Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft
File: 30gYvQqzvf87E_-goLSWmf4NZdg.mft (raw, json)
Hash identifier: JnVko3CQF1o+YDxgQ3AWFUG4kGZUlrDF83TZaWUgj/o=
Subject key identifier: 23:1C:24:D2:47:D8:39:B6:ED:2D:C6:45:17:A8:71:CC:CB:B2:11:FB
Authority key identifier: DF:48:18:BD:0A:B3:BD:FF:3B:13:FF:A0:A0:B4:96:99:FE:0D:65:D8
Certificate issuer: /CN=df4818bd0ab3bdff3b13ffa0a0b49699fe0d65d8
Certificate serial: 01958BBBAE551DFED1C815F4DFA1308666BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft
Manifest number: 1129
Signing time: Wed 12 Mar 2025 19:01:27 +0000
Manifest this update: Wed 12 Mar 2025 19:01:27 +0000
Manifest next update: Thu 13 Mar 2025 19:01:27 +0000
Files and hashes: 1: 30gYvQqzvf87E_-goLSWmf4NZdg.crl (hash: ODU+azSjey1BZFdjvRQXTeKFPX3GYesaYFEvbPl29yk=)
2: sWuySCoAeegdfWnkMuqNoxyi1Bw.roa (hash: 0K3bxqojGl6MNEviSU5eh2+DL5CKnr6TGRVYgLgGugg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:bb:ae:55:1d:fe:d1:c8:15:f4:df:a1:30:86:66:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df4818bd0ab3bdff3b13ffa0a0b49699fe0d65d8
Validity
Not Before: Mar 12 19:01:27 2025 GMT
Not After : Mar 13 19:01:27 2025 GMT
Subject: CN=231c24d247d839b6ed2dc64517a871cccbb211fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:88:21:36:a5:0d:ae:73:25:a9:05:d6:37:5e:
d1:d9:e0:00:86:43:9f:a4:60:42:9b:5b:0f:dc:64:
32:0e:78:44:b1:17:cf:f5:a8:a8:5c:00:e8:b6:6e:
88:62:dd:63:b1:b4:3c:1d:19:de:8c:2e:79:1a:cd:
72:ac:82:5c:d3:0c:ac:2e:e9:0e:48:88:e6:ef:02:
f9:3c:28:d2:de:a5:64:dd:17:a7:e7:ef:88:f0:2c:
c0:f4:00:8f:c0:8b:ef:16:e7:2c:d8:94:7a:33:30:
df:68:c5:92:b1:aa:92:65:e6:73:e3:ad:70:4e:89:
43:d9:8a:61:82:82:e6:39:11:fe:21:82:d9:33:a5:
30:ec:bf:8c:d0:6c:cd:3d:f4:9f:aa:59:31:00:b0:
cc:25:c9:2d:22:05:43:4f:ed:bd:7a:fb:e8:39:f7:
d0:fb:1e:1b:dd:1c:59:aa:79:3e:09:62:94:3f:e1:
eb:1a:49:23:d0:fe:bf:39:3e:9d:95:03:e3:f2:50:
dc:9d:d3:32:6c:aa:95:4e:22:af:02:f1:2c:a6:39:
62:63:eb:15:ea:f1:90:d8:df:7a:bf:0a:29:33:22:
1b:1d:4b:e6:87:e3:fa:99:e2:50:c8:42:88:14:2f:
65:cc:07:08:78:d5:44:b1:92:59:7c:79:5a:2e:ea:
6f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1C:24:D2:47:D8:39:B6:ED:2D:C6:45:17:A8:71:CC:CB:B2:11:FB
X509v3 Authority Key Identifier:
keyid:DF:48:18:BD:0A:B3:BD:FF:3B:13:FF:A0:A0:B4:96:99:FE:0D:65:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:fa:a2:d9:15:f5:67:b3:d5:c1:f3:2d:ee:3c:1c:8c:74:25:
