Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
File: 30bUnMNHZ_jQJK_yla1qky55FeA.mft (raw, json)
Hash identifier: 0I+Al6Xt2PQfUTqujS5t2g2SLOwJty99nm4sniy2NMg=
Subject key identifier: 4E:CE:2F:AA:FB:ED:20:99:6B:12:40:24:78:B3:E9:80:8E:9B:86:5C
Authority key identifier: DF:46:D4:9C:C3:47:67:F8:D0:24:AF:F2:95:AD:6A:93:2E:79:15:E0
Certificate issuer: /CN=df46d49cc34767f8d024aff295ad6a932e7915e0
Certificate serial: 0199FE476140D28DBEC5AE52029DF194A0BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
Manifest number: 09C1
Signing time: Sun 19 Oct 2025 21:01:54 +0000
Manifest this update: Sun 19 Oct 2025 21:01:54 +0000
Manifest next update: Mon 20 Oct 2025 21:01:54 +0000
Files and hashes: 1: 30bUnMNHZ_jQJK_yla1qky55FeA.crl (hash: ZNjASIi0W8c0Ecs127/Cm+HzQvf+m8NiQpt3Ydhtohs=)
2: ZqG9ZXQwlRQgv2SuPLTOJwS07bA.roa (hash: JZgT3iIXQIZJHifSbhHNXa/qOoNcRciphxipRif7+Xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:61:40:d2:8d:be:c5:ae:52:02:9d:f1:94:a0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df46d49cc34767f8d024aff295ad6a932e7915e0
Validity
Not Before: Oct 19 21:01:54 2025 GMT
Not After : Oct 20 21:01:54 2025 GMT
Subject: CN=4ece2faafbed20996b12402478b3e9808e9b865c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2b:ac:68:36:17:d7:1a:86:40:b0:85:50:69:
4b:ae:8b:ac:07:9c:a3:ed:62:76:19:28:d0:d8:55:
a8:d9:fb:37:9b:c9:ee:08:a5:ba:40:1d:4a:f2:29:
4a:d3:08:27:c4:4e:d1:60:7b:68:11:f5:af:99:ce:
8d:78:4c:36:e9:7b:6d:9f:b6:32:bb:4d:5e:7a:ee:
43:77:fd:78:42:fe:b3:d6:28:48:06:8a:ec:6b:12:
dd:6f:4c:7c:37:a4:42:d9:11:0a:f5:0a:8d:59:44:
0f:d6:4d:ca:c9:37:d2:ff:3b:98:0a:a2:66:b0:a4:
bf:7c:f6:20:c5:3e:ed:6e:41:20:d8:9f:17:b5:5c:
24:1d:30:f5:64:15:43:cd:91:e9:a3:59:6f:e7:b2:
ad:9a:d4:24:5e:d7:4c:d6:95:68:9f:34:66:28:74:
39:49:ee:4b:ba:26:54:b1:4f:24:c7:da:02:95:70:
b6:cb:a5:f8:4e:e6:d2:50:e2:fa:87:b4:b7:e6:68:
b6:d1:c5:44:a0:94:1f:03:b0:da:e9:2e:da:b3:86:
a0:47:bd:e9:4c:50:d8:bb:22:3e:2d:96:7d:19:b6:
2e:3d:9b:b9:69:88:9f:8b:b3:32:ae:01:fa:28:b4:
1e:3e:34:4a:23:fa:33:61:90:a4:4f:38:4d:03:6c:
e7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CE:2F:AA:FB:ED:20:99:6B:12:40:24:78:B3:E9:80:8E:9B:86:5C
X509v3 Authority Key Identifier:
keyid:DF:46:D4:9C:C3:47:67:F8:D0:24:AF:F2:95:AD:6A:93:2E:79:15:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:0d:55:73:af:68:c9:a4:a6:3a:bb:ea:11:6f:46:f1:f1:de:
9d:29:86:ef:5b:ea:da:d3:f9:fd:ca:d2:bb:0f:6d:f6:b9:19:
17:b9:05:ea:51:11:50:0c:bd:e4:2c:ed:55:27:b7:0d:66:31:
e2:4e:f9:62:4a:76:86:3c:98:69:a6:56:d7:c7:b3:f4:b9:28:
0b:d7:04:aa:b4:33:d5:04:2b:eb:3f:47:b8:12:f7:57:f2:11:
7f:bf:52:1e:5f:cd:28:ec:a6:5a:ce:dc:18:e6:b8:21:c4:87:
3f:b3:a2:56:2d:69:8f:56:58:6e:58:b4:fd:fb:09:5f:64:85:
28:8e:21:69:47:e7:79:ff:af:d9:f5:ab:9d:e7:36:34:67:4d:
7d:76:68:dd:7c:42:94:9f:33:f7:71:00:31:89:41:63:b3:0c:
da:ae:9c:41:eb:2b:78:e4:02:26:ab:2a:08:27:09:7e:11:31:
71:3a:20:82:43:23:cd:b7:96:9f:e0:34:2d:75:7a:e2:e4:65:
5d:b6:a3:59:e6:b6:42:23:93:59:bb:c0:79:dd:00:81:86:e0:
39:aa:91:dc:7e:ff:50:4a:06:c9:e2:ac:27:8a:6a:59:e0:60:
3e:a1:ff:d5:92:61:3e:17:53:e0:2c:bf:9c:c8:e1:04:53:9e:
44:84:ea:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:31 2025 by rpki-client