Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
File: T9a30KYwNXvDweDN2gbcqIo0Y-w.mft (raw, json)
Hash identifier: t93YvWT+PZSf8u/MG8ZL40CtpLv3gG8Vb2IT0sob97k=
Subject key identifier: 04:A5:14:1D:FB:C1:59:3C:01:42:07:A3:2F:03:75:25:93:ED:A3:5D
Authority key identifier: 4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC
Certificate issuer: /CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec
Certificate serial: 019781696E50674E32A9BDA8B12CE2451AFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
Manifest number: 0488
Signing time: Wed 18 Jun 2025 05:00:59 +0000
Manifest this update: Wed 18 Jun 2025 05:00:59 +0000
Manifest next update: Thu 19 Jun 2025 05:00:59 +0000
Files and hashes: 1: T9a30KYwNXvDweDN2gbcqIo0Y-w.crl (hash: /oA2jSgyYs2QGZt5ckMp3WW+tRdk7APJ/p4esswooC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:69:6e:50:67:4e:32:a9:bd:a8:b1:2c:e2:45:1a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec
Validity
Not Before: Jun 18 05:00:59 2025 GMT
Not After : Jun 19 05:00:59 2025 GMT
Subject: CN=04a5141dfbc1593c014207a32f03752593eda35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d3:80:0d:32:4c:b6:6b:f7:a5:ff:cd:04:39:
66:fc:fb:90:37:aa:79:e1:10:84:eb:3a:7d:4a:d1:
ef:6f:93:8e:ea:b6:4c:91:1d:97:d2:fc:c4:55:18:
a8:c4:84:db:55:e9:ac:d7:29:67:86:48:c9:dc:2b:
c6:6a:03:59:b1:89:bf:bb:2e:75:0a:ca:8c:25:09:
5d:dd:83:81:ac:e9:75:ed:bb:f1:77:5d:27:93:24:
d7:4d:8d:1c:2a:ca:cc:61:8f:ba:e8:df:b5:8c:03:
20:36:e8:76:a3:ef:72:8a:75:49:0e:5a:c2:bb:d2:
95:52:9e:71:22:1c:4f:ca:fe:c2:e8:0f:ce:dd:93:
29:8f:f7:1c:60:b1:c5:00:40:9b:54:3b:c5:59:3d:
db:e4:9b:9c:04:c2:fc:6a:15:ce:d3:79:28:ac:21:
e1:54:1f:24:cf:f1:af:af:9c:71:70:cf:e1:0d:bf:
84:2c:20:84:18:1a:2d:44:84:82:bd:f6:67:f7:04:
50:87:8b:2f:90:1e:ff:28:f5:1a:a6:94:a8:a9:dd:
2f:5e:09:64:51:98:cb:2d:7c:45:ca:21:fa:f7:78:
5c:20:00:db:6c:26:e9:cf:50:71:84:6c:72:49:34:
d4:38:94:10:1e:d7:81:bf:13:e0:63:df:f5:80:d2:
38:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A5:14:1D:FB:C1:59:3C:01:42:07:A3:2F:03:75:25:93:ED:A3:5D
X509v3 Authority Key Identifier:
keyid:4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e2:be:5b:c0:69:c1:2d:49:5d:1f:cf:ef:90:de:9b:f7:2a:
06:c7:9a:46:91:d2:8a:ed:28:b9:df:b4:63:d2:56:de:36:34:
ac:f5:2b:df:80:26:cb:5f:89:f7:12:7f:16:6e:86:78:82:48:
59:7a:5e:cd:b2:ca:db:d3:35:32:12:d9:3e:79:01:89:b7:11:
14:1f:42:a4:30:a5:78:ff:b7:19:1d:6c:0d:34:14:f0:d9:0a:
f9:30:ed:bd:48:5a:f8:9d:62:19:4d:a4:8f:d5:6d:75:a6:a7:
28:11:e6:46:ca:5c:a0:23:19:83:d1:65:14:95:d4:28:b7:9b:
df:1d:3f:fc:c5:be:7b:45:4f:e3:14:3e:55:bd:e4:ff:ea:2b:
9e:7a:a0:1a:be:84:b5:d6:ae:0d:07:02:22:7e:bb:8b:5b:fa:
c3:43:91:ee:01:17:7f:76:08:51:20:7d:ee:c3:5e:f7:e9:3e:
50:71:76:6c:66:1b:15:e0:80:64:6c:8d:a8:17:4b:03:38:82:
3d:93:63:c4:2c:98:c6:f7:ca:cb:93:99:68:dc:2c:be:43:26:
43:25:50:dc:84:c4:d8:1a:76:46:3e:18:88:b3:67:02:29:16:
71:29:83:56:74:b0:60:df:d3:a1:63:97:bd:12:ca:79:4e:98:
7a:e2:f2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 14:13:35 2025 by rpki-client