Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
File: T9a30KYwNXvDweDN2gbcqIo0Y-w.mft (raw, json)
Hash identifier: u/oRCp03RqsRjB5WRz4FYuEA+h4nyVmShJTKxImY+6Y=
Subject key identifier: B1:B4:DC:5C:7F:CC:70:24:8A:C1:3C:71:BB:E3:33:FF:34:82:A8:97
Authority key identifier: 4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC
Certificate issuer: /CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec
Certificate serial: 019A729375075C6C692EF3086F3AAA3B9E21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
Manifest number: 060E
Signing time: Tue 11 Nov 2025 11:00:57 +0000
Manifest this update: Tue 11 Nov 2025 11:00:57 +0000
Manifest next update: Wed 12 Nov 2025 11:00:57 +0000
Files and hashes: 1: T9a30KYwNXvDweDN2gbcqIo0Y-w.crl (hash: PwOuum0ygnPYzaSYZhniqvSN8S3tc9Y+cIBk6x45Ncw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:75:07:5c:6c:69:2e:f3:08:6f:3a:aa:3b:9e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec
Validity
Not Before: Nov 11 11:00:57 2025 GMT
Not After : Nov 12 11:00:57 2025 GMT
Subject: CN=b1b4dc5c7fcc70248ac13c71bbe333ff3482a897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bb:26:b8:08:0c:58:34:79:23:2b:a0:b3:a8:
c8:d7:ea:23:39:41:d8:64:c5:a0:ee:21:2c:c1:2f:
86:1d:14:ae:f7:6c:85:c0:8b:bb:b4:a2:41:55:d7:
03:41:dc:ff:ac:b3:b1:80:23:71:2d:67:e5:6a:82:
5d:f6:17:42:1f:32:93:ec:9b:fd:b8:09:ff:82:9e:
2c:e7:56:f5:3c:c8:b2:49:bd:43:89:c3:26:4f:4b:
97:42:47:eb:6e:08:a1:46:10:4c:b9:90:8a:5e:e7:
17:c1:df:b3:ea:c1:0c:a6:1a:b2:65:93:dd:24:34:
10:05:f4:06:bc:17:08:dc:60:ad:9d:f6:f0:64:79:
b0:50:32:b1:2b:35:2e:f0:a1:65:cd:71:ed:03:ba:
53:cc:ca:92:37:d9:50:25:ba:97:8e:31:ed:3d:26:
09:f0:4f:18:a9:08:f2:e1:5b:cf:96:ec:65:a5:04:
4e:09:01:2a:5c:d6:e2:e5:f8:b9:3f:21:3b:47:41:
7a:96:ed:ab:98:e6:89:5c:8d:f4:a9:b0:89:be:d9:
8c:69:10:1c:28:aa:f7:e0:7f:49:b3:e4:49:1f:c0:
36:ec:94:38:42:71:02:c8:c6:cb:1b:1b:f4:75:b0:
b1:c2:e8:96:4b:5f:5e:a2:44:b3:82:1d:80:bb:65:
60:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B4:DC:5C:7F:CC:70:24:8A:C1:3C:71:BB:E3:33:FF:34:82:A8:97
X509v3 Authority Key Identifier:
keyid:4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f2:64:04:ae:14:b7:37:80:d1:05:ed:2c:01:4f:49:fc:8b:
0e:5c:fa:95:d7:34:1c:b0:d8:eb:a3:4f:5f:8c:9c:f9:4c:23:
90:a8:ab:e7:51:a6:49:d0:13:9e:61:a5:8f:0b:3d:48:a2:fa:
b6:c7:5b:3b:94:6f:e3:bf:c4:b5:f3:c1:0c:94:e8:dd:da:52:
40:2a:bd:da:65:2b:63:dc:b9:f7:3a:34:3b:67:3d:1a:91:65:
43:f8:9d:ae:83:0c:db:bf:0f:3a:15:b0:17:41:b2:27:e1:74:
d9:40:8e:be:ea:f9:df:cb:6b:16:59:94:43:94:80:b3:ab:d1:
04:b4:6e:27:9f:63:98:c6:c6:fb:41:41:ea:7f:6b:f2:78:d5:
21:90:91:f1:3e:19:63:1a:fb:4a:3c:75:f8:bc:83:c7:83:19:
36:c2:b6:e3:ed:21:f6:e2:14:3e:d3:e8:43:6d:9a:d4:20:2b:
f0:0b:42:fb:89:96:53:cf:97:d4:64:bf:72:7a:78:ae:e8:4c:
2a:95:24:5d:90:ee:9c:11:9f:2f:bd:d0:82:93:f4:f2:4a:f6:
21:19:fe:7e:b2:79:1d:2c:1a:9c:e7:f8:4c:69:64:a4:cb:ab:
0d:a9:f2:86:7f:4e:97:2e:ad:1b:64:56:89:0a:43:a5:b2:b9:
35:3e:a6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:42 2025 by rpki-client