Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
File: 30KpUq9vhPKfHRse6XQbBXKGh4Q.mft (raw, json)
Hash identifier: e7kbmf0KngyOeUNTuvjKSQEeaSs527ZnD/pBCMS1lM8=
Subject key identifier: 5A:89:F2:30:FD:08:75:2C:53:0A:0E:97:1F:AD:1A:23:26:21:03:2F
Authority key identifier: DF:42:A9:52:AF:6F:84:F2:9F:1D:1B:1E:E9:74:1B:05:72:86:87:84
Certificate issuer: /CN=df42a952af6f84f29f1d1b1ee9741b0572868784
Certificate serial: 01987E2EDBF3D174E317D419E5BED1D8456A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
Manifest number: 11AB
Signing time: Wed 06 Aug 2025 07:00:56 +0000
Manifest this update: Wed 06 Aug 2025 07:00:56 +0000
Manifest next update: Thu 07 Aug 2025 07:00:56 +0000
Files and hashes: 1: 30KpUq9vhPKfHRse6XQbBXKGh4Q.crl (hash: USubOtiDd1Ac+xmcLKN+RG1g3crJzjVqNwSYrEKYaxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:db:f3:d1:74:e3:17:d4:19:e5:be:d1:d8:45:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df42a952af6f84f29f1d1b1ee9741b0572868784
Validity
Not Before: Aug 6 07:00:56 2025 GMT
Not After : Aug 7 07:00:56 2025 GMT
Subject: CN=5a89f230fd08752c530a0e971fad1a232621032f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e2:52:a8:35:95:cf:8f:22:12:39:e2:fb:df:
af:5b:7f:32:37:24:e6:a5:43:c5:7f:d1:5b:bc:e9:
4e:1f:8b:75:12:eb:af:f8:9d:ea:d8:bc:b9:a9:a9:
ac:7e:a0:70:d5:76:7a:5e:73:10:9c:1c:b4:a4:7a:
df:39:9a:53:2a:cf:47:6c:19:1e:47:e2:8e:69:a7:
62:ca:be:9a:2f:a8:12:d5:5e:2e:17:ae:c6:aa:98:
a6:88:44:9b:82:b0:9f:04:4e:26:fb:c9:8f:90:bb:
9e:bf:59:6e:bc:44:42:00:b9:1a:54:e9:fc:7a:97:
ee:17:52:38:aa:de:ef:47:25:7e:11:55:64:3c:ad:
df:c7:c5:0e:90:04:c5:d5:34:67:f9:e4:d3:f2:d5:
80:7c:c1:90:05:cf:ee:78:f1:68:75:38:49:4e:90:
c7:fe:d8:06:c9:63:ed:b7:c0:16:80:ca:42:43:9f:
9f:f7:43:a0:71:ed:e8:15:ad:0f:e7:cb:2f:09:89:
32:56:34:cb:81:d6:e5:e6:22:88:a7:1d:1c:9a:a6:
61:55:7b:a0:a2:b4:06:38:78:a0:6b:54:a3:43:ff:
55:01:1e:4a:9d:63:cb:fb:2f:40:55:24:c1:12:ed:
56:77:b0:06:86:03:35:78:20:34:b6:54:11:3d:0a:
bf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:89:F2:30:FD:08:75:2C:53:0A:0E:97:1F:AD:1A:23:26:21:03:2F
X509v3 Authority Key Identifier:
keyid:DF:42:A9:52:AF:6F:84:F2:9F:1D:1B:1E:E9:74:1B:05:72:86:87:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:13:41:a3:75:64:4e:22:d3:51:a8:d6:5d:01:99:58:b1:51:
4d:27:32:62:d5:f7:88:4d:5b:55:0a:47:31:3c:fa:54:01:5a:
5a:ee:b8:22:8a:a1:56:fb:cc:7f:9d:3c:20:63:08:3d:a6:4d:
d6:ba:cf:a2:ab:6f:92:00:73:c9:50:bc:1e:f0:85:63:1e:12:
91:60:3d:5e:27:0a:da:0b:67:bb:34:00:25:f5:54:63:fb:4d:
d4:cd:a2:20:ce:4a:30:e7:37:1e:3f:9c:3b:4a:a4:8e:36:1d:
51:5a:d0:d1:ee:19:6e:3f:37:9b:29:24:59:81:94:25:fe:0f:
70:82:6c:b8:15:0a:e5:e1:ee:1b:b1:a8:c7:30:a8:3c:ba:b8:
f7:7f:bf:44:1c:a0:86:cd:47:e8:dc:70:62:59:8a:1d:00:36:
0d:19:b2:4e:44:65:3f:8f:c1:1f:cc:3c:74:ce:a6:3e:2e:2f:
88:2e:f4:6d:83:19:c6:a7:32:0c:37:33:c8:fb:23:bb:5a:ab:
00:43:12:5a:c0:74:6b:bb:69:c4:75:60:a3:3d:38:7b:ab:2a:
ae:ec:bc:23:ec:97:2d:94:c3:97:ba:05:94:cf:c8:55:9a:55:
34:0b:86:66:ae:f9:8c:4c:cd:07:bf:6a:b8:e5:81:e2:40:41:
44:3c:60:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:11:32 2025 by rpki-client