:21:58:1a:06:e4:be:08:58:3a:d6:55:04:d8:32:
bf:a1:d4:a4:13:ef:0d:09:c3:03:b8:64:6d:18:18:99:c9:d2:
32:86:ac:17:eb:b6:d4:32:97:31:58:3b:62:f4:7b:3c:c4:93:
ab:e7:89:a9:58:14:1e:24:0f:3b:a5:d5:30:5f:a8:c8:f2:e0:
ec:26:2a:5e:09:ff:0c:ee:d4:ee:72:b9:ff:65:0e:61:c1:6a:
5b:d8:45:da:52:df:e8:a0:9f:fa:11:01:ee:b7:1f:b0:a0:de:
68:98:b1:aa:85:16:a0:08:54:d0:79:6d:cc:fc:94:dc:49:4b:
70:2c:26:3d:91:c1:bd:48:40:8e:b3:02:31:c6:ff:76:92:19:
e9:04:c4:93:f7:cc:22:fe:b8:37:3b:0f:51:13:c8:d0:a2:8f:
96:09:1b:0c:1c:04:dd:01:77:4b:55:f5:56:20:a0:96:18:25:
e7:3b:b8:6d:cd:55:bb:86:e1:1b:09:ec:71:3f:0b:e9:91:6b:
6e:e2:54:cf:c4:a1:25:fc:88:1f:a4:c1:4d:ec:2e:08:21:a7:
35:af:02:1e:4b:89:86:d6:47:13:20:07:7f:d0:f3:eb:c0:86:
77:dd:c8:c7:e7:45:d5:7d:9b:79:78:76:fb:6d:6d:1e:c2:34:
7d:33:90:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:24:46 2025 by rpki-client