
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
File: T9a30KYwNXvDweDN2gbcqIo0Y-w.mft (raw, json)
Hash identifier: jkdxMc6m5kY4BEYaa2jlABJ7kwDmWwhZIZ8u4lB4NeI=
Subject key identifier: 25:6F:6D:95:33:97:9E:6D:3F:4F:AD:B9:F7:18:58:86:7C:96:9B:4F
Authority key identifier: 4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC
Certificate issuer: /CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec
Certificate serial: 0197B77C9060280BB70B62C8D6548B82FA56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
Manifest number: 04A4
Signing time: Sat 28 Jun 2025 17:01:23 +0000
Manifest this update: Sat 28 Jun 2025 17:01:23 +0000
Manifest next update: Sun 29 Jun 2025 17:01:23 +0000
Files and hashes: 1: T9a30KYwNXvDweDN2gbcqIo0Y-w.crl (hash: Uo6Gm1+md7JLDvnXpjnj0Qq+FZYTyMs0PRbVfaZmnZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:90:60:28:0b:b7:0b:62:c8:d6:54:8b:82:fa:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec
Validity
Not Before: Jun 28 17:01:23 2025 GMT
Not After : Jun 29 17:01:23 2025 GMT
Subject: CN=256f6d9533979e6d3f4fadb9f71858867c969b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:76:22:05:b1:7b:cc:77:bb:73:27:5b:fb:ce:
b1:44:83:9b:41:c7:e6:b1:bd:bd:6a:88:6e:73:21:
c8:27:5d:6f:36:e7:91:11:bf:9a:33:bd:a6:92:77:
4c:83:4b:ca:42:4a:86:53:9f:d2:c6:82:31:b4:0f:
9a:fd:6c:ca:1b:17:8d:c7:22:56:43:dc:55:c6:e9:
12:28:dc:ac:c2:73:b9:a5:54:88:b4:33:ac:f8:01:
83:7b:62:02:4b:c8:be:71:be:e1:29:06:b1:03:e0:
8b:4f:30:95:dd:8f:d7:96:6f:cd:8c:13:38:21:c3:
93:9e:9f:d4:45:e8:d2:8e:2b:ec:2a:41:02:66:30:
ad:28:00:e3:de:3b:df:ff:dc:25:3c:c9:50:eb:72:
ce:70:6e:13:19:7b:88:55:60:9d:96:47:ac:76:e8:
8b:ec:8b:c1:e8:4f:f5:eb:50:d2:76:b8:e1:a1:9e:
a0:16:ea:83:f8:dd:dc:ae:5e:1a:2a:9f:23:bc:3d:
05:3b:35:23:ec:f2:5b:a6:d1:ed:94:cb:f8:1c:07:
b2:d1:ba:62:c5:85:5e:23:22:93:fd:5a:a3:a3:da:
2b:50:36:82:25:04:e5:2a:1c:e3:41:85:e7:22:aa:
f3:f0:fe:c4:68:2c:4b:db:4d:9c:7a:24:a9:51:73:
2d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6F:6D:95:33:97:9E:6D:3F:4F:AD:B9:F7:18:58:86:7C:96:9B:4F
X509v3 Authority Key Identifier:
keyid:4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d9:f4:7c:7d:39:ea:37:57:c8:4a:b5:31:d9:b6:77:83:dd:
47:82:83:92:d2:92:54:5d:33:f3:ed:d8:b2:55:8c:97:24:60:
8f:b0:eb:61:f5:fa:5a:05:01:57:50:be:21:ae:46:d1:76:fd:
