Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
File: 30bUnMNHZ_jQJK_yla1qky55FeA.mft (raw, json)
Hash identifier: yYNiN+DUQA3HolNfstKjAX9ZMTVHpgYiUfEodzFjV7Q=
Subject key identifier: E5:11:A8:53:60:B5:00:56:EF:F3:23:5B:FC:F2:7B:E3:F3:F0:6F:68
Authority key identifier: DF:46:D4:9C:C3:47:67:F8:D0:24:AF:F2:95:AD:6A:93:2E:79:15:E0
Certificate issuer: /CN=df46d49cc34767f8d024aff295ad6a932e7915e0
Certificate serial: 0196B82357867FA0DDC43BB5DD2B55FA1676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
Manifest number: 080F
Signing time: Sat 10 May 2025 03:00:45 +0000
Manifest this update: Sat 10 May 2025 03:00:45 +0000
Manifest next update: Sun 11 May 2025 03:00:45 +0000
Files and hashes: 1: 30bUnMNHZ_jQJK_yla1qky55FeA.crl (hash: UMEpLQJAwvc/H4Cm9481I0+BS9yD8YkZx2HTMPuSF/8=)
2: ZqG9ZXQwlRQgv2SuPLTOJwS07bA.roa (hash: JZgT3iIXQIZJHifSbhHNXa/qOoNcRciphxipRif7+Xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:57:86:7f:a0:dd:c4:3b:b5:dd:2b:55:fa:16:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df46d49cc34767f8d024aff295ad6a932e7915e0
Validity
Not Before: May 10 03:00:45 2025 GMT
Not After : May 11 03:00:45 2025 GMT
Subject: CN=e511a85360b50056eff3235bfcf27be3f3f06f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b8:60:ae:bd:68:14:f9:ec:7c:9d:31:30:6c:
86:a8:f4:29:ca:6a:a5:44:62:33:17:60:7f:83:d7:
d7:ff:7e:bb:3a:5e:7a:1a:6f:b6:56:4b:f1:10:de:
84:8c:7e:9a:11:b4:b8:db:d0:07:85:c0:5e:79:ec:
17:47:8b:5a:6d:7e:8f:48:13:f7:ca:a9:6b:86:4b:
b3:ac:78:50:0f:3d:d0:47:4b:b6:2f:f2:a8:3e:6c:
49:27:73:50:73:fb:69:f8:b2:98:1b:77:c3:9b:25:
42:00:0e:aa:6b:99:f8:70:e2:fe:22:02:b7:94:79:
9e:00:23:8f:62:27:bc:a6:e7:f3:fc:23:2d:f6:40:
c4:00:85:52:ca:11:3c:24:fd:1a:1c:c6:fd:e2:a8:
54:3e:e4:5f:3c:cd:96:bc:a7:90:db:14:ee:cb:a8:
78:10:82:c4:39:b3:bd:0b:9f:3e:a6:2d:99:7c:db:
6b:e8:a5:f3:ca:ea:ad:3f:a3:5f:31:12:ce:fb:fc:
07:53:f6:6c:ee:8a:42:1e:f2:dd:f6:19:5d:c3:48:
11:03:6c:dc:b5:d2:61:d8:50:ee:5e:90:e0:02:46:
a9:85:20:c8:8c:54:e9:ab:da:70:1e:cb:de:02:8d:
c8:be:0d:a5:cf:f6:92:96:cd:b0:46:60:56:7a:3a:
82:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:11:A8:53:60:B5:00:56:EF:F3:23:5B:FC:F2:7B:E3:F3:F0:6F:68
X509v3 Authority Key Identifier:
keyid:DF:46:D4:9C:C3:47:67:F8:D0:24:AF:F2:95:AD:6A:93:2E:79:15:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:cc:8b:dc:5e:09:ba:91:69:77:40:be:45:c7:9d:5d:9a:7a:
f5:aa:67:04:f1:f8:3c:6c:ac:3e:c4:71:76:9f:24:e5:54:a1:
90:c9:4e:5d:18:80:93:6f:25:0d:4e:04:2a:43:72:0f:5f:2e:
cb:f7:31:fb:bf:2b:a8:e2:0b:0a:de:b9:63:04:d1:02:fa:4c:
7d:ff:1c:26:db:4e:22:07:75:32:36:8a:15:c5:af:59:e1:60:
d3:65:01:ab:7d:e1:2d:33:2e:88:62:0f:5e:d8:a8:ea:e8:5d:
1e:22:e2:e7:0f:e8:0f:2b:60:88:d2:d5:9b:40:b4:a5:a4:ed:
26:cb:5a:c8:87:c4:8f:22:99:5f:be:e2:c7:85:16:55:e1:79:
c7:fa:07:9e:ea:7b:4d:97:a4:78:44:4e:75:71:bd:4b:03:ee:
03:23:ab:91:0f:a2:d4:3c:a8:40:a6:54:e3:d0:89:e9:02:b8:
2b:eb:4f:1b:3c:57:d4:ef:da:b2:92:a2:90:67:8a:8d:0a:a1:
50:8b:0f:ca:be:1b:fa:bc:ae:a3:6b:23:a5:1e:67:3b:29:af:
ec:d7:23:d7:e1:db:a6:03:00:a0:b7:30:b9:e2:f5:0f:a5:8f:
e8:d4:d1:c6:aa:cd:77:32:d9:d7:48:97:53:35:49:61:49:9f:
0d:55:e4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:22:11 2025 by rpki-client