Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
File: 35GEXmXk8DlPHmw_-edzL2qkb9w.mft (raw, json)
Hash identifier: g9ENQeUvxqzjck5AwVyXNIOLg2zQmsNg5s5BLywHEUw=
Subject key identifier: 10:19:80:3E:8F:96:54:46:F5:E1:95:31:C8:FA:65:45:3F:95:6F:BE
Authority key identifier: DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC
Certificate issuer: /CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc
Certificate serial: 01976A05C728CAA0A2D954CD89AD8D292106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
Manifest number: 0F74
Signing time: Fri 13 Jun 2025 16:00:52 +0000
Manifest this update: Fri 13 Jun 2025 16:00:52 +0000
Manifest next update: Sat 14 Jun 2025 16:00:52 +0000
Files and hashes: 1: 35GEXmXk8DlPHmw_-edzL2qkb9w.crl (hash: LgXy+C0uXccqIMN2dtV7rgvVWmowcnSfeNCa2aJ+2b4=)
2: ZrChAnEIC7XkkvtmNcAU0NitmrI.roa (hash: 99wLAgfUwposvYSU46TWayIZqmg33XG3e0RoKs9DbJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:c7:28:ca:a0:a2:d9:54:cd:89:ad:8d:29:21:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc
Validity
Not Before: Jun 13 16:00:52 2025 GMT
Not After : Jun 14 16:00:52 2025 GMT
Subject: CN=1019803e8f965446f5e19531c8fa65453f956fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6f:0d:7a:fe:5d:d7:e1:6a:82:40:50:6e:d7:
18:cc:7d:0c:67:06:7e:a3:31:5f:32:e8:47:2d:47:
3d:70:2e:b9:0f:49:60:e5:f9:a0:86:63:d8:33:e5:
50:04:d5:f7:d5:12:fa:39:61:65:d1:21:33:86:fd:
d1:0e:56:1d:6a:04:5d:85:ae:a0:1b:85:6f:be:dc:
80:48:c3:4c:3c:e1:bb:cf:98:3a:04:1d:f5:43:29:
08:8b:14:fa:a5:bb:01:9d:3d:0d:cd:09:ad:5b:61:
2c:0f:25:09:55:b8:48:e2:b9:f7:06:7e:db:b7:b4:
79:23:b2:99:18:83:b0:3f:a9:da:34:90:22:bc:0b:
db:c1:cd:2a:36:25:56:61:19:64:b5:3b:e5:c2:71:
4d:ef:c7:a7:56:39:e4:01:39:23:00:dd:55:f6:12:
8d:6c:61:c4:5a:22:70:1f:d4:07:d6:08:32:39:ad:
3f:c1:70:4a:88:3a:19:0b:d9:34:67:87:d5:d1:42:
14:38:31:d0:4e:14:4c:bd:2d:e4:89:5b:e4:37:b1:
01:40:b3:85:38:3d:dd:71:29:8d:d7:73:a2:09:16:
b6:ed:73:44:04:65:c5:3a:36:1c:f7:a8:2c:35:18:
22:8d:2e:b7:43:ff:d8:65:f0:2e:8a:6f:05:f9:e7:
1e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:19:80:3E:8F:96:54:46:F5:E1:95:31:C8:FA:65:45:3F:95:6F:BE
X509v3 Authority Key Identifier:
keyid:DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a8:e8:82:92:91:57:e0:9c:22:70:42:91:46:8f:74:b5:8e:
99:b7:89:f4:c0:4b:00:31:57:b8:db:3e:55:6e:cc:78:fc:1f:
91:e8:43:ef:b2:82:d1:e7:51:2e:16:b6:8e:39:15:6c:6d:49:
08:98:7d:37:5a:7f:29:19:f2:9e:9b:35:d7:02:56:35:35:2d:
f8:21:24:69:21:bc:c8:dc:d5:84:0d:50:be:8f:bf:eb:79:e8:
05:07:29:fd:89:4b:2a:0d:ac:f2:fc:1c:00:1e:f5:57:35:18:
31:04:dd:d4:1a:a2:33:87:0f:ee:76:ae:9f:65:3f:ac:a3:de:
c1:6f:1d:0e:91:66:eb:16:a9:33:1e:df:fa:44:a1:4b:17:d6:
96:0e:7c:3d:b9:89:70:f0:f7:7f:6a:e5:bb:7f:01:56:84:76:
64:5a:c4:59:bb:ea:f6:4a:36:dc:f7:b1:47:4b:af:e7:48:fc:
c6:66:8a:b5:ce:a8:bd:94:a0:4e:e9:4d:47:24:fb:ea:89:7c:
f8:84:b1:12:4d:7e:97:44:a0:ff:46:cc:d3:fc:64:03:2b:cf:
bb:a8:bd:0f:9b:f6:9a:6a:d7:3f:13:d9:14:1f:d8:30:e4:98:
04:96:93:a9:94:76:58:82:c1:35:b2:7c:a2:6f:d7:78:e1:5f:
d4:4f:e1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:57:40 2025 by rpki-client