Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
File: T9a30KYwNXvDweDN2gbcqIo0Y-w.mft (raw, json)
Hash identifier: Kmk6wr0RiSg8YaSdA90M6bVLT2kD6G2WrnpmekGON9c=
Subject key identifier: 8E:FA:D4:49:4A:12:1C:E3:FC:30:CD:86:E6:52:E5:A1:D6:00:7A:FE
Authority key identifier: 4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC
Certificate issuer: /CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec
Certificate serial: 019749685A0D58B6E22EA31BB9C5F90488BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
Manifest number: 046B
Signing time: Sat 07 Jun 2025 08:01:04 +0000
Manifest this update: Sat 07 Jun 2025 08:01:04 +0000
Manifest next update: Sun 08 Jun 2025 08:01:04 +0000
Files and hashes: 1: T9a30KYwNXvDweDN2gbcqIo0Y-w.crl (hash: xcn5c43knfpACozx4Ugc1BDvgnK2Ta1J2Dkr9pxMhe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:5a:0d:58:b6:e2:2e:a3:1b:b9:c5:f9:04:88:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec
Validity
Not Before: Jun 7 08:01:04 2025 GMT
Not After : Jun 8 08:01:04 2025 GMT
Subject: CN=8efad4494a121ce3fc30cd86e652e5a1d6007afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3c:53:67:05:45:c1:da:ca:03:65:8b:b5:98:
38:4f:34:e8:9b:c9:ac:ed:6c:10:4d:58:2b:55:49:
d7:a4:0d:d3:7b:ea:85:f3:74:c0:e6:98:07:b7:bc:
b6:fe:87:f0:69:6c:5c:61:de:fb:35:4e:ee:d7:cd:
60:04:23:55:9a:db:16:d1:f1:8e:c9:bb:88:1c:f3:
3c:be:15:5f:6a:07:1a:98:63:71:2b:be:99:84:c1:
cc:bc:24:89:d2:70:a2:48:3a:14:8f:37:f0:97:07:
34:34:dc:8f:20:65:99:1f:c8:d2:32:7e:70:7b:f3:
04:37:3f:2d:89:c4:5d:1a:34:a0:2d:86:72:f9:a1:
a4:31:4d:28:ab:7c:59:be:26:dd:a6:91:28:15:94:
72:59:f2:a3:71:69:b7:62:7e:a5:a4:e6:20:db:5a:
31:c0:5e:55:88:d3:7b:8c:e9:6e:7b:0b:a9:b0:db:
56:4b:4b:59:5a:65:c1:fe:21:7c:6e:3c:be:62:66:
ac:3a:bd:9f:f9:40:a8:f0:a7:5e:57:09:24:ce:8f:
2a:a4:8f:fc:e1:f3:8e:0b:9c:bb:c1:e3:e9:e8:72:
f5:1d:f9:fc:ff:0a:c6:7c:5a:54:1e:dd:0e:9b:a2:
5d:03:3e:a2:79:50:2a:36:e0:bf:6b:15:14:b4:1f:
b3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FA:D4:49:4A:12:1C:E3:FC:30:CD:86:E6:52:E5:A1:D6:00:7A:FE
X509v3 Authority Key Identifier:
keyid:4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e7:4f:ba:f4:fb:fc:2e:15:55:ca:f8:34:b6:de:ec:64:38:
86:0f:ff:f1:cd:c6:52:66:d1:f8:3d:ab:fc:0a:10:9d:77:ee:
d9:49:50:d7:01:d6:31:4a:f8:18:7c:96:c7:fe:79:92:e9:ff:
62:71:a8:b8:4b:18:3c:dc:04:37:6e:16:35:70:7c:ce:21:8c:
5c:22:f7:70:8a:35:5e:ae:dc:55:4c:01:e0:ad:25:96:72:0f:
f3:e4:77:48:a3:c4:fc:73:c9:e7:fe:c3:d9:89:79:99:ef:e7:
61:fd:ac:40:18:70:fa:00:5a:c3:2d:c2:21:b3:e7:ce:45:35:
a1:33:93:29:f8:b3:36:81:40:52:20:95:e6:f3:0a:91:65:4a:
fa:d1:96:0b:e8:b2:09:00:68:83:20:85:d1:8e:c4:75:37:53:
06:fa:d7:c7:e3:c6:c9:dd:74:86:1a:07:4c:b0:76:a3:b0:e7:
46:b8:e4:85:9f:a4:2e:51:95:05:7a:70:0c:03:c1:ab:58:0a:
7b:a3:be:c0:c9:f5:27:38:b7:0e:67:65:ef:7f:96:dd:a3:9b:
53:47:f2:98:72:1f:ae:25:98:46:df:0f:02:b4:39:dd:67:a5:
c6:f4:85:2d:98:7f:2f:0d:3b:71:eb:ee:1e:e5:6a:fd:05:c6:
51:3f:d8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:37:14 2025 by rpki-client