Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
File: M35ja6YMcU_-h1SrnQTG0e7bm4k.mft (raw, json)
Hash identifier: mKn2fM3qgzA28lu3IMDipmJisrDqLQJnY4kBBX9SUbY=
Subject key identifier: BE:0F:7D:41:96:98:47:6C:89:6D:5E:1A:C2:F0:88:3D:82:AB:88:71
Authority key identifier: 33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89
Certificate issuer: /CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89
Certificate serial: 019885B12B531E471C1A71F4C97BE5B6721E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
Manifest number: 029E
Signing time: Thu 07 Aug 2025 18:00:37 +0000
Manifest this update: Thu 07 Aug 2025 18:00:37 +0000
Manifest next update: Fri 08 Aug 2025 18:00:37 +0000
Files and hashes: 1: M35ja6YMcU_-h1SrnQTG0e7bm4k.crl (hash: Xm2lbFQ+mmkwBpAo/vDvQAK9vvEjS+0L7IWwGrgAOMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:b1:2b:53:1e:47:1c:1a:71:f4:c9:7b:e5:b6:72:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89
Validity
Not Before: Aug 7 18:00:37 2025 GMT
Not After : Aug 8 18:00:37 2025 GMT
Subject: CN=be0f7d419698476c896d5e1ac2f0883d82ab8871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ea:f9:7c:2d:69:e6:4b:b0:17:ac:93:13:af:
bd:01:93:aa:b1:a5:6b:10:7d:80:18:95:2d:b2:5d:
60:11:f6:2f:86:07:95:c0:db:4a:4a:a8:bc:3a:dc:
bb:f5:92:83:5a:fc:f7:7d:7b:eb:c5:1f:bd:9b:99:
9b:ea:c2:31:80:eb:a6:c9:b5:72:53:1e:d1:d1:04:
b7:df:60:d8:43:f8:a3:ae:aa:88:5c:e7:19:61:35:
b7:be:00:7e:1b:38:cc:fc:0f:72:95:e2:1c:4c:cd:
0d:39:f3:55:11:f0:3b:aa:3d:11:a7:09:f0:c5:2a:
dc:b0:52:c8:38:ae:fb:22:35:c3:6f:ed:ba:b0:77:
16:7d:84:4a:a7:77:f0:3d:b7:5c:d0:e4:e2:03:9d:
5e:bf:39:30:17:c5:68:c9:15:a1:6a:d2:3f:fb:82:
55:58:86:55:28:f4:c4:d3:3d:e1:44:4d:61:67:db:
f3:ab:84:ae:02:fa:ec:3a:ab:e3:1e:96:1f:ef:17:
e8:b1:15:9e:03:2a:af:79:c8:34:3f:00:9b:54:8b:
83:1b:12:c2:e7:c7:6e:94:6a:fe:9a:ae:cc:06:0f:
9e:77:82:2d:88:a7:cb:1d:71:61:2a:b5:5b:58:2f:
0b:9b:12:57:5f:00:76:f7:8c:2b:40:66:13:f5:0e:
4a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0F:7D:41:96:98:47:6C:89:6D:5E:1A:C2:F0:88:3D:82:AB:88:71
X509v3 Authority Key Identifier:
keyid:33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b0:0b:aa:89:6c:ce:95:d5:7d:17:f9:84:3a:ba:97:2c:d9:
13:d3:da:0f:4c:52:15:8a:5e:ac:fd:41:0d:b5:f2:6c:27:ea:
e8:31:33:a4:5a:bf:b5:92:99:75:b8:e6:65:56:75:59:b7:67:
d2:16:e5:5d:6a:93:b6:01:4d:77:5a:b6:76:76:25:e0:6f:8d:
d4:7b:25:e9:a3:15:c3:70:fc:8a:75:1c:86:97:67:61:70:a4:
ee:15:30:b7:4b:ad:e7:a9:b3:7d:13:62:73:17:ce:a8:ec:1a:
25:19:c3:07:c1:83:9d:f7:b5:08:d2:db:53:75:67:a5:68:ba:
92:12:14:b7:83:eb:ed:16:fb:4d:e7:45:ac:f5:ef:20:93:8e:
f1:c4:a0:37:79:10:59:94:70:f9:02:ac:82:78:03:9a:d1:65:
bb:c7:e2:07:3a:b2:85:40:fc:55:c9:13:14:9e:ba:9f:94:c8:
ce:04:24:9d:c2:04:a6:14:b8:52:ba:2c:37:d3:28:90:e7:b6:
cf:cd:ef:fb:f5:6f:90:86:31:e6:98:c9:07:52:bc:db:f5:1b:
bc:39:f4:ce:ef:82:e7:ae:e6:df:fa:0d:42:29:43:b4:74:f5:
50:40:a8:a7:a2:88:17:2e:cc:44:86:ac:66:2c:6d:39:35:66:
19:7c:5c:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiFsStTHkccGnH0yXvltnIeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzN2U2MzZiYTYwYzcxNGZmZTg3NTRhYjlkMDRjNmQxZWVk
YjliODkwHhcNMjUwODA3MTgwMDM3WhcNMjUwODA4MTgwMDM3WjAzMTEwLwYDVQQD
EyhiZTBmN2Q0MTk2OTg0NzZjODk2ZDVlMWFjMmYwODgzZDgyYWI4ODcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqer5fC1p5kuwF6yTE6+9AZOqsaVr
EH2AGJUtsl1gEfYvhgeVwNtKSqi8Oty79ZKDWvz3fXvrxR+9m5mb6sIxgOumybVy
Ux7R0QS332DYQ/ijrqqIXOcZYTW3vgB+GzjM/A9yleIcTM0NOfNVEfA7qj0Rpwnw
xSrcsFLIOK77IjXDb+26sHcWfYRKp3fwPbdc0OTiA51evzkwF8VoyRWhatI/+4JV
WIZVKPTE0z3hRE1hZ9vzq4SuAvrsOqvjHpYf7xfosRWeAyqvecg0PwCbVIuDGxLC
58dulGr+mq7MBg+ed4ItiKfLHXFhKrVbWC8LmxJXXwB294wrQGYT9Q5KOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4PfUGWmEdsiW1eGsLwiD2Cq4hxMB8GA1UdIwQY
MBaAFDN+Y2umDHFP/odUq50ExtHu25uJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTM1amE2WU1jVV8taDFTcm5RVEcwZTdibTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lNzBjODMtNDZmZC00MGI0LTgzYzkt
NzBjMjI4ZWU5Yzk1LzEvTTM1amE2WU1jVV8taDFTcm5RVEcwZTdibTRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9lNzBjODMtNDZmZC00MGI0LTgzYzktNzBjMjI4ZWU5Yzk1
LzEvTTM1amE2WU1jVV8taDFTcm5RVEcwZTdibTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ7ALqols
zpXVfRf5hDq6lyzZE9PaD0xSFYperP1BDbXybCfq6DEzpFq/tZKZdbjmZVZ1Wbdn
0hblXWqTtgFNd1q2dnYl4G+N1Hsl6aMVw3D8inUchpdnYXCk7hUwt0ut56mzfRNi
cxfOqOwaJRnDB8GDnfe1CNLbU3VnpWi6khIUt4Pr7Rb7TedFrPXvIJOO8cSgN3kQ
WZRw+QKsgngDmtFlu8fiBzqyhUD8VckTFJ66n5TIzgQkncIEphS4UrosN9MokOe2
z83v+/VvkIYx5pjJB1K82/UbvDn0zu+C567m3/oNQilDtHT1UECop6KIFy7MRIas
ZixtOTVmGXxc+A==
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:14:33 2025 by rpki-client