Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
File: 30bUnMNHZ_jQJK_yla1qky55FeA.mft (raw, json)
Hash identifier: /CcN0323KTSvIlYDn5TCOeIDLCeJFY6N2/zdSCDGU9I=
Subject key identifier: 82:67:F4:2F:5A:F6:E8:A9:F1:4D:31:66:58:63:63:46:3E:45:62:BA
Authority key identifier: DF:46:D4:9C:C3:47:67:F8:D0:24:AF:F2:95:AD:6A:93:2E:79:15:E0
Certificate issuer: /CN=df46d49cc34767f8d024aff295ad6a932e7915e0
Certificate serial: 0196748B7725A260A3D653C7DD32A76E2896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
Manifest number: 07EC
Signing time: Sun 27 Apr 2025 00:00:19 +0000
Manifest this update: Sun 27 Apr 2025 00:00:19 +0000
Manifest next update: Mon 28 Apr 2025 00:00:19 +0000
Files and hashes: 1: 30bUnMNHZ_jQJK_yla1qky55FeA.crl (hash: FoZYL+76pcDz6EBbye2PyQ94cB+8I4hPUkg8sU61ofE=)
2: ZqG9ZXQwlRQgv2SuPLTOJwS07bA.roa (hash: JZgT3iIXQIZJHifSbhHNXa/qOoNcRciphxipRif7+Xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:77:25:a2:60:a3:d6:53:c7:dd:32:a7:6e:28:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df46d49cc34767f8d024aff295ad6a932e7915e0
Validity
Not Before: Apr 27 00:00:19 2025 GMT
Not After : Apr 28 00:00:19 2025 GMT
Subject: CN=8267f42f5af6e8a9f14d3166586363463e4562ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c6:95:b2:39:7b:4d:54:83:11:e8:82:39:90:
7c:63:ef:07:04:c7:da:c9:e4:3b:17:11:21:58:39:
da:97:f3:e4:72:bb:7a:57:47:ea:c9:d9:77:0a:a6:
65:43:6b:6a:82:80:e7:a0:4d:32:71:5f:14:4a:51:
fa:54:dc:71:16:e0:e7:e8:68:7d:2b:d5:07:a4:41:
cd:bc:ec:51:a4:16:24:0b:1f:a7:fe:85:a5:ae:47:
ea:7d:7c:2f:f6:12:ad:07:6f:73:ea:96:07:16:75:
83:0b:86:3d:14:77:6a:f1:75:b7:d5:26:77:73:91:
ae:3c:5c:63:11:28:f7:43:3a:b6:b9:40:45:b7:b5:
dd:5b:6c:03:24:78:a0:ec:e6:83:8d:8a:b9:30:70:
ed:d1:c0:69:1e:0a:08:66:c6:0e:f2:5e:0e:c9:ff:
a9:c1:89:bc:43:9f:12:3c:73:0a:ae:1a:40:c0:61:
35:14:36:87:af:19:6e:c8:85:c7:1f:4b:a1:5e:55:
64:66:30:ec:c9:ab:fe:d4:0e:5d:42:a6:2f:93:b7:
b3:2e:7d:f1:e2:b7:4f:47:6b:45:2c:f4:c6:6a:33:
96:96:f0:46:72:0f:4e:a1:50:c6:58:fb:84:a0:13:
0e:93:c3:82:9b:b5:fc:4b:fe:bd:d7:b7:6d:98:1d:
0b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:67:F4:2F:5A:F6:E8:A9:F1:4D:31:66:58:63:63:46:3E:45:62:BA
X509v3 Authority Key Identifier:
keyid:DF:46:D4:9C:C3:47:67:F8:D0:24:AF:F2:95:AD:6A:93:2E:79:15:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:09:78:e8:cd:fb:9a:b7:ae:a2:8a:02:fd:05:87:d2:ea:58:
61:5d:33:79:f7:6f:3b:94:0a:53:a9:3f:6f:ab:62:2c:05:b2:
43:f1:12:b3:bd:9d:d7:34:ee:8b:b0:7e:6d:48:0c:75:7a:19:
23:c1:68:da:46:71:82:d2:d7:bc:d4:98:85:9a:ff:18:94:a8:
c9:ec:d6:4d:4a:1e:62:39:13:86:c6:65:12:34:3c:00:1f:ab:
2d:fa:af:de:10:aa:7e:62:d9:0f:54:73:d6:e4:89:b4:52:aa:
1b:b5:a0:f3:49:3c:f1:a8:58:4f:88:33:ca:ac:8a:c8:61:b1:
64:51:27:39:da:b8:e5:e9:a4:d5:40:ab:2e:ca:46:d4:0a:39:
2b:92:54:19:23:44:14:9e:24:98:63:a1:8f:09:91:81:1f:80:
d3:77:3a:07:3c:6c:66:1d:d1:aa:e9:ed:87:71:d8:38:b4:b9:
80:ed:3f:54:88:c9:6d:d7:e2:82:9f:bb:14:90:20:9b:30:71:
f9:63:dd:96:b0:9f:57:d2:0a:da:dc:cb:28:77:a0:9a:06:47:
a5:82:76:cc:f0:45:87:b1:31:93:ca:ec:70:ec:e3:bb:29:d2:
af:f3:ca:f4:37:97:8a:8c:85:5b:a8:ca:3f:db:3d:8d:a3:88:
4d:02:d0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:15:49 2025 by rpki-client