
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
File: 35me_9SQo7jQzTGumZ8ObT6Y5oI.mft (raw, json)
Hash identifier: HV/BAX5iCg7+mzzuLQ3tn9/2qXKoa7Kj2sBf9KwgukI=
Subject key identifier: D3:E1:9F:0A:59:C5:F9:E7:20:A7:E9:4C:C2:2A:16:8F:65:6A:67:FD
Authority key identifier: DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
Certificate issuer: /CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Certificate serial: 01988BEA8E0829547D21B7D215AC0369D7B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
Manifest number: 0D2D
Signing time: Fri 08 Aug 2025 23:01:01 +0000
Manifest this update: Fri 08 Aug 2025 23:01:01 +0000
Manifest next update: Sat 09 Aug 2025 23:01:01 +0000
Files and hashes: 1: 35me_9SQo7jQzTGumZ8ObT6Y5oI.crl (hash: aK3tvrwoUqmnG4lhegkQzQ2aNI05J2Hjk2shUdRq8Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:8e:08:29:54:7d:21:b7:d2:15:ac:03:69:d7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Validity
Not Before: Aug 8 23:01:01 2025 GMT
Not After : Aug 9 23:01:01 2025 GMT
Subject: CN=d3e19f0a59c5f9e720a7e94cc22a168f656a67fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b2:e0:e8:46:a0:96:c5:94:97:75:17:68:c8:
77:3d:00:4d:e6:20:33:0e:c7:0d:0c:fb:c3:0c:0f:
13:6d:b9:7a:d4:31:65:3f:4f:f5:ee:45:30:79:36:
59:ec:83:1f:d7:b9:bf:1d:22:4e:f6:6a:30:10:9c:
8a:2e:b2:36:97:a1:63:87:9f:3c:48:2a:e3:2d:51:
01:d5:20:b7:23:16:54:e2:0a:5c:21:61:a6:51:4d:
1e:7f:21:15:c1:c2:17:44:d6:57:3e:4c:fc:a6:e3:
0b:fc:9f:ec:a0:3e:eb:5e:e9:60:5c:23:37:30:6d:
ad:b7:f9:9a:d7:97:8a:5b:98:8a:e4:b3:76:e7:4b:
2d:a6:3a:a6:ee:01:96:9b:db:ad:dc:d4:16:c0:56:
ee:91:80:f0:8d:94:ff:7a:1d:56:bb:85:f9:43:7c:
6d:96:5a:d1:b4:22:71:5e:96:49:9a:89:33:72:eb:
ed:6f:8f:94:9f:57:cf:5e:fb:5a:14:21:f2:10:38:
ca:87:1a:8d:02:32:34:9d:70:61:50:bf:78:89:3b:
ce:69:1f:2c:09:7f:0e:23:58:f3:90:38:93:fb:80:
c7:d7:88:5d:18:29:54:10:78:21:b5:4e:2d:52:0c:
2b:0a:e7:75:2a:dd:5f:8c:ec:91:e7:bd:d7:1a:97:
44:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E1:9F:0A:59:C5:F9:E7:20:A7:E9:4C:C2:2A:16:8F:65:6A:67:FD
X509v3 Authority Key Identifier:
keyid:DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e8:58:0a:75:94:e5:ca:48:01:18:4f:6a:b9:0a:81:92:f0:
c3:88:a5:74:aa:76:8a:f8:91:0b:60:0f:af:5c:91:29:e4:bf:
3d:d1:d1:c1:08:5f:59:d8:5a:4c:5c:98:95:07:59:d7:22:86:
75:1f:fb:44:9f:f5:a5:50:7b:9a:e3:fb:fa:cd:f8:69:ac:a9:
5b:2e:d6:72:7f:6b:fe:cb:24:ed:2e:2b:ad:57:48:a7:78:6e:
5f:b7:b1:51:73:32:23:f8:5a:3e:c7:c3:58:09:64:bf:b7:a4:
65:f7:59:55:37:f0:4c:0b:e7:99:2d:46:7b:4d:20:da:04:25:
49:ee:e8:0b:cc:5c:80:2b:7e:7c:7b:9d:71:c5:56:34:39:5e:
7e:49:f2:09:a7:cb:e8:b3:f0:75:c6:8e:c2:bb:f8:ee:d9:c2:
82:0b:fe:9c:72:16:5d:b2:4f:56:04:44:5e:ab:5b:2d:f2:83:
ca:b6:13:d8:a5:cf:f0:da:48:1f:57:65:03:6c:07:03:ea:35:
6b:9b:49:d1:c9:c5:aa:3b:f6:bb:94:84:f5:9f:cb:58:e1:9a:
71:73:92:01:ab:a0:92:f1:bb:3c:0f:de:da:db:ef:7f:09:92:
20:68:dc:c0:d9:a8:9d:e1:86:09:a2:d3:7b:f0:01:40:bf:30:
d4:5a:9b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:17 2025 by rpki-client