Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft
File: 30gYvQqzvf87E_-goLSWmf4NZdg.mft (raw, json)
Hash identifier: n45ZBuDXQnPOvznUCROHpQ5RiI5Cmir6gJH0Vf/vojk=
Subject key identifier: DD:25:C9:77:DB:03:3B:58:39:65:7F:2B:B2:67:77:8B:CF:B3:E9:27
Authority key identifier: DF:48:18:BD:0A:B3:BD:FF:3B:13:FF:A0:A0:B4:96:99:FE:0D:65:D8
Certificate issuer: /CN=df4818bd0ab3bdff3b13ffa0a0b49699fe0d65d8
Certificate serial: 0196BCDBD17F7E4DA352E73439C33D1F3584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft
Manifest number: 11C7
Signing time: Sun 11 May 2025 01:00:44 +0000
Manifest this update: Sun 11 May 2025 01:00:44 +0000
Manifest next update: Mon 12 May 2025 01:00:44 +0000
Files and hashes: 1: 30gYvQqzvf87E_-goLSWmf4NZdg.crl (hash: qRyrL7uZRcwimsZBodqD0mJubC8DMyv8fY/hjvdt2zM=)
2: sWuySCoAeegdfWnkMuqNoxyi1Bw.roa (hash: 0K3bxqojGl6MNEviSU5eh2+DL5CKnr6TGRVYgLgGugg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:d1:7f:7e:4d:a3:52:e7:34:39:c3:3d:1f:35:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df4818bd0ab3bdff3b13ffa0a0b49699fe0d65d8
Validity
Not Before: May 11 01:00:44 2025 GMT
Not After : May 12 01:00:44 2025 GMT
Subject: CN=dd25c977db033b5839657f2bb267778bcfb3e927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9f:e1:d8:d5:67:1a:7c:c5:91:8a:04:51:b9:
5a:9f:3f:ef:17:42:6b:36:e0:e3:3b:0f:00:48:77:
15:ce:77:d8:03:21:06:a4:56:28:09:cc:eb:bf:4c:
82:54:14:59:19:59:3f:13:7d:d9:63:a9:69:db:21:
e1:14:52:94:a1:7b:ed:d4:6a:3c:ca:3f:76:1f:55:
9c:5a:fd:fd:31:c3:8e:03:da:be:fd:2d:4b:73:91:
13:05:29:42:6f:51:da:c8:80:bd:d7:82:9f:86:5a:
58:41:e3:3f:1f:b6:e4:81:1a:1d:d1:14:42:e4:20:
89:b3:5f:e7:7f:86:b0:fa:00:35:86:e4:0a:27:1c:
5c:02:cf:c3:9d:72:4a:be:78:33:d4:5c:75:ed:da:
67:9c:24:38:94:68:51:65:6e:35:d6:37:7e:63:c1:
6a:b1:25:f1:b7:d7:c6:eb:82:6d:aa:a7:a9:f4:85:
c2:70:4e:8f:5e:9e:6f:9e:b4:d5:10:cf:4a:94:59:
32:aa:1e:a8:f7:fa:16:0b:27:f5:c8:d1:80:56:72:
93:f8:24:31:7b:f1:bc:a2:77:10:ae:67:05:c5:c1:
20:b4:f9:2e:98:0b:ab:a3:02:ac:47:2a:79:aa:aa:
ae:b0:dc:dd:2f:c4:18:c1:64:92:b9:29:06:8d:1b:
6e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:25:C9:77:DB:03:3B:58:39:65:7F:2B:B2:67:77:8B:CF:B3:E9:27
X509v3 Authority Key Identifier:
keyid:DF:48:18:BD:0A:B3:BD:FF:3B:13:FF:A0:A0:B4:96:99:FE:0D:65:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f1:fd:cf:20:84:06:fa:ff:54:d8:8f:ae:99:2b:d4:f5:73:
59:33:3e:00:1c:98:b4:3f:3c:32:5a:95:8e:26:08:60:0d:00:
46:91:45:95:bf:2b:4f:f8:7d:7b:49:2d:ba:e3:13:48:65:f8:
0b:64:d1:2b:02:a9:e5:be:54:42:a5:96:a3:20:07:10:92:ed:
2c:c6:55:ee:1f:ef:92:a9:72:69:56:ae:4e:9a:a5:31:63:c1:
4f:bc:1a:e3:a5:09:0e:3c:93:3f:75:78:cc:4b:6f:da:fc:18:
47:fc:6d:65:bd:c4:10:e5:cd:e8:a0:74:c3:9c:69:c6:e6:01:
49:21:03:fe:e8:44:b2:b9:b2:a3:80:66:e1:92:d4:cd:fa:a2:
44:17:0a:f8:82:b5:4e:7b:4b:43:c2:df:80:02:59:a9:e1:08:
94:b9:a4:d7:da:95:8e:7d:87:58:d7:42:ee:ae:9a:6c:a2:cd:
5d:fe:29:58:fd:ff:0c:42:0f:08:85:af:0c:61:eb:47:4f:fe:
2a:9c:9f:f0:28:22:8a:c7:d3:fb:4a:03:cb:73:45:27:bc:53:
6e:2e:dc:71:08:71:0c:65:2b:0f:27:e9:d2:81:c5:dd:4a:73:
ed:b5:b0:89:ae:69:b1:4f:0e:57:0d:fe:22:76:fa:ac:d3:a5:
69:2a:1d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:13:39 2025 by rpki-client