Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
File: 30KpUq9vhPKfHRse6XQbBXKGh4Q.mft (raw, json)
Hash identifier: 1IqYFnUScLl2ZZI9dy6pZ45Wjx2nN24QtMihqhS5L5A=
Subject key identifier: BF:E5:94:78:82:23:B3:D3:4D:6D:9A:47:3A:36:00:E4:F9:8A:A0:77
Authority key identifier: DF:42:A9:52:AF:6F:84:F2:9F:1D:1B:1E:E9:74:1B:05:72:86:87:84
Certificate issuer: /CN=df42a952af6f84f29f1d1b1ee9741b0572868784
Certificate serial: 0196BC375AE732FE4D11AAE9F509219503A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
Manifest number: 10C2
Signing time: Sat 10 May 2025 22:01:06 +0000
Manifest this update: Sat 10 May 2025 22:01:06 +0000
Manifest next update: Sun 11 May 2025 22:01:06 +0000
Files and hashes: 1: 30KpUq9vhPKfHRse6XQbBXKGh4Q.crl (hash: svSdW8JNKBHGspXOtGqC/zdIX5fkTpSScS7OMCWG1OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:37:5a:e7:32:fe:4d:11:aa:e9:f5:09:21:95:03:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df42a952af6f84f29f1d1b1ee9741b0572868784
Validity
Not Before: May 10 22:01:06 2025 GMT
Not After : May 11 22:01:06 2025 GMT
Subject: CN=bfe594788223b3d34d6d9a473a3600e4f98aa077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d7:09:a3:28:75:df:7c:1b:d9:49:d2:a5:42:
b0:f3:4b:85:03:0e:ac:ec:b7:dd:1e:71:64:9a:47:
d4:23:d5:1d:41:d3:59:5a:74:a7:5f:64:3c:0b:02:
cf:13:22:fd:cc:6e:33:9c:c3:aa:93:aa:1f:66:f6:
d1:2d:5c:ad:b3:f4:47:a0:05:b4:0a:a5:52:a5:46:
90:28:dd:02:a0:eb:76:f6:c8:74:e9:43:f1:b5:d1:
ad:86:7c:fb:8d:14:d8:6d:73:f5:59:f5:04:a8:34:
bc:0f:9d:65:15:0c:2b:28:89:91:59:d3:18:4c:8c:
64:cc:c2:96:6d:3c:7c:9b:a5:22:a1:32:4a:22:0d:
cc:77:be:db:74:18:fe:36:1a:14:2f:29:dc:97:53:
9e:8a:84:5a:8d:7d:0d:5a:4a:0e:5e:61:ba:2c:62:
07:ec:cc:7d:20:67:e1:dd:55:fe:0f:40:8e:17:5a:
35:b2:62:31:a3:99:77:5f:1e:a8:b8:5d:45:81:a1:
b9:90:33:5c:59:4d:46:0d:fd:19:00:68:b9:99:a0:
df:14:29:18:5e:6b:c7:99:94:67:f9:22:a6:51:58:
fb:97:4d:9c:d4:a8:01:e8:15:69:87:cb:01:ac:fc:
1e:11:89:00:90:5c:25:ad:21:b2:29:79:0a:9d:c5:
d6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E5:94:78:82:23:B3:D3:4D:6D:9A:47:3A:36:00:E4:F9:8A:A0:77
X509v3 Authority Key Identifier:
keyid:DF:42:A9:52:AF:6F:84:F2:9F:1D:1B:1E:E9:74:1B:05:72:86:87:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:81:69:90:e1:4f:9d:bf:37:4a:48:ad:0d:d4:58:b7:68:82:
22:ae:a6:fe:35:b0:90:53:e9:ea:c6:c0:3c:93:77:74:c8:6b:
