Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
File: _30XNGbvuybSoRkpi7l5mgk8MjA.mft (raw, json)
Hash identifier: rGAhyEPD7rHHZe8Zh4PKrqZb+dvieETrYf/cNkdp3Ic=
Subject key identifier: FF:77:59:B6:A2:06:F0:9D:A8:58:D1:D9:21:D1:40:87:38:46:B6:37
Authority key identifier: FF:7D:17:34:66:EF:BB:26:D2:A1:19:29:8B:B9:79:9A:09:3C:32:30
Certificate issuer: /CN=ff7d173466efbb26d2a119298bb9799a093c3230
Certificate serial: 0196C013D2936BE63EA176A944A60056360C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
Manifest number: 11AF
Signing time: Sun 11 May 2025 16:00:46 +0000
Manifest this update: Sun 11 May 2025 16:00:46 +0000
Manifest next update: Mon 12 May 2025 16:00:46 +0000
Files and hashes: 1: _30XNGbvuybSoRkpi7l5mgk8MjA.crl (hash: HBI2ve5JDA8TD8xoEnCBmnKAGCvLiEx475spetH78f4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:13:d2:93:6b:e6:3e:a1:76:a9:44:a6:00:56:36:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7d173466efbb26d2a119298bb9799a093c3230
Validity
Not Before: May 11 16:00:46 2025 GMT
Not After : May 12 16:00:46 2025 GMT
Subject: CN=ff7759b6a206f09da858d1d921d140873846b637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4d:e5:da:ab:c3:0b:67:41:80:7c:d0:71:6d:
04:17:0c:8b:90:24:d0:8a:d2:ef:6f:52:cc:c2:d3:
c0:cf:d4:84:1b:b8:48:dc:e0:31:16:92:73:57:a7:
ba:28:cb:32:2b:0f:7a:a4:a3:44:7a:f3:7f:7a:fa:
c2:87:9f:2d:d8:b7:57:b8:48:fd:71:41:72:51:70:
1d:89:6f:7f:63:da:25:d3:e5:fe:4c:6d:55:db:ce:
30:21:c0:cb:f0:2f:87:93:18:5c:72:ca:e0:2e:a8:
0a:2d:23:5c:2c:22:74:d5:b0:02:b7:a3:fb:39:0a:
fb:9f:03:16:cb:66:d6:69:69:3e:cd:22:a2:98:aa:
46:54:50:39:d4:cb:e1:af:01:5d:b1:dd:23:63:77:
74:39:07:95:f6:2f:08:01:ac:af:f0:79:01:c1:d3:
48:3a:f8:4d:2b:c0:e1:8b:76:98:78:8e:ec:95:e1:
db:64:81:6c:c0:68:6c:04:da:36:f4:73:a5:be:5d:
6b:47:a7:5b:0e:87:1e:0c:7f:7e:08:12:91:73:e0:
02:dc:72:fa:04:af:c3:89:10:88:aa:47:d9:2d:1f:
4f:22:d3:42:48:21:ee:0b:cc:1b:20:6e:86:cf:88:
dc:cf:ae:a6:6f:f8:94:75:10:5f:1b:1c:06:03:b2:
94:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:77:59:B6:A2:06:F0:9D:A8:58:D1:D9:21:D1:40:87:38:46:B6:37
X509v3 Authority Key Identifier:
keyid:FF:7D:17:34:66:EF:BB:26:D2:A1:19:29:8B:B9:79:9A:09:3C:32:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:63:21:7b:c3:52:45:e7:b1:7a:56:7a:3b:db:5b:ed:22:66:
48:71:9a:82:3b:af:76:2a:e1:87:a8:9c:49:32:62:f2:85:b2:
c2:ce:17:60:88:c1:27:88:af:42:16:33:66:16:30:55:90:58:
59:f6:aa:5f:40:76:8f:3c:71:e1:65:bd:07:78:37:51:66:4e:
31:bf:ea:f7:dc:0b:d6:78:14:4b:6c:8b:f5:40:b6:82:b6:f3:
dd:fb:49:ff:7f:47:ba:f3:ad:d2:65:bc:db:9b:49:0f:00:2b:
66:67:c5:12:17:34:bd:83:c9:ac:b6:e7:be:1d:fb:a8:7e:de:
dc:91:0a:01:f1:0e:23:a5:39:fe:37:a0:57:9f:28:3d:e0:0b:
50:ad:1d:68:cf:17:1d:e7:78:cb:c1:f1:ad:b0:68:df:91:77:
14:d7:f4:ac:4d:71:ed:34:19:cd:5a:ee:0f:28:97:f9:57:9c:
aa:c9:7b:48:bb:b1:4e:dd:d6:cc:96:6e:84:24:59:d8:b4:cb:
94:b8:c1:07:a0:9e:47:a8:fd:eb:d5:d2:c6:63:c6:fe:ec:ce:
e2:23:f1:85:b7:47:8d:30:f5:3f:0b:a7:e0:d2:49:9c:1b:b0:
a3:0a:b8:4b:4f:9b:e1:10:4b:7d:41:c9:2e:66:34:14:c5:be:
10:c0:d9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:11:26 2025 by rpki-client