15:a7:84:81:f7:6d:b0:45:2a:9e:8e:ed:47:cd:9d:58:27:35:
95:b2:85:3e:22:2b:34:13:4b:26:9c:10:76:b3:b5:5c:7f:5e:
be:1e:a0:2e:0e:10:8a:7d:af:2d:77:b0:13:05:69:40:39:fd:
af:ea:95:c5:09:be:e2:b2:91:b7:9a:3c:56:f7:b2:35:55:c8:
c8:08:15:5d:3d:86:2a:62:35:aa:42:c3:17:c8:0e:79:c0:25:
90:9e:d6:12:ba:84:62:95:d1:9b:68:c3:63:d5:c3:f2:3a:8f:
a7:ff:b6:df:eb:0f:5a:a1:98:87:c7:46:04:e8:d1:6a:7c:78:
d7:28:40:00:37:b9:22:16:3e:f1:12:96:da:35:f5:be:cd:ba:
a9:d1:4a:5d:b5:b5:0f:d4:e3:6f:13:2d:39:7e:70:a9:4c:f2:
7f:4e:b0:fd:8d:1b:19:26:02:ad:1b:c0:02:9c:b2:a5:fe:bb:
f8:05:ad:a3:e3:fd:72:cc:45:68:e2:9a:0a:22:38:e2:94:b5:
c0:f5:46:da:cc:41:95:57:78:00:1b:dc:18:b3:26:d7:3f:d5:
88:bd:ab:18:46:98:aa:f8:12:42:cb:1b:a6:9b:78:ec:e1:05:
aa:ce:d8:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLu65VHf7RyBX036Ewhma6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNDgxOGJkMGFiM2JkZmYzYjEzZmZhMGEwYjQ5Njk5ZmUw
ZDY1ZDgwHhcNMjUwMzEyMTkwMTI3WhcNMjUwMzEzMTkwMTI3WjAzMTEwLwYDVQQD
EygyMzFjMjRkMjQ3ZDgzOWI2ZWQyZGM2NDUxN2E4NzFjY2NiYjIxMWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4ghNqUNrnMlqQXWN17R2eAAhkOf
pGBCm1sP3GQyDnhEsRfP9aioXADotm6IYt1jsbQ8HRnejC55Gs1yrIJc0wysLukO
SIjm7wL5PCjS3qVk3Ren5++I8CzA9ACPwIvvFucs2JR6MzDfaMWSsaqSZeZz461w
TolD2YphgoLmORH+IYLZM6Uw7L+M0GzNPfSfqlkxALDMJcktIgVDT+29evvoOffQ
+x4b3RxZqnk+CWKUP+HrGkkj0P6/OT6dlQPj8lDcndMybKqVTiKvAvEspjliY+sV
6vGQ2N96vwopMyIbHUvmh+P6meJQyEKIFC9lzAcIeNVEsZJZfHlaLupvmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMcJNJH2Dm27S3GRReocczLshH7MB8GA1UdIwQY
MBaAFN9IGL0Ks73/OxP/oKC0lpn+DWXYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzBnWXZRcXp2Zjg3RV8tZ29MU1dtZjROWmRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8yMDhjNTktZTQ1Yy00MmM2LTllMzct
OTRjYWMxOGJiOTE2LzEvMzBnWXZRcXp2Zjg3RV8tZ29MU1dtZjROWmRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8yMDhjNTktZTQ1Yy00MmM2LTllMzctOTRjYWMxOGJiOTE2
LzEvMzBnWXZRcXp2Zjg3RV8tZ29MU1dtZjROWmRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHvqi2RX1
Z7PVwfMt7jwcjHQlFaeEgfdtsEUqno7tR82dWCc1lbKFPiIrNBNLJpwQdrO1XH9e
vh6gLg4Qin2vLXewEwVpQDn9r+qVxQm+4rKRt5o8VveyNVXIyAgVXT2GKmI1qkLD
F8gOecAlkJ7WErqEYpXRm2jDY9XD8jqPp/+23+sPWqGYh8dGBOjRanx41yhAADe5
IhY+8RKW2jX1vs26qdFKXbW1D9TjbxMtOX5wqUzyf06w/Y0bGSYCrRvAApyypf67
+AWto+P9csxFaOKaCiI44pS1wPVG2sxBlVd4ABvcGLMm1z/ViL2rGEaYqvgSQssb
ppt47OEFqs7YdA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:20 2025 by rpki-client