c7:25:21:81:eb:b3:58:ea:82:c3:da:c7:c9:82:68:de:99:ab:
bb:aa:97:83:75:78:98:c0:2f:84:70:0f:f1:38:c9:48:f3:dc:
c4:a8:cb:8f:b1:ac:e5:70:f5:61:d4:92:b2:b7:ce:df:5a:b6:
51:83:e7:a4:5b:05:03:7b:8f:78:a3:49:a9:60:e8:e8:d4:62:
b4:f4:13:3f:d6:ee:f0:15:79:82:7a:e0:9a:c5:74:72:9f:c9:
34:63:b0:a2:12:7f:1a:66:ed:71:9b:14:3b:38:5b:96:16:7d:
9c:b8:2c:83:2f:3d:68:51:6b:84:e5:aa:59:01:de:47:04:a9:
2b:e1:c7:f7:8a:dd:88:96:07:b1:d9:ed:d8:03:db:e6:a0:3e:
d2:85:3a:6d:d4:67:07:00:55:de:63:00:f9:9b:bd:77:c2:f1:
5c:a4:c6:20:51:3e:d8:b5:2b:b3:d9:43:35:91:30:7a:ca:8f:
99:15:95:7b:5f:3e:7d:eb:62:0c:53:af:68:5e:fc:15:2e:e4:
03:1e:11:55:3d:af:60:d7:73:98:9c:c3:03:97:75:c0:16:ad:
c9:38:75:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8N1rnMv5NEarp9QkhlQOiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNDJhOTUyYWY2Zjg0ZjI5ZjFkMWIxZWU5NzQxYjA1NzI4
Njg3ODQwHhcNMjUwNTEwMjIwMTA2WhcNMjUwNTExMjIwMTA2WjAzMTEwLwYDVQQD
EyhiZmU1OTQ3ODgyMjNiM2QzNGQ2ZDlhNDczYTM2MDBlNGY5OGFhMDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9cJoyh133wb2UnSpUKw80uFAw6s
7LfdHnFkmkfUI9UdQdNZWnSnX2Q8CwLPEyL9zG4znMOqk6ofZvbRLVyts/RHoAW0
CqVSpUaQKN0CoOt29sh06UPxtdGthnz7jRTYbXP1WfUEqDS8D51lFQwrKImRWdMY
TIxkzMKWbTx8m6UioTJKIg3Md77bdBj+NhoULyncl1OeioRajX0NWkoOXmG6LGIH
7Mx9IGfh3VX+D0COF1o1smIxo5l3Xx6ouF1FgaG5kDNcWU1GDf0ZAGi5maDfFCkY
XmvHmZRn+SKmUVj7l02c1KgB6BVph8sBrPweEYkAkFwlrSGyKXkKncXW6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/llHiCI7PTTW2aRzo2AOT5iqB3MB8GA1UdIwQY
MBaAFN9CqVKvb4Tynx0bHul0GwVyhoeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzBLcFVxOXZoUEtmSFJzZTZYUWJCWEtHaDRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9kM2NhMDQtOWU4OC00YmZiLWJlNWYt
ZDIyODg1MjViMDg3LzEvMzBLcFVxOXZoUEtmSFJzZTZYUWJCWEtHaDRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9kM2NhMDQtOWU4OC00YmZiLWJlNWYtZDIyODg1MjViMDg3
LzEvMzBLcFVxOXZoUEtmSFJzZTZYUWJCWEtHaDRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADYFpkOFP
nb83SkitDdRYt2iCIq6m/jWwkFPp6sbAPJN3dMhrxyUhgeuzWOqCw9rHyYJo3pmr
u6qXg3V4mMAvhHAP8TjJSPPcxKjLj7Gs5XD1YdSSsrfO31q2UYPnpFsFA3uPeKNJ
qWDo6NRitPQTP9bu8BV5gnrgmsV0cp/JNGOwohJ/GmbtcZsUOzhblhZ9nLgsgy89
aFFrhOWqWQHeRwSpK+HH94rdiJYHsdnt2APb5qA+0oU6bdRnBwBV3mMA+Zu9d8Lx
XKTGIFE+2LUrs9lDNZEwesqPmRWVe18+fetiDFOvaF78FS7kAx4RVT2vYNdzmJzD
A5d1wBatyTh16Q==
-----END CERTIFICATE-----
Generated at Sun May 11 04:28:47 2025 by rpki-client