Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
File: 35GEXmXk8DlPHmw_-edzL2qkb9w.mft (raw, json)
Hash identifier: WkVqGOidLqyDZnRymY08yUbwPd2KYK03/2ru9Ts8Z14=
Subject key identifier: BF:AF:5B:CF:89:41:92:F7:ED:27:EF:0B:BA:CC:85:74:A4:36:6D:31
Authority key identifier: DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC
Certificate issuer: /CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc
Certificate serial: 01987486F7D93BE1AB6D8117559D5C8F1B31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
Manifest number: 0FFE
Signing time: Mon 04 Aug 2025 10:00:58 +0000
Manifest this update: Mon 04 Aug 2025 10:00:58 +0000
Manifest next update: Tue 05 Aug 2025 10:00:58 +0000
Files and hashes: 1: 35GEXmXk8DlPHmw_-edzL2qkb9w.crl (hash: wiYc2wrLo90eMe0+MJZd8WY2Qh32z31wkYby1ntATSU=)
2: ZrChAnEIC7XkkvtmNcAU0NitmrI.roa (hash: 99wLAgfUwposvYSU46TWayIZqmg33XG3e0RoKs9DbJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:f7:d9:3b:e1:ab:6d:81:17:55:9d:5c:8f:1b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc
Validity
Not Before: Aug 4 10:00:58 2025 GMT
Not After : Aug 5 10:00:58 2025 GMT
Subject: CN=bfaf5bcf894192f7ed27ef0bbacc8574a4366d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a3:e3:cb:2b:c7:56:bc:ea:2c:9a:81:5d:13:
6e:db:84:bf:bd:e2:fe:81:8a:0f:92:2f:2d:e6:1b:
c6:5a:fd:c3:25:a2:53:a8:2b:1c:54:e3:31:de:91:
3b:d6:c2:c3:47:04:33:be:2f:66:fa:1c:7d:81:28:
b4:fa:2c:ff:a3:5e:89:ba:b3:7f:3b:01:f9:d0:74:
4d:c1:da:6f:f9:71:c2:11:3c:5c:59:60:f1:3c:02:
3e:06:cd:62:0f:d7:40:f9:40:93:ad:f3:6c:40:19:
fb:fc:3b:c3:98:30:b3:b7:78:cb:33:2e:7f:98:b0:
7e:cc:39:b2:ba:5d:a4:01:ff:40:57:3e:6a:71:15:
dd:f3:cb:bc:5c:70:8c:13:4e:62:57:7a:69:be:21:
bd:4f:d0:36:4f:7a:ba:d8:00:a5:51:33:f8:1e:54:
3d:17:08:25:3a:ff:d9:46:b8:c4:2d:c4:ac:b7:64:
e4:ec:90:4c:71:51:d9:b0:81:fd:65:8f:a7:c0:e4:
9f:a0:32:88:b2:4e:74:88:71:15:4c:5a:fb:3d:b9:
63:94:b8:07:da:29:c6:83:2f:35:7c:30:b4:eb:09:
c0:51:7b:df:8b:d3:92:4d:7e:24:d1:df:d7:e5:43:
7d:3d:d5:f2:68:11:22:c1:cb:19:57:85:d4:32:a8:
f6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AF:5B:CF:89:41:92:F7:ED:27:EF:0B:BA:CC:85:74:A4:36:6D:31
X509v3 Authority Key Identifier:
keyid:DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7b:20:50:4d:6c:a6:5d:d1:fe:39:56:01:64:2f:b8:a3:41:
2f:3f:c9:8e:3c:f2:19:e0:25:03:d1:56:5b:6c:1d:83:ea:2c:
9d:4b:d8:63:2b:71:17:f5:42:d0:85:27:ff:10:bd:3d:22:04:
4c:e5:f3:89:f3:16:f6:4f:50:8e:07:a1:1d:9e:73:ea:91:34:
21:8d:1b:0b:1e:e9:23:5c:d4:76:17:2c:3c:31:b2:3c:f2:8e:
cd:d3:70:e2:31:42:fd:8b:a7:ed:0b:ce:75:08:45:9a:80:df:
f3:e7:1d:b9:f1:ea:56:1d:a3:ad:89:35:bd:94:3b:57:66:2e:
de:69:2e:f1:34:a9:8d:35:c4:94:62:a0:f4:9b:a4:9a:23:89:
f2:a0:9d:84:2f:d9:cd:5b:d8:69:56:ea:20:a5:4b:63:c2:33:
a8:aa:0a:6c:55:a9:f8:87:f8:48:3a:01:4e:2d:41:7b:a2:2a:
67:9d:e7:ea:cf:75:78:5b:78:d5:b4:c6:cc:d5:d8:d9:12:88:
5c:7a:3c:6b:ee:52:82:02:31:21:0f:01:bc:b3:f2:b0:12:4b:
ea:83:7a:5c:aa:ae:81:de:ea:45:57:37:89:d0:a1:c4:84:cf:
f7:a9:a8:c9:e9:6a:7c:3b:9f:5f:a2:83:96:cd:cf:ef:c4:d4:
d7:fd:11:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:27 2025 by rpki-client