Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
File: _30XNGbvuybSoRkpi7l5mgk8MjA.mft (raw, json)
Hash identifier: kFHg/T8PciTYrUTsFuK5ZDVoKam0Blarzcta7Dk/UKo=
Subject key identifier: 06:03:51:6C:6D:A5:6D:0D:6D:BA:94:3A:8E:90:CF:C4:64:B9:76:53
Authority key identifier: FF:7D:17:34:66:EF:BB:26:D2:A1:19:29:8B:B9:79:9A:09:3C:32:30
Certificate issuer: /CN=ff7d173466efbb26d2a119298bb9799a093c3230
Certificate serial: 01988DA1A19157DA10345B2EA23438746147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
Manifest number: 129E
Signing time: Sat 09 Aug 2025 07:00:36 +0000
Manifest this update: Sat 09 Aug 2025 07:00:36 +0000
Manifest next update: Sun 10 Aug 2025 07:00:36 +0000
Files and hashes: 1: _30XNGbvuybSoRkpi7l5mgk8MjA.crl (hash: aKqDmEFXEB1dFTUhhv20JzisP3mpgkLMJOVf7OBesPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:a1:a1:91:57:da:10:34:5b:2e:a2:34:38:74:61:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7d173466efbb26d2a119298bb9799a093c3230
Validity
Not Before: Aug 9 07:00:36 2025 GMT
Not After : Aug 10 07:00:36 2025 GMT
Subject: CN=0603516c6da56d0d6dba943a8e90cfc464b97653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:23:de:89:56:0a:4c:5b:32:88:1e:11:d1:74:
52:01:68:6d:aa:49:ec:f1:00:5d:b6:77:a8:61:01:
00:c0:b6:c1:ae:15:d1:ca:6d:b7:70:3d:98:86:9b:
a1:68:b3:3a:18:7d:67:e7:84:37:3b:ae:23:2a:3e:
d0:0d:3c:c4:53:ab:a6:c6:8d:29:18:6b:ad:b3:6c:
95:d5:a9:95:68:1a:5c:4c:f7:d0:4e:53:d8:f0:78:
41:a8:a0:12:c1:20:ab:39:fe:93:f6:7f:2d:cd:ff:
1f:4c:24:5c:86:db:78:5b:9b:76:1c:44:61:0f:d9:
58:1d:3c:3c:49:b9:68:06:6a:f5:3f:0f:2c:7e:67:
4c:c7:37:44:c5:3a:11:59:79:44:08:33:c3:86:53:
b1:19:61:0f:fc:09:60:3b:1c:d7:fc:67:e4:fe:64:
18:7c:a2:01:c0:a4:69:e5:dc:16:aa:a8:e9:bf:9a:
f3:cd:a5:a2:b3:d4:f8:7e:de:73:8c:88:c5:50:d0:
6e:4d:ab:81:fc:47:7e:8b:b1:48:8f:24:3b:fa:5a:
e8:c1:ba:2f:03:3e:6a:20:4d:b2:82:c8:67:0c:90:
83:fb:f1:69:aa:84:67:39:f4:a7:22:18:41:88:91:
2a:c7:3e:79:7d:85:c2:d3:c4:27:34:d6:1b:67:65:
04:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:03:51:6C:6D:A5:6D:0D:6D:BA:94:3A:8E:90:CF:C4:64:B9:76:53
X509v3 Authority Key Identifier:
keyid:FF:7D:17:34:66:EF:BB:26:D2:A1:19:29:8B:B9:79:9A:09:3C:32:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:23:c2:12:00:28:9e:8e:89:8b:8b:54:39:18:ae:b3:d8:90:
2c:9e:83:26:24:10:d5:22:89:0e:4c:78:83:92:4e:85:05:e7:
59:41:23:db:34:30:38:ee:c1:91:f1:2a:e1:ba:1a:5c:39:23:
c6:a8:40:4b:05:50:c6:d5:e8:7e:03:a5:55:c6:3d:8d:30:2b:
a0:d3:31:46:b5:6c:d6:34:cf:b1:b5:02:8d:b8:09:f7:51:de:
86:62:63:ab:d8:0d:47:d4:32:2c:15:6a:6f:f9:87:1d:01:8d:
f7:2c:d1:b1:91:f1:ae:d4:2e:c4:48:a6:10:92:55:36:bc:98:
51:51:00:e0:cb:03:ce:91:b7:94:a9:2a:be:ab:1f:eb:7e:03:
55:8e:9e:7e:a8:e7:dd:6f:77:a1:11:ab:e8:24:8c:55:44:70:
94:31:c5:3c:8f:4f:e1:de:ac:12:ed:de:c0:65:ad:1b:e7:0b:
61:34:5d:b8:16:36:3c:8b:4c:e1:69:d8:40:1e:a0:41:7e:d9:
a9:20:c6:ef:82:1e:5b:02:53:d8:f4:64:f6:12:c1:c6:9d:a7:
0b:67:65:c1:e5:3a:34:32:17:43:fd:17:fc:6d:19:dd:9c:55:
d9:00:0f:cb:44:33:cd:90:41:ea:93:f8:93:c9:fa:77:fb:08:
7c:28:b0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:23:07 2025 by rpki-client