Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
File: T9a30KYwNXvDweDN2gbcqIo0Y-w.mft (raw, json)
Hash identifier: OJzwBIk3wNOxvxR/TstuMWpKaEoTRxAOOCJB3BNpbR0=
Subject key identifier: 78:E1:07:93:37:45:FC:FB:4C:11:7E:CA:99:5C:32:AA:A5:50:60:5F
Authority key identifier: 4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC
Certificate issuer: /CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec
Certificate serial: 0199228C48EED7E2D4E67FF3E51ABB87B681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
Manifest number: 0560
Signing time: Sun 07 Sep 2025 05:00:42 +0000
Manifest this update: Sun 07 Sep 2025 05:00:42 +0000
Manifest next update: Mon 08 Sep 2025 05:00:42 +0000
Files and hashes: 1: T9a30KYwNXvDweDN2gbcqIo0Y-w.crl (hash: PFxdStbZJbhO7v2PmhqdocwD0zKyoYxoeOhtzknaKzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:48:ee:d7:e2:d4:e6:7f:f3:e5:1a:bb:87:b6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec
Validity
Not Before: Sep 7 05:00:42 2025 GMT
Not After : Sep 8 05:00:42 2025 GMT
Subject: CN=78e107933745fcfb4c117eca995c32aaa550605f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0a:67:df:74:26:44:d0:f6:b9:58:8d:ba:86:
f6:e3:9a:17:1b:97:71:34:cf:73:5f:b1:45:75:7b:
53:6f:b9:69:b6:0c:47:50:b9:b3:d9:01:4e:11:bc:
02:57:86:e9:ee:8c:66:a4:c4:aa:e1:a4:3b:1d:09:
2c:cd:73:75:f1:42:7a:ae:2e:87:a7:dc:15:71:7e:
35:eb:e0:23:39:63:33:fe:13:8a:d2:55:99:cb:d6:
d2:6e:f9:6d:c0:9e:2d:21:70:a9:96:91:58:72:00:
59:5c:2f:0a:fd:db:88:f3:72:48:bd:c9:33:13:ae:
83:e1:98:57:96:ae:e6:1b:90:3b:fe:ae:3c:30:a3:
66:6f:26:e4:da:05:64:45:62:70:fa:69:0c:ea:58:
49:93:37:2e:ab:ee:6e:87:df:51:c9:2d:a2:05:fd:
cd:55:9c:90:8c:e6:5a:04:40:c4:04:06:9f:c8:ac:
97:7d:c5:7b:87:d7:8f:ab:9e:2d:8e:bc:bb:83:e6:
9c:45:81:49:3c:6e:7c:b6:38:8c:f7:e5:68:13:42:
56:24:fb:30:97:04:a5:ba:83:06:5d:51:45:75:ff:
1b:64:d0:a3:5d:73:26:17:8e:a5:3c:eb:ca:2f:6d:
6f:9a:82:01:69:33:9c:a2:a0:0c:a4:60:12:b9:6e:
ee:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E1:07:93:37:45:FC:FB:4C:11:7E:CA:99:5C:32:AA:A5:50:60:5F
X509v3 Authority Key Identifier:
keyid:4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:53:32:3b:88:6e:6b:d7:9b:55:57:e6:7f:4d:7f:0f:27:d9:
4d:b8:6d:5e:8b:7e:94:9a:59:33:65:71:83:4a:8b:20:03:0e:
3d:ee:ca:26:60:c0:ef:5f:22:67:51:a1:37:39:3e:2f:bd:62:
1b:10:0b:1c:3a:f6:63:7a:f2:57:db:07:ab:81:58:d1:f3:56:
31:28:b7:a4:24:25:25:8b:38:14:5a:31:b7:fe:b3:8c:92:9c:
14:8c:fb:55:37:0f:6e:76:56:63:f4:71:43:86:36:bb:8e:3e:
79:0c:3e:d7:f4:15:e7:59:46:71:05:b0:e5:47:d5:50:3d:3f:
cc:bc:1a:eb:f3:d6:d5:41:f2:03:ab:6a:0d:eb:0a:70:06:18:
97:57:4d:13:f2:e2:6d:1c:db:92:81:71:ab:25:ff:ac:99:4a:
34:95:84:89:bc:03:22:d1:49:cd:d4:4f:ae:17:b5:3b:97:53:
64:79:b8:f3:87:26:57:1b:a2:56:db:71:ba:e6:d9:b4:81:a6:
9e:6e:06:f3:d9:87:d7:5c:96:cd:91:64:c0:84:27:93:a0:76:
90:ae:46:47:21:73:be:2c:9b:ff:44:c9:7c:58:41:21:10:4e:
b8:e4:3b:3a:e6:12:c2:9b:86:57:84:50:f1:29:38:5a:bd:cc:
4e:c4:06:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:43:33 2025 by rpki-client