Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
File: 30KpUq9vhPKfHRse6XQbBXKGh4Q.mft (raw, json)
Hash identifier: 2spKdqMe2lkXC01CccQs8rzDIgsJgmdjxRDsvaxKG0A=
Subject key identifier: 62:64:7E:30:BC:A4:03:9C:57:C1:63:76:AD:63:7C:33:0C:65:06:8B
Authority key identifier: DF:42:A9:52:AF:6F:84:F2:9F:1D:1B:1E:E9:74:1B:05:72:86:87:84
Certificate issuer: /CN=df42a952af6f84f29f1d1b1ee9741b0572868784
Certificate serial: 0197C2DBB3D6A040074F1C16078D436296D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
Manifest number: 114A
Signing time: Mon 30 Jun 2025 22:01:07 +0000
Manifest this update: Mon 30 Jun 2025 22:01:07 +0000
Manifest next update: Tue 01 Jul 2025 22:01:07 +0000
Files and hashes: 1: 30KpUq9vhPKfHRse6XQbBXKGh4Q.crl (hash: SSSKeZvqxWFBCQBMM5exVkOV+q5B2d87HE7j7CGQ64c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:db:b3:d6:a0:40:07:4f:1c:16:07:8d:43:62:96:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df42a952af6f84f29f1d1b1ee9741b0572868784
Validity
Not Before: Jun 30 22:01:07 2025 GMT
Not After : Jul 1 22:01:07 2025 GMT
Subject: CN=62647e30bca4039c57c16376ad637c330c65068b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c4:35:bf:04:a1:10:ed:90:57:23:ba:84:d0:
c6:9e:94:c4:b4:da:22:a0:61:ce:79:b8:93:24:86:
7b:0b:fd:a5:a8:a2:a4:fc:5e:f7:0e:77:3c:10:78:
ac:53:fb:d9:0a:2d:37:f9:68:90:db:91:bb:d2:cf:
88:f7:de:5d:aa:cd:9b:90:89:ea:2a:7d:27:4a:68:
bb:8e:2b:5b:67:45:c6:d4:0d:80:d4:e7:44:b4:03:
1b:99:47:b7:89:36:7b:fa:6a:d3:3f:57:42:c5:7c:
f4:70:aa:89:0f:69:ad:91:2f:fa:0b:ef:f7:8d:48:
d3:47:77:6b:75:7c:5a:92:3c:e0:03:be:cf:2c:7f:
09:23:cc:e0:de:ee:26:19:b5:28:39:80:3c:fb:28:
8d:a6:9d:b4:42:3f:65:7a:d0:3f:00:63:dc:b6:4c:
64:c4:c0:c7:4e:21:8d:ec:8f:ff:fe:43:e8:f0:35:
ce:e7:7e:31:1c:64:b5:46:39:8e:ee:3a:d9:0d:88:
a4:9c:9e:9f:44:48:c1:7c:9f:01:17:3f:7a:45:df:
a7:c1:40:62:c3:ed:2d:b0:7d:9c:60:3d:1c:ce:e5:
1d:81:8e:a6:99:2b:fd:40:a7:9e:85:f0:54:c0:9a:
95:8b:63:39:c1:49:57:d7:6e:22:53:10:17:55:e4:
75:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:64:7E:30:BC:A4:03:9C:57:C1:63:76:AD:63:7C:33:0C:65:06:8B
X509v3 Authority Key Identifier:
keyid:DF:42:A9:52:AF:6F:84:F2:9F:1D:1B:1E:E9:74:1B:05:72:86:87:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:07:95:23:fc:5f:83:b6:d0:6c:d4:86:13:3b:56:ff:e6:ba:
f7:bb:ce:7a:e6:4b:f0:5a:f9:a6:3d:e2:41:65:fb:73:a4:f2:
10:07:b8:84:3a:db:24:7e:37:14:d1:83:14:64:40:50:65:ee:
1c:cb:5a:18:6b:c4:68:1c:93:51:4e:ac:62:b0:bb:4d:92:e7:
f8:3e:be:9c:84:88:6d:0c:6d:20:2a:2b:ea:6b:a6:5e:7c:bc:
e5:42:0c:eb:06:95:35:d1:2f:c6:51:2e:14:75:6a:29:27:b3:
6e:ae:ce:41:28:93:8c:04:d2:ed:8a:d2:07:82:e8:b2:98:90:
e9:5b:3d:b4:70:e9:47:ef:df:45:78:53:29:b9:a5:0c:bf:f6:
1d:55:be:5a:dd:96:ed:2e:18:e7:9b:7a:4e:f0:03:7c:f6:eb:
47:6e:22:a1:f0:0b:cc:b3:af:5c:1c:19:43:0b:a6:54:31:b8:
0b:93:a8:04:11:19:9d:b2:8a:e4:9b:18:12:16:e4:51:25:82:
84:5c:f1:bb:13:67:c5:65:b2:26:11:b8:3e:3d:1f:e5:3f:31:
16:9a:dc:87:2f:40:e7:08:86:bf:3d:5b:b9:50:77:fd:91:e8:
c0:02:f4:b7:9e:a8:f2:29:ea:b5:8a:50:da:18:e9:df:b3:a0:
41:a0:95:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:05:27 2025 by rpki-client