Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
File: 30KpUq9vhPKfHRse6XQbBXKGh4Q.mft (raw, json)
Hash identifier: FBvGg6pOMunYwjKLoXR1HtXHnorUoLpAR74XKAKd7PU=
Subject key identifier: D6:B1:10:54:6B:46:EB:E6:40:71:C1:9E:6A:00:DD:EA:6B:98:9B:4A
Authority key identifier: DF:42:A9:52:AF:6F:84:F2:9F:1D:1B:1E:E9:74:1B:05:72:86:87:84
Certificate issuer: /CN=df42a952af6f84f29f1d1b1ee9741b0572868784
Certificate serial: 01974D0E2BC62BFC73BC33A5FAC67804659C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
Manifest number: 110D
Signing time: Sun 08 Jun 2025 01:01:03 +0000
Manifest this update: Sun 08 Jun 2025 01:01:03 +0000
Manifest next update: Mon 09 Jun 2025 01:01:03 +0000
Files and hashes: 1: 30KpUq9vhPKfHRse6XQbBXKGh4Q.crl (hash: CVUtsdBP8dtv7OrBT7syPDLu4yUEZXNCGFGJkG4B0go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0e:2b:c6:2b:fc:73:bc:33:a5:fa:c6:78:04:65:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df42a952af6f84f29f1d1b1ee9741b0572868784
Validity
Not Before: Jun 8 01:01:03 2025 GMT
Not After : Jun 9 01:01:03 2025 GMT
Subject: CN=d6b110546b46ebe64071c19e6a00ddea6b989b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cd:42:4c:05:f5:0f:0b:0e:91:aa:ce:78:94:
b2:e5:15:39:a2:f7:4f:88:37:7c:16:c6:a8:3c:b5:
54:ed:38:5f:63:86:8d:14:53:65:de:5e:dd:9f:4b:
fc:83:80:e1:f3:f8:92:70:68:96:a7:9f:24:c6:5d:
5d:d7:1b:0b:5b:ef:04:a2:16:0b:57:62:f6:e0:86:
7a:3f:df:49:fc:a3:17:b2:66:f0:0c:f0:c4:b0:01:
87:50:94:42:d2:9c:9d:83:87:9d:a9:d2:83:f8:d1:
f8:56:cf:28:54:75:fc:33:1a:8e:22:d0:67:5a:05:
a1:06:37:de:15:62:ab:0a:b0:57:ce:f9:14:00:3a:
f1:2d:03:af:24:e0:c8:c9:c2:56:86:db:c6:3a:84:
6c:6c:f3:69:4f:b4:8d:2a:f3:f6:fd:07:a5:06:e1:
b2:35:7f:62:25:ea:95:ba:5d:ef:f5:6f:5e:a1:90:
fb:82:91:8c:bc:a2:00:76:4d:e3:19:94:63:01:70:
26:2d:10:44:5c:1d:f8:94:3a:e9:a8:52:f4:e1:c0:
f9:0d:55:60:ac:e8:d9:b5:d6:96:80:bd:be:b3:7b:
1c:6c:b8:fa:3e:25:fd:c6:3d:95:28:fe:f2:b5:21:
e6:9f:e5:af:44:09:f4:de:c0:c2:e1:62:b9:ce:59:
7e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B1:10:54:6B:46:EB:E6:40:71:C1:9E:6A:00:DD:EA:6B:98:9B:4A
X509v3 Authority Key Identifier:
keyid:DF:42:A9:52:AF:6F:84:F2:9F:1D:1B:1E:E9:74:1B:05:72:86:87:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a4:8a:85:c9:f4:37:10:6c:85:ba:55:c2:35:91:44:2d:72:
c2:3b:36:0a:98:b7:57:10:d6:31:d5:40:28:ce:ff:11:c6:50:
35:7d:70:e2:c7:10:f5:5d:ba:b7:68:a7:e0:05:81:6f:c3:7e:
50:dc:9d:9a:2b:b7:9e:7b:79:19:7f:dd:18:5f:7c:5a:02:bb:
28:2e:c8:21:c8:87:37:52:4e:71:6c:12:49:05:e8:c0:74:50:
13:17:09:38:95:c3:91:58:83:a3:d7:79:b8:e1:eb:7c:4f:6d:
ad:ed:86:03:8e:2e:b0:6f:55:fc:53:b9:ff:a2:73:be:3e:67:
65:35:bd:ef:7c:ed:f2:88:72:95:ef:23:fc:7d:c1:31:cb:77:
fe:9f:24:8a:3f:b5:76:c4:59:f6:f4:71:df:0c:3b:ec:bb:0f:
58:09:fb:5c:05:a5:68:3a:5d:bd:b1:b1:1c:1f:65:7f:8b:b1:
7c:ac:6c:87:e3:b3:74:3a:15:f6:a6:ea:86:d5:59:4c:0c:42:
fd:e7:b0:b6:8b:ad:a2:ef:4b:e3:41:3e:2b:20:83:43:a1:43:
54:80:71:96:df:59:5d:a7:02:8a:f6:66:44:9c:f7:4f:7e:1a:
bd:ed:bd:66:4c:c4:bf:32:e1:f5:d8:65:6b:81:35:53:e7:44:
8e:45:56:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:51:48 2025 by rpki-client