Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
File: _30XNGbvuybSoRkpi7l5mgk8MjA.mft (raw, json)
Hash identifier: umMfCnt+XQJkifCk36V4taXVxshgpgOj9lNOe6yL6Go=
Subject key identifier: D1:A0:0D:71:E8:2C:18:42:09:52:F4:35:AD:B9:AF:F6:AF:EA:ED:A1
Authority key identifier: FF:7D:17:34:66:EF:BB:26:D2:A1:19:29:8B:B9:79:9A:09:3C:32:30
Certificate issuer: /CN=ff7d173466efbb26d2a119298bb9799a093c3230
Certificate serial: 019A4D73F67E1B493D9433FB8693EC101772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
Manifest number: 1386
Signing time: Tue 04 Nov 2025 06:00:36 +0000
Manifest this update: Tue 04 Nov 2025 06:00:36 +0000
Manifest next update: Wed 05 Nov 2025 06:00:36 +0000
Files and hashes: 1: _30XNGbvuybSoRkpi7l5mgk8MjA.crl (hash: YEiMFlJRM4gOFnDZO7Ljkfklt4uSuSjvve6LwMAeCf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:f6:7e:1b:49:3d:94:33:fb:86:93:ec:10:17:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7d173466efbb26d2a119298bb9799a093c3230
Validity
Not Before: Nov 4 06:00:36 2025 GMT
Not After : Nov 5 06:00:36 2025 GMT
Subject: CN=d1a00d71e82c18420952f435adb9aff6afeaeda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ec:8e:79:41:56:81:ea:c6:f4:ba:91:37:69:
e7:ea:85:78:75:a2:ac:29:4a:07:57:f0:07:2c:be:
73:91:1e:69:39:65:99:e1:a4:91:af:18:b8:eb:8b:
96:83:57:12:65:f6:58:6e:24:30:1c:75:99:41:73:
a0:51:fe:e9:5a:ff:90:e0:33:c4:57:47:a8:d5:79:
94:67:97:cf:01:df:58:7a:19:48:0a:44:fd:8a:37:
02:4b:e3:96:3b:a8:a9:ff:b3:80:56:f6:69:67:c7:
da:2b:73:c4:c3:a5:a3:df:3b:95:f6:86:9f:e1:7a:
1b:14:b4:7e:b9:ca:64:87:b0:ff:e5:67:37:1c:85:
cf:41:43:c0:f4:db:97:69:a2:24:65:91:a6:82:b6:
2e:dc:b7:1f:0c:37:62:f4:7b:00:0c:de:34:79:a8:
11:f2:27:e4:ef:de:1d:16:b6:09:7c:50:36:81:a2:
89:67:9e:42:c7:5d:6b:72:3f:a7:2c:00:ea:ac:fb:
f6:46:31:44:6b:33:50:43:7b:67:3d:f0:24:b2:96:
45:b6:01:d0:d0:b3:35:f3:78:08:25:a9:32:8e:2c:
16:8d:f2:31:d5:46:c5:16:37:a8:41:47:d8:30:d5:
ab:4f:85:38:3a:1e:ff:0b:a7:9d:26:ed:eb:67:5d:
bb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A0:0D:71:E8:2C:18:42:09:52:F4:35:AD:B9:AF:F6:AF:EA:ED:A1
X509v3 Authority Key Identifier:
keyid:FF:7D:17:34:66:EF:BB:26:D2:A1:19:29:8B:B9:79:9A:09:3C:32:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e1:0d:48:b5:fc:9b:05:f1:ff:84:59:1f:59:e8:d1:d9:f1:
6e:de:eb:ba:e1:8a:ab:1c:b8:39:3b:e0:97:5a:fb:1e:6f:a3:
1f:ac:c6:c6:f6:cb:fe:fd:59:d0:fd:ce:83:a1:48:c8:fe:1b:
80:d4:42:a4:be:d5:4f:ef:05:15:54:16:43:55:5b:9c:86:9e:
87:37:8a:00:54:95:de:13:de:29:d5:d5:33:4a:08:d4:0f:1e:
3e:5d:36:cf:e1:c0:50:7f:1c:bc:8b:c0:64:ca:56:89:1d:e4:
ad:e4:82:a2:d3:c6:d6:2b:b9:5c:75:75:2f:35:d1:d1:40:2c:
f9:b4:04:7e:e1:9b:fe:4d:fb:a3:4f:73:a7:78:1f:e3:02:4a:
f3:dd:12:12:a0:b1:98:4d:a7:2d:bc:80:32:70:71:c1:2d:a2:
76:b8:88:68:89:31:90:ea:5d:6a:fd:18:c5:c7:6a:47:48:3d:
8d:01:bd:29:69:6e:e8:e6:8c:78:62:98:8b:4c:2b:4c:d2:22:
8d:c2:4d:62:0e:99:85:a9:5c:e0:10:d8:81:64:95:77:10:ad:
65:2b:d4:c3:4c:06:e9:3d:e9:60:4b:6a:5c:c5:73:14:04:c1:
9d:fc:0b:b2:27:0f:dc:81:cf:ac:c0:79:29:7f:1d:7e:fd:b1:
01:54:86:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:23 2025 by rpki-client