Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
File: 30KpUq9vhPKfHRse6XQbBXKGh4Q.mft (raw, json)
Hash identifier: 609Mk3DyGwQS/4UslFFZojjYfCd0HQblpCYxA7qf08o=
Subject key identifier: 9B:10:BC:3B:B6:CA:55:70:E0:33:CA:D1:FC:C9:51:F9:B3:DA:2A:68
Authority key identifier: DF:42:A9:52:AF:6F:84:F2:9F:1D:1B:1E:E9:74:1B:05:72:86:87:84
Certificate issuer: /CN=df42a952af6f84f29f1d1b1ee9741b0572868784
Certificate serial: 019682472DEA498F085D4F4AAD90F0E93CF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
Manifest number: 10A4
Signing time: Tue 29 Apr 2025 16:00:24 +0000
Manifest this update: Tue 29 Apr 2025 16:00:24 +0000
Manifest next update: Wed 30 Apr 2025 16:00:24 +0000
Files and hashes: 1: 30KpUq9vhPKfHRse6XQbBXKGh4Q.crl (hash: e0Lc8/Unq6ufhKU696wEpEGCXNILffHfbq0J/30m784=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:47:2d:ea:49:8f:08:5d:4f:4a:ad:90:f0:e9:3c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df42a952af6f84f29f1d1b1ee9741b0572868784
Validity
Not Before: Apr 29 16:00:24 2025 GMT
Not After : Apr 30 16:00:24 2025 GMT
Subject: CN=9b10bc3bb6ca5570e033cad1fcc951f9b3da2a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:df:63:77:5c:c0:6b:f9:68:c7:92:1c:0d:51:
5a:cb:6a:e4:80:51:a0:13:aa:6a:16:87:c1:93:98:
cd:2f:c7:7e:03:ea:11:f9:30:82:eb:18:18:b6:0d:
ed:be:e2:91:c9:a3:5a:58:15:57:f9:22:63:60:33:
34:2d:bd:43:ca:e1:d7:5f:5e:c5:42:4e:2d:41:15:
48:75:8d:72:3f:6d:f8:98:41:0a:5d:63:67:b3:12:
84:66:bb:f0:79:65:a4:59:0c:67:aa:f2:88:9e:24:
25:18:ce:90:9e:7f:0b:e5:c6:d1:89:aa:fe:3e:72:
ce:da:cb:10:cc:c2:1c:a5:a7:a4:d5:dc:d3:64:ba:
25:da:7a:e0:ac:91:3c:67:d8:d1:be:16:cd:f7:13:
81:ed:7e:bb:d7:0d:94:a6:03:2b:32:b8:30:d0:19:
95:a9:de:e8:d4:43:ed:b7:5f:57:27:c9:08:1a:b9:
5c:2d:2d:2d:5e:2d:99:21:be:46:22:69:5c:cd:d4:
19:a5:1f:9e:97:6f:29:fc:cf:d2:90:6d:be:12:4c:
3c:93:da:a1:0b:a4:49:3d:31:7c:2b:58:ba:97:3d:
16:b1:8d:68:74:ce:18:63:44:b5:85:27:00:42:ac:
7d:96:08:4a:2a:32:6f:d9:f0:e6:22:2d:b5:4f:8f:
0f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:10:BC:3B:B6:CA:55:70:E0:33:CA:D1:FC:C9:51:F9:B3:DA:2A:68
X509v3 Authority Key Identifier:
keyid:DF:42:A9:52:AF:6F:84:F2:9F:1D:1B:1E:E9:74:1B:05:72:86:87:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a8:c1:23:f6:0d:15:ea:a1:40:a8:f5:a8:a7:6e:88:f0:99:
f8:f0:11:ba:83:7c:65:a1:e2:c4:19:60:7f:b8:c7:66:96:87:
ce:65:60:eb:7e:2e:ca:37:9e:d2:45:81:e0:9a:1a:66:e4:d7:
b6:a1:33:69:99:a5:81:3d:08:4e:ce:b4:88:68:f6:54:59:38:
a9:27:80:91:44:76:b5:3e:a6:2b:cd:02:14:dd:12:36:b9:70:
91:f7:27:4a:6c:be:48:fb:5b:52:01:be:0a:6b:65:73:f0:8a:
7e:ee:d7:19:b3:95:55:10:85:2c:82:bc:bc:fc:1a:55:ce:25:
16:58:73:75:9d:3b:64:4d:bd:86:6f:9d:76:30:d9:5b:c2:82:
da:b8:4e:b9:a3:93:62:4e:0f:39:f7:63:de:bd:af:c5:18:fe:
c3:ee:83:5d:3d:92:78:97:c4:17:c4:38:63:c8:d9:81:17:a4:
00:ae:46:5c:bb:ec:b1:81:02:90:c1:2d:c6:37:81:b6:88:10:
30:63:e0:f5:26:f6:88:9c:8d:d9:ef:05:d6:cd:3e:6a:fa:59:
40:a1:7e:39:fc:98:7a:52:c6:71:e5:27:76:45:fa:f7:b2:2e:
ed:b4:02:a3:f2:47:11:7f:9b:f0:71:10:08:83:3e:46:03:78:
bb:b1:67:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:52:37 2025 by rpki-client