Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
File: 35me_9SQo7jQzTGumZ8ObT6Y5oI.mft (raw, json)
Hash identifier: BhHJsuq6pDW5RmtvZlYOpF7d+vFE65Ige4h7CaxVwgY=
Subject key identifier: E7:DD:93:A9:5F:B3:28:76:80:A9:7E:90:E7:C9:04:61:01:02:D8:17
Authority key identifier: DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
Certificate issuer: /CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Certificate serial: 01976C2AB3E92075E54B9CF26B59A92C754A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
Manifest number: 0C98
Signing time: Sat 14 Jun 2025 02:00:27 +0000
Manifest this update: Sat 14 Jun 2025 02:00:27 +0000
Manifest next update: Sun 15 Jun 2025 02:00:27 +0000
Files and hashes: 1: 35me_9SQo7jQzTGumZ8ObT6Y5oI.crl (hash: nbpJr+aRGuJoJ6KGaDC3KeTuDlVzuh67uTY1kaNSp5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:b3:e9:20:75:e5:4b:9c:f2:6b:59:a9:2c:75:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Validity
Not Before: Jun 14 02:00:27 2025 GMT
Not After : Jun 15 02:00:27 2025 GMT
Subject: CN=e7dd93a95fb3287680a97e90e7c904610102d817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f7:0f:56:64:7d:ee:dd:18:75:65:2c:16:f7:
0b:77:94:19:37:07:9e:4f:c5:79:d8:f3:72:8b:79:
de:ef:34:dc:2d:79:2a:5d:4a:90:11:8a:a7:a1:48:
26:06:3b:f8:b6:6b:80:8d:b6:b5:59:f4:8b:0b:eb:
07:9f:f0:6a:5b:90:ee:81:0e:b4:7c:34:19:cc:38:
06:38:e9:a3:b0:0f:26:1c:9d:e6:d9:5d:d8:01:88:
37:aa:be:9a:8e:0c:ce:44:8d:40:77:33:df:42:3e:
c9:99:1f:86:f4:21:b0:5a:c1:ed:c4:23:5f:af:58:
9b:3a:af:51:4a:f9:9c:2c:3a:0f:9f:9f:a4:63:1d:
7e:32:ca:a4:94:ab:fa:60:5d:18:cc:c5:90:bf:03:
19:93:94:6f:34:6e:b7:ee:1b:55:e6:2b:5b:21:23:
e6:98:df:d1:05:57:ed:32:42:c5:da:49:f5:14:f5:
15:f9:62:29:b6:44:33:65:7c:92:6e:c4:de:c7:82:
5f:31:d0:a1:1f:15:f1:52:6f:2b:82:f5:2f:c4:39:
ec:f1:26:9d:7d:43:0e:e2:29:aa:53:dd:8d:de:7b:
c1:64:a8:ee:e3:9d:e9:de:fc:a8:44:b1:76:38:32:
10:c8:53:f0:ea:69:c1:1a:86:61:e2:80:61:ff:41:
c8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DD:93:A9:5F:B3:28:76:80:A9:7E:90:E7:C9:04:61:01:02:D8:17
X509v3 Authority Key Identifier:
keyid:DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:a9:23:c7:4c:87:8f:61:2f:ce:91:22:6c:2b:d6:ab:5d:b7:
d1:e7:87:43:bc:e5:c0:3a:c3:12:07:d0:27:98:b9:ad:69:8b:
8a:32:f1:76:91:bb:4a:99:a8:5e:14:6e:ae:e8:2b:33:3f:9c:
d6:63:51:33:a1:be:23:c1:64:7c:0e:a0:80:00:c4:68:de:3a:
0e:ca:98:48:b1:05:96:30:7a:0b:b3:7a:19:2f:a2:af:f5:bc:
68:82:30:76:77:1c:5b:76:48:38:52:4e:2b:a8:b9:43:19:e1:
18:6c:df:89:5e:1f:37:32:9f:82:f7:9b:2e:7c:b0:3f:95:d5:
ef:14:37:a7:ef:31:ad:1a:8b:f8:00:1a:f4:1f:66:2b:02:15:
f0:b4:7a:a5:57:d4:f7:7b:da:9c:42:90:c5:29:c6:c2:40:d2:
3a:3c:a3:2d:8c:7d:36:db:42:ea:78:c5:5b:5e:23:fb:65:ef:
e4:d8:18:f5:eb:18:fa:77:3a:5b:fc:35:5c:f5:39:b5:03:86:
bd:de:28:f3:cd:e2:c6:73:20:f4:3e:68:92:9b:b8:67:52:a5:
55:fd:72:4e:9a:ce:0b:50:73:b8:3b:89:17:9e:bb:3f:6b:f8:
a0:96:e3:45:00:d4:13:73:9a:dc:ca:5a:fb:1b:06:55:fb:45:
ba:54:ea:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:52:43 2025 by rpki-client