Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft
File: 30gYvQqzvf87E_-goLSWmf4NZdg.mft (raw, json)
Hash identifier: kV3O+LJE8plDs52v97kx5aiOUJHvGlWu/KwRPFfGjcQ=
Subject key identifier: A0:38:58:E4:4E:37:B0:4A:EB:39:92:DB:E5:91:2B:54:43:D9:63:43
Authority key identifier: DF:48:18:BD:0A:B3:BD:FF:3B:13:FF:A0:A0:B4:96:99:FE:0D:65:D8
Certificate issuer: /CN=df4818bd0ab3bdff3b13ffa0a0b49699fe0d65d8
Certificate serial: 01974DB2C25096AA92F7E4F413C191F56394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft
Manifest number: 1212
Signing time: Sun 08 Jun 2025 04:00:50 +0000
Manifest this update: Sun 08 Jun 2025 04:00:50 +0000
Manifest next update: Mon 09 Jun 2025 04:00:50 +0000
Files and hashes: 1: 30gYvQqzvf87E_-goLSWmf4NZdg.crl (hash: ChCFhEslqVPIrWS/SG2mdPP42OGA0JN9NtOajvK000g=)
2: sWuySCoAeegdfWnkMuqNoxyi1Bw.roa (hash: 0K3bxqojGl6MNEviSU5eh2+DL5CKnr6TGRVYgLgGugg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:c2:50:96:aa:92:f7:e4:f4:13:c1:91:f5:63:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df4818bd0ab3bdff3b13ffa0a0b49699fe0d65d8
Validity
Not Before: Jun 8 04:00:50 2025 GMT
Not After : Jun 9 04:00:50 2025 GMT
Subject: CN=a03858e44e37b04aeb3992dbe5912b5443d96343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fd:b4:4e:c9:9d:a2:44:46:f2:99:e8:3a:ce:
35:d5:05:8e:36:22:09:ea:84:65:23:13:44:80:00:
d0:2b:7b:23:18:fe:5b:c1:c7:7e:72:dd:fc:bc:10:
42:f2:fd:93:52:33:62:72:cf:da:18:09:0e:a2:66:
f0:4f:44:d0:de:d1:89:20:e1:45:6d:a4:57:8e:31:
a1:60:f2:bb:94:36:b0:e9:ef:86:59:c0:83:89:1d:
77:c9:6f:3a:e1:f6:c6:e6:be:4d:66:77:c3:ec:62:
77:fc:c7:d3:c8:4b:c2:4e:43:2e:70:31:15:67:a6:
c9:88:1e:1d:61:fa:75:48:5f:91:34:c3:0f:31:4a:
76:9b:b2:a3:4c:bb:ff:e9:ad:4e:2f:50:ef:24:30:
fb:1c:f9:14:77:be:b9:35:7c:4a:8f:0c:52:c7:61:
f7:f5:5c:b4:a9:49:3c:55:50:6b:fc:8c:ab:bc:67:
7a:40:d2:fd:ff:ae:06:4f:9e:fa:6a:53:5c:c8:75:
2d:91:e3:dd:12:81:b2:a6:be:1f:13:ea:eb:68:53:
5b:c9:cb:4c:ca:e1:76:66:02:34:9c:bc:37:22:53:
47:3f:c8:73:a9:e0:88:4f:a2:57:76:c1:82:df:cf:
99:99:ed:82:f8:db:3f:f9:36:f1:25:3f:51:63:30:
c7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:38:58:E4:4E:37:B0:4A:EB:39:92:DB:E5:91:2B:54:43:D9:63:43
X509v3 Authority Key Identifier:
keyid:DF:48:18:BD:0A:B3:BD:FF:3B:13:FF:A0:A0:B4:96:99:FE:0D:65:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d5:91:db:b9:54:9d:bb:24:d9:3c:2b:49:65:5f:60:79:35:
32:da:11:89:51:f5:c2:7f:04:b3:1d:50:b4:be:56:27:fa:e6:
5d:6f:17:39:24:2c:f1:14:b1:d9:93:d7:e6:73:e5:c3:1e:3c:
70:d1:b9:2c:ec:ec:72:3b:d7:22:74:c8:d8:47:36:f9:6b:e1:
9c:4e:a6:15:75:88:e3:68:55:18:ed:84:d2:07:c7:ec:bd:58:
1d:45:46:8a:c4:71:12:b8:2d:77:5c:fe:c2:75:97:03:6e:c0:
30:6b:51:d1:46:34:ee:aa:5a:2f:5d:85:4c:27:0b:6c:ef:db:
da:a3:7b:e5:f1:2f:2d:4c:ae:b1:40:58:11:6f:7a:98:f7:f9:
44:c4:a1:d1:fd:17:0b:50:3d:c5:b5:02:2d:09:23:6d:84:9c:
04:2b:88:15:42:29:d3:b8:d3:8c:74:cd:17:77:d2:e8:24:30:
55:1e:24:37:32:a8:04:c4:e4:0e:8f:25:cb:eb:68:cc:44:79:
ba:bf:a3:6c:5d:1c:ee:e0:a5:bc:19:f6:8b:a0:73:fc:b0:e8:
21:f3:01:a0:d0:2d:09:34:f7:23:7e:b3:94:79:0c:c3:71:a0:
af:be:15:1b:00:34:ad:a2:01:23:a2:e7:40:b0:95:f7:be:56:
a5:9a:8a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:33:18 2025 by rpki-client