Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft
File: 30gYvQqzvf87E_-goLSWmf4NZdg.mft (raw, json)
Hash identifier: 06g3dIFKytpSMf57Yov/n1neUvGVG+E8qDIxWmMgoB8=
Subject key identifier: 0B:F1:89:4F:BB:A2:E3:9C:B1:4B:B2:6E:49:2F:B1:6B:AC:8A:6A:F5
Authority key identifier: DF:48:18:BD:0A:B3:BD:FF:3B:13:FF:A0:A0:B4:96:99:FE:0D:65:D8
Certificate issuer: /CN=df4818bd0ab3bdff3b13ffa0a0b49699fe0d65d8
Certificate serial: 0199FD348231527DD80F3EA855E46BAB61CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft
Manifest number: 1376
Signing time: Sun 19 Oct 2025 16:01:40 +0000
Manifest this update: Sun 19 Oct 2025 16:01:40 +0000
Manifest next update: Mon 20 Oct 2025 16:01:40 +0000
Files and hashes: 1: 30gYvQqzvf87E_-goLSWmf4NZdg.crl (hash: +7zfNI7bHLFaQNcZt2iZn+4Qkg65gdOkgv1wm5Htqh4=)
2: sWuySCoAeegdfWnkMuqNoxyi1Bw.roa (hash: 0K3bxqojGl6MNEviSU5eh2+DL5CKnr6TGRVYgLgGugg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:82:31:52:7d:d8:0f:3e:a8:55:e4:6b:ab:61:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df4818bd0ab3bdff3b13ffa0a0b49699fe0d65d8
Validity
Not Before: Oct 19 16:01:40 2025 GMT
Not After : Oct 20 16:01:40 2025 GMT
Subject: CN=0bf1894fbba2e39cb14bb26e492fb16bac8a6af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bc:db:15:fa:c0:9a:9e:67:a4:95:fb:3e:64:
2e:ed:d2:42:4e:1a:13:33:7e:5e:37:c7:06:19:71:
40:29:d9:fb:39:a8:a6:3f:f6:f7:23:54:1c:2a:2a:
21:9e:8e:17:1a:4f:6a:d3:77:8a:09:a5:a3:ae:b1:
b9:a2:a3:a4:37:c5:05:56:79:aa:1b:02:54:dc:10:
23:66:81:91:60:5a:43:59:ce:d6:ff:6a:c4:20:be:
60:ca:3c:61:f1:39:a7:6a:b1:71:af:5f:96:fd:f0:
c5:88:75:34:79:d3:8e:ee:71:32:9a:a2:5d:78:51:
da:d7:ad:78:19:e3:db:80:32:15:6c:98:35:f0:5a:
3e:a6:28:39:e4:7c:00:ba:aa:d5:52:df:a5:ee:1e:
e0:9a:13:f4:d1:99:09:9c:31:72:39:ae:9f:76:d2:
2c:5f:33:2a:0d:63:0e:64:14:72:82:76:2b:00:4f:
84:d7:34:b9:f5:9d:a7:57:64:13:52:f8:70:e5:2f:
d8:c9:82:cc:cd:6e:cf:b5:af:50:0d:2c:4b:ee:9d:
b0:8a:6f:20:51:c6:31:39:de:28:c4:ee:d9:fe:40:
68:c3:ba:24:cf:53:22:5d:01:d8:e1:f9:89:ab:c9:
2b:79:1c:70:54:05:f9:8b:89:3f:91:ea:5a:db:bf:
a9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F1:89:4F:BB:A2:E3:9C:B1:4B:B2:6E:49:2F:B1:6B:AC:8A:6A:F5
X509v3 Authority Key Identifier:
keyid:DF:48:18:BD:0A:B3:BD:FF:3B:13:FF:A0:A0:B4:96:99:FE:0D:65:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:cc:2a:47:bc:4b:4b:21:ec:30:49:2e:2f:3f:71:ad:4c:e5:
1b:48:04:6a:7d:0f:ad:1a:e8:a2:a6:ca:e6:8c:14:51:c5:0f:
3f:90:08:ef:66:4c:65:1e:60:5d:e6:90:22:2b:8c:9e:ea:89:
c8:f5:de:15:0c:85:0e:d0:34:cf:08:4e:f8:44:bc:89:2b:09:
c5:d3:b1:9f:9d:e6:4d:ba:8e:e9:d0:f6:2b:03:f7:8a:b0:5e:
ba:59:a3:36:4e:62:3c:a8:c2:7b:53:4f:1f:80:cc:10:a1:46:
aa:5b:7f:38:6c:fa:d9:86:20:24:67:3c:91:d5:19:b9:2e:78:
32:bc:ef:92:b6:2e:df:1a:98:af:74:19:90:f5:ad:2d:c1:98:
d6:eb:93:d6:2e:92:3d:ea:a3:b3:c2:07:1a:37:1a:df:85:f9:
48:7c:be:13:06:42:3f:40:4f:04:5e:88:42:8b:fe:a9:51:8c:
69:47:ab:bb:8f:0d:46:54:ae:13:ff:c3:f9:8c:37:65:61:8a:
ee:07:74:8b:f7:b7:d5:95:fc:bc:69:70:03:a1:46:d0:3d:99:
04:62:22:42:a2:66:3a:1e:96:81:3e:2c:fb:20:f1:ad:82:fb:
7a:80:26:9c:bf:7f:d0:f1:6e:9f:e1:a0:81:ea:9f:ef:09:0c:
49:fd:0a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:00:43 2025 by rpki-client