Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
File: 30bUnMNHZ_jQJK_yla1qky55FeA.mft (raw, json)
Hash identifier: kGR3FbFckm5KWvrY1Ygls9vXuW8aKqjDPtyyE7zBQlU=
Subject key identifier: 28:01:45:1A:53:AC:CF:9B:96:84:86:B2:EA:71:14:F0:B7:0F:82:D4
Authority key identifier: DF:46:D4:9C:C3:47:67:F8:D0:24:AF:F2:95:AD:6A:93:2E:79:15:E0
Certificate issuer: /CN=df46d49cc34767f8d024aff295ad6a932e7915e0
Certificate serial: 0197B70EAB876CC09254B23CC83B1661BD40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
Manifest number: 0893
Signing time: Sat 28 Jun 2025 15:01:21 +0000
Manifest this update: Sat 28 Jun 2025 15:01:21 +0000
Manifest next update: Sun 29 Jun 2025 15:01:21 +0000
Files and hashes: 1: 30bUnMNHZ_jQJK_yla1qky55FeA.crl (hash: tOZKTDWXLb7fPO2pbSEKeBgneAG2bHt2rE1MNQZVo5w=)
2: ZqG9ZXQwlRQgv2SuPLTOJwS07bA.roa (hash: JZgT3iIXQIZJHifSbhHNXa/qOoNcRciphxipRif7+Xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ab:87:6c:c0:92:54:b2:3c:c8:3b:16:61:bd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df46d49cc34767f8d024aff295ad6a932e7915e0
Validity
Not Before: Jun 28 15:01:21 2025 GMT
Not After : Jun 29 15:01:21 2025 GMT
Subject: CN=2801451a53accf9b968486b2ea7114f0b70f82d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ac:12:8b:d5:3e:d7:22:1e:97:28:1b:99:f7:
c3:9f:45:78:6c:a2:1c:2c:83:19:77:42:34:32:d7:
3c:5f:2a:69:b4:e8:0c:53:cf:22:57:1a:8b:95:b4:
1f:67:f6:7d:08:93:88:75:3d:dd:a0:b2:5b:77:cf:
e9:5d:db:65:b5:ca:5d:00:ac:f9:2c:3a:67:ee:88:
fd:9a:98:8f:93:b7:c1:53:8a:6f:fd:5e:46:c8:c1:
40:55:72:41:f4:36:f1:be:42:4b:c4:61:45:d3:20:
8c:00:75:5e:d6:fa:35:66:31:8e:55:71:e0:42:e7:
56:7c:cf:6f:7b:46:1c:1a:28:96:30:d2:d0:1b:27:
87:70:d7:20:ed:b3:d9:77:3f:53:96:53:d1:76:be:
ac:b6:1b:ac:6c:03:a2:71:93:a5:44:44:ff:c1:90:
5e:46:22:bb:88:d2:c8:90:25:8b:88:5d:19:cc:fe:
73:3a:9f:48:61:9a:a5:04:0d:13:14:9b:ed:f2:79:
2c:d0:e4:70:61:62:69:9d:dd:c1:fd:d6:f2:19:f0:
82:e5:39:08:48:2b:d1:29:32:11:2f:d6:15:f1:fc:
3b:41:6e:6f:7d:d4:3f:b0:44:c0:10:a7:62:04:dd:
88:a2:12:fd:04:76:58:d2:93:69:09:59:1c:65:86:
f6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:01:45:1A:53:AC:CF:9B:96:84:86:B2:EA:71:14:F0:B7:0F:82:D4
X509v3 Authority Key Identifier:
keyid:DF:46:D4:9C:C3:47:67:F8:D0:24:AF:F2:95:AD:6A:93:2E:79:15:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a3:3f:b3:50:b1:e6:f4:33:7f:15:6b:8e:b8:42:41:bd:15:
92:fd:40:fe:53:cc:1d:9c:78:f2:25:7b:f0:1b:b8:1b:77:4e:
c9:2f:67:0f:62:5f:b3:62:8a:cf:a3:c5:40:e4:ac:23:4e:ed:
15:b7:62:38:ca:e0:95:16:71:fe:1f:c1:ef:e1:8f:7f:23:83:
08:4c:ea:69:73:33:f9:32:a2:4b:9e:a5:e9:05:f6:29:8c:0e:
72:1a:57:67:9b:8d:e8:e8:9e:55:72:80:2c:49:4e:2a:ca:f3:
e7:e4:12:5c:44:01:dd:d9:5a:33:6f:d4:43:cd:0d:24:b8:33:
f8:be:99:32:dd:29:4f:c1:e3:c2:cc:45:c0:6b:8e:6b:8e:c5:
9f:fc:f5:da:d4:d9:ca:e8:75:a4:e3:a2:a5:b8:b4:88:1a:db:
40:f7:dc:7d:0f:ae:c0:2d:83:1e:ea:f3:2a:80:fe:81:cb:ce:
23:87:89:0a:12:1b:33:ba:ec:e5:19:a4:26:a9:3f:e1:91:4e:
03:7a:87:9a:da:c7:74:2f:de:5c:16:37:65:15:58:d7:cf:99:
2b:b9:3d:61:f7:4e:10:25:09:a0:97:83:b0:0b:c6:64:fe:ea:
b8:42:a5:72:55:34:e2:b7:10:e4:35:22:53:95:09:2c:49:9e:
41:89:09:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:32:52 2025 by rpki-client