Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
File: 30KpUq9vhPKfHRse6XQbBXKGh4Q.mft (raw, json)
Hash identifier: 6RkBOGnBde5HJuCZP1kjfc6b3MzxS5sLH4RdjbYvnro=
Subject key identifier: 37:4D:7B:95:6D:27:DD:D9:DD:F7:1A:3E:BE:7C:14:DA:76:5D:5A:0E
Authority key identifier: DF:42:A9:52:AF:6F:84:F2:9F:1D:1B:1E:E9:74:1B:05:72:86:87:84
Certificate issuer: /CN=df42a952af6f84f29f1d1b1ee9741b0572868784
Certificate serial: 01964A46B9ACD3D0136EB2175C839B74E100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
Manifest number: 1087
Signing time: Fri 18 Apr 2025 19:01:11 +0000
Manifest this update: Fri 18 Apr 2025 19:01:11 +0000
Manifest next update: Sat 19 Apr 2025 19:01:11 +0000
Files and hashes: 1: 30KpUq9vhPKfHRse6XQbBXKGh4Q.crl (hash: uV/3/T6Qz74tg6gYi3Hdr/8gQhuVpa7dqxiAEZAl8ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:46:b9:ac:d3:d0:13:6e:b2:17:5c:83:9b:74:e1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df42a952af6f84f29f1d1b1ee9741b0572868784
Validity
Not Before: Apr 18 19:01:11 2025 GMT
Not After : Apr 19 19:01:11 2025 GMT
Subject: CN=374d7b956d27ddd9ddf71a3ebe7c14da765d5a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:54:70:c6:2a:ea:6c:66:d3:e5:f6:3f:54:5d:
77:f9:9d:64:6b:b1:20:83:24:1b:dd:4a:1d:61:64:
42:56:7d:9c:44:b4:3d:d1:33:09:a7:31:f4:89:36:
b9:d5:31:7e:b0:d9:07:1a:30:a1:33:32:16:e7:93:
5a:fd:47:85:8f:16:67:70:e7:b3:b1:e7:30:b0:ff:
b0:87:69:c0:a7:99:0e:08:21:04:34:65:bc:d6:74:
7d:96:42:42:a4:e9:e2:4f:95:55:f7:92:ae:63:d5:
18:a9:a3:27:d8:cb:94:80:68:34:a7:60:64:93:e0:
3c:fc:02:48:fb:81:e6:52:7a:d7:08:d1:1d:70:a2:
0d:76:c6:d5:0e:1c:1c:90:ee:b4:0a:e5:1f:97:28:
b5:9a:e7:75:42:0d:3d:97:ea:34:19:08:fa:5a:ee:
b2:b9:be:db:dc:48:c3:b7:ee:25:d1:d5:fc:dc:7a:
c8:fc:ae:6b:83:54:91:e0:3e:57:3a:30:ce:bd:32:
38:b2:b2:5e:ed:ed:1a:57:96:33:37:fb:78:53:ef:
e6:5c:98:e3:9d:4d:fc:03:ab:61:f2:53:35:b0:76:
64:f9:99:60:e8:74:02:b4:38:cf:a8:df:fa:e3:34:
92:02:03:2e:f8:e9:aa:a6:3f:93:14:c0:58:a1:8c:
fa:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4D:7B:95:6D:27:DD:D9:DD:F7:1A:3E:BE:7C:14:DA:76:5D:5A:0E
X509v3 Authority Key Identifier:
keyid:DF:42:A9:52:AF:6F:84:F2:9F:1D:1B:1E:E9:74:1B:05:72:86:87:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:9c:51:50:80:fc:39:2d:8b:9a:d7:27:5e:f5:ab:29:d8:d2:
30:31:4a:90:7f:2a:c0:7e:63:e1:a5:bb:c5:67:b0:b9:31:38:
6a:9e:6f:c8:b0:9f:07:c8:59:57:47:3e:61:61:81:ea:2a:7c:
48:a1:47:8f:55:f7:fd:af:0e:3f:9d:b3:95:61:c8:61:0e:4d:
be:b1:98:ef:90:5d:04:d8:c1:ee:68:6f:87:34:91:7e:27:a1:
54:d3:7d:d1:a0:f8:6d:de:d1:ca:26:69:d4:f6:9b:65:e2:1b:
1a:04:0a:3f:f8:e5:fe:5f:49:a8:0e:f6:f9:6c:92:bc:a9:d2:
ef:12:0b:5d:aa:0a:16:9e:41:89:3e:a2:ce:b7:2f:a0:0e:31:
6b:c2:53:e2:23:3b:dc:21:5e:c1:a4:6d:f2:16:b0:32:9f:0e:
7d:94:3a:87:d2:6d:99:d5:d9:fc:73:2c:19:60:31:0d:39:34:
32:09:ee:ab:d5:fa:62:19:73:38:ab:f8:4b:b7:ca:1a:49:ed:
53:41:f0:39:33:3b:3e:d8:8f:60:13:3b:db:58:65:a5:10:7e:
e3:ed:f2:aa:00:a3:63:83:34:94:0c:2b:44:4b:52:65:de:0a:
06:36:d7:e5:58:b1:1e:5c:03:0c:44:43:33:74:44:2c:13:e1:
6c:a7:08:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:51:46 2025 by rpki-client