Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
File: _30XNGbvuybSoRkpi7l5mgk8MjA.mft (raw, json)
Hash identifier: Y1XgI38ayE5P/e1JKzOO7rr7WO4l8Q+BY6nzaSGFYWw=
Subject key identifier: 95:98:E6:A5:90:E4:CA:75:52:AC:A6:83:E5:65:3E:67:6E:F0:41:C7
Authority key identifier: FF:7D:17:34:66:EF:BB:26:D2:A1:19:29:8B:B9:79:9A:09:3C:32:30
Certificate issuer: /CN=ff7d173466efbb26d2a119298bb9799a093c3230
Certificate serial: 0199FC58D0BFDEEBE4DDF6544882CA72C558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
Manifest number: 135C
Signing time: Sun 19 Oct 2025 12:01:42 +0000
Manifest this update: Sun 19 Oct 2025 12:01:42 +0000
Manifest next update: Mon 20 Oct 2025 12:01:42 +0000
Files and hashes: 1: _30XNGbvuybSoRkpi7l5mgk8MjA.crl (hash: 4i3KpWTj8Uom4Pq5vw9yHi1wWDtJmTQSrig1IdwtQNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:d0:bf:de:eb:e4:dd:f6:54:48:82:ca:72:c5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7d173466efbb26d2a119298bb9799a093c3230
Validity
Not Before: Oct 19 12:01:42 2025 GMT
Not After : Oct 20 12:01:42 2025 GMT
Subject: CN=9598e6a590e4ca7552aca683e5653e676ef041c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e8:74:be:53:21:8e:da:3f:07:51:28:ac:88:
d1:e0:a2:ff:6a:e3:bf:b4:ec:84:0d:48:b2:50:ef:
e8:a6:67:5b:70:43:39:25:4d:ee:f8:e6:d2:33:17:
5b:11:c9:77:be:2e:35:9c:81:6e:4b:e2:2b:9d:c2:
93:dd:11:f0:99:9c:ac:80:68:c9:4a:fb:da:9b:fa:
d5:cd:ad:43:71:cf:43:38:46:3d:e6:04:df:1e:7f:
3b:78:c8:fc:a2:a3:a2:53:8e:30:0d:28:ea:89:e1:
0c:dc:3c:e5:ca:38:91:e4:9c:08:f1:ca:c1:38:6b:
ef:e8:da:4c:bb:35:47:b5:5e:c0:4f:fd:bc:19:32:
40:81:2c:bf:9e:5f:d5:e3:39:f6:79:fb:30:a2:1b:
aa:e1:9a:78:08:53:2a:af:bf:24:b3:6f:a7:65:df:
0c:47:0c:ba:20:99:12:05:4f:b9:93:7e:1b:f7:cd:
2b:6d:fc:4c:e8:39:2d:49:5f:9a:a2:74:4f:5a:42:
9b:c9:86:24:22:51:ad:4e:a4:e2:70:bf:ca:94:51:
4e:a0:ac:03:91:90:9a:6b:1e:b5:cf:a2:0a:63:c7:
8a:cc:0d:a9:07:5f:22:d9:bf:d2:64:0e:9e:f3:0b:
c5:e6:71:2e:f8:4d:db:41:c0:4e:e3:03:56:c9:19:
92:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:98:E6:A5:90:E4:CA:75:52:AC:A6:83:E5:65:3E:67:6E:F0:41:C7
X509v3 Authority Key Identifier:
keyid:FF:7D:17:34:66:EF:BB:26:D2:A1:19:29:8B:B9:79:9A:09:3C:32:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:6b:56:5d:9d:24:74:97:3d:95:40:81:5a:21:a8:dc:36:cc:
5c:92:fe:ff:27:79:48:29:8c:1b:00:24:1e:ec:d4:25:87:9e:
8f:7d:9f:4b:54:29:76:bd:fb:48:84:dd:07:bf:0d:3c:e6:63:
70:b8:a4:19:05:0a:6a:11:a6:c8:b3:ee:26:76:a7:37:36:8f:
93:19:32:1f:ce:5c:59:70:b3:05:6e:e8:52:d9:ca:f5:3d:6d:
2e:e6:ce:fd:e7:30:77:0b:51:be:ed:40:b6:01:08:39:0e:2f:
a6:e2:23:e8:aa:35:62:4f:a9:49:e9:ae:33:f3:f8:a5:f7:51:
0f:c3:c7:a0:4e:62:4a:23:50:d2:7c:a5:2a:dd:51:b1:53:b3:
7e:c4:aa:e3:4b:15:eb:0b:bd:6d:ec:67:3a:07:d3:1e:8d:89:
77:12:fe:eb:d0:38:61:10:44:3a:15:e2:e2:66:d8:53:bb:41:
5e:e7:95:ee:df:11:38:3d:80:99:6a:86:2e:8b:de:84:2e:d0:
cc:9a:5f:25:d5:00:71:e8:83:5a:0d:ff:2b:42:f5:6b:a1:f7:
a6:33:bf:d1:23:2a:1e:8a:48:70:93:5f:d9:23:e1:d5:b7:f1:
a0:5a:b5:52:16:62:e0:5a:b3:fd:f2:e2:c4:9b:4e:21:93:69:
21:85:20:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:15 2025 by rpki-client