fb:98:a2:5a:96:cc:1e:87:9e:17:f3:c0:3c:54:3d:82:db:09:
7b:f5:c6:b8:f7:48:80:3d:fc:a5:82:02:fe:1c:08:8b:e2:1a:
8a:88:d4:dc:da:8c:59:02:c7:f1:35:91:0c:a0:25:cd:08:a8:
00:4a:05:ce:40:3b:54:91:b3:84:53:66:7b:ff:59:7f:3f:94:
38:0f:ca:da:80:2a:bf:ac:79:c8:cd:0a:b4:b3:7e:f1:fb:f6:
c6:e3:da:77:cf:4f:64:64:e6:84:e3:ee:f1:97:73:b4:ab:59:
61:c9:24:8d:67:da:02:79:02:0f:9f:3f:db:78:86:47:bf:40:
2d:05:cf:95:3f:66:4c:aa:50:44:8a:b1:7c:c9:cd:66:50:cf:
b4:ab:1b:6d:c1:a0:99:31:c5:20:7e:5c:72:f8:46:96:c2:08:
3f:f0:b6:e5:8a:b0:1e:57:09:d2:52:84:23:11:dc:f3:df:c0:
7d:7b:5f:9e:88:69:b7:fe:16:3c:49:ff:7e:32:c5:c8:2f:00:
46:96:28:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fJBgKAu3C2LI1lSLgvpWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmZDZiN2QwYTYzMDM1N2JjM2MxZTBjZGRhMDZkY2E4OGEz
NDYzZWMwHhcNMjUwNjI4MTcwMTIzWhcNMjUwNjI5MTcwMTIzWjAzMTEwLwYDVQQD
EygyNTZmNmQ5NTMzOTc5ZTZkM2Y0ZmFkYjlmNzE4NTg4NjdjOTY5YjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunYiBbF7zHe7cydb+86xRIObQcfm
sb29aohucyHIJ11vNueREb+aM72mkndMg0vKQkqGU5/SxoIxtA+a/WzKGxeNxyJW
Q9xVxukSKNyswnO5pVSItDOs+AGDe2ICS8i+cb7hKQaxA+CLTzCV3Y/Xlm/NjBM4
IcOTnp/URejSjivsKkECZjCtKADj3jvf/9wlPMlQ63LOcG4TGXuIVWCdlkesduiL
7IvB6E/161DSdrjhoZ6gFuqD+N3crl4aKp8jvD0FOzUj7PJbptHtlMv4HAey0bpi
xYVeIyKT/Vqjo9orUDaCJQTlKhzjQYXnIqrz8P7EaCxL202ceiSpUXMteQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVvbZUzl55tP0+tufcYWIZ8lptPMB8GA1UdIwQY
MBaAFE/Wt9CmMDV7w8HgzdoG3KiKNGPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDlhMzBLWXdOWHZEd2VETjJnYmNxSW8wWS13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9mZjMxZjAtNzk2MC00ZGYxLTk4ODUt
ZDMxNDZiZmNkZGZmLzEvVDlhMzBLWXdOWHZEd2VETjJnYmNxSW8wWS13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9mZjMxZjAtNzk2MC00ZGYxLTk4ODUtZDMxNDZiZmNkZGZm
LzEvVDlhMzBLWXdOWHZEd2VETjJnYmNxSW8wWS13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaNn0fH05
6jdXyEq1Mdm2d4PdR4KDktKSVF0z8+3YslWMlyRgj7DrYfX6WgUBV1C+Ia5G0Xb9
+5iiWpbMHoeeF/PAPFQ9gtsJe/XGuPdIgD38pYIC/hwIi+IaiojU3NqMWQLH8TWR
DKAlzQioAEoFzkA7VJGzhFNme/9Zfz+UOA/K2oAqv6x5yM0KtLN+8fv2xuPad89P
ZGTmhOPu8ZdztKtZYckkjWfaAnkCD58/23iGR79ALQXPlT9mTKpQRIqxfMnNZlDP
tKsbbcGgmTHFIH5ccvhGlsIIP/C25YqwHlcJ0lKEIxHc89/AfXtfnohpt/4WPEn/
fjLFyC8ARpYoYw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:30:18 2025 by rpki-client