Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
File: _30XNGbvuybSoRkpi7l5mgk8MjA.mft (raw, json)
Hash identifier: 4RUIBgwvgw+BcNhcyUY6fSKd1uFSMDOu0tJQSOah1eE=
Subject key identifier: 8C:1F:43:A8:FF:78:21:55:12:BF:4F:88:DB:7C:28:C6:A2:14:48:D0
Authority key identifier: FF:7D:17:34:66:EF:BB:26:D2:A1:19:29:8B:B9:79:9A:09:3C:32:30
Certificate issuer: /CN=ff7d173466efbb26d2a119298bb9799a093c3230
Certificate serial: 0197B7452DEDEC08059FE53508B06AC808AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
Manifest number: 122F
Signing time: Sat 28 Jun 2025 16:00:53 +0000
Manifest this update: Sat 28 Jun 2025 16:00:53 +0000
Manifest next update: Sun 29 Jun 2025 16:00:53 +0000
Files and hashes: 1: _30XNGbvuybSoRkpi7l5mgk8MjA.crl (hash: ZHfesnHl/na935+cw567ceTm0fsMJG8Ifn8V1KFfOgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:2d:ed:ec:08:05:9f:e5:35:08:b0:6a:c8:08:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7d173466efbb26d2a119298bb9799a093c3230
Validity
Not Before: Jun 28 16:00:53 2025 GMT
Not After : Jun 29 16:00:53 2025 GMT
Subject: CN=8c1f43a8ff78215512bf4f88db7c28c6a21448d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:01:85:03:03:7e:46:5c:70:63:dc:78:3b:04:
db:bf:d0:08:fe:de:94:d8:d4:a8:0c:14:69:a4:b4:
3a:fb:53:7c:13:83:b7:05:4b:50:e7:6b:c2:54:74:
15:58:a2:3b:4a:43:39:05:5e:e5:6d:5e:01:ad:5b:
7f:90:d0:a8:2c:1d:fb:ff:0c:cf:67:7d:5d:d2:8c:
5f:32:d6:7d:c6:8c:d1:c3:a3:9e:b7:3a:b4:09:34:
23:d8:5e:22:62:d9:a7:86:b1:df:b2:13:96:6c:78:
98:e5:8f:ce:a7:72:60:23:c9:64:9d:4e:50:cf:c5:
a3:e5:75:34:49:fa:97:5c:5e:d8:e5:7c:ed:41:ab:
c1:f4:df:08:90:a2:12:e3:02:1b:f1:cf:44:ba:19:
91:46:7e:68:d2:92:39:23:12:89:42:e6:6f:3c:f1:
88:36:f2:a0:e5:d3:e0:07:82:5c:e4:77:7d:27:f6:
04:54:c4:17:3c:a9:d4:7f:85:8f:76:7c:82:32:11:
7f:b8:53:a0:e1:d3:c9:3a:dd:8c:c2:9d:bb:a7:fb:
10:ca:dc:eb:a3:8e:7b:66:a1:2a:e3:b5:a6:de:01:
b8:1c:3a:a9:eb:cc:2e:4d:b3:81:81:24:a1:d0:d3:
26:1d:78:6a:75:c0:b7:61:bd:82:30:89:e8:d5:3e:
7a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:1F:43:A8:FF:78:21:55:12:BF:4F:88:DB:7C:28:C6:A2:14:48:D0
X509v3 Authority Key Identifier:
keyid:FF:7D:17:34:66:EF:BB:26:D2:A1:19:29:8B:B9:79:9A:09:3C:32:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:01:5d:61:22:94:13:99:3d:1a:44:5f:cb:5c:10:ec:8f:3e:
c0:e0:57:2e:f5:43:41:3a:0f:89:3f:a5:82:79:c3:5f:6c:80:
4d:a1:c2:c9:7d:28:98:6c:a4:d7:8e:df:83:f5:88:ca:58:df:
4a:18:8b:75:2b:76:c7:41:cf:e9:82:36:9e:79:fb:1f:bc:87:
35:56:be:14:06:0e:43:7a:25:bd:60:f3:26:e6:13:f6:3c:31:
da:af:48:51:2f:d2:54:df:c5:5d:86:59:7c:a2:6b:17:da:11:
cf:98:cb:51:fa:01:0e:11:8e:3d:7c:2d:85:ce:00:ed:22:fc:
c6:ac:10:33:d0:82:87:29:05:c2:81:03:96:30:09:1a:0c:1a:
89:26:d5:69:5f:11:5c:4b:ee:62:78:6c:7d:46:cc:b5:ed:79:
29:ce:e8:96:75:20:f2:f0:42:ae:3c:c3:3e:96:99:af:bd:a6:
71:a9:ee:65:14:77:ef:6a:87:27:67:99:d3:8c:17:28:c7:79:
bc:d2:7b:75:49:73:00:cb:a5:94:23:08:71:1b:31:ff:67:26:
f4:e9:5f:c0:75:8f:ad:31:23:44:0e:a9:a7:94:b5:6d:25:f8:
07:fc:f5:52:a0:57:24:12:5b:4d:46:6a:dc:36:c2:51:ec:fa:
72:26:95:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:28 2025 by rpki-client