Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
File: 35me_9SQo7jQzTGumZ8ObT6Y5oI.mft (raw, json)
Hash identifier: 8TJ619vSW5/tknzf1dMrMHFyB+ipjYjn0h2XJ+4bKKo=
Subject key identifier: B7:5A:2B:D2:8C:DF:5E:D5:FB:A6:B9:89:4D:8F:35:B5:FC:20:AD:24
Authority key identifier: DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
Certificate issuer: /CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Certificate serial: 01965613B2BAEB409A99A106EA1928131B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
Manifest number: 0C08
Signing time: Mon 21 Apr 2025 02:00:53 +0000
Manifest this update: Mon 21 Apr 2025 02:00:53 +0000
Manifest next update: Tue 22 Apr 2025 02:00:53 +0000
Files and hashes: 1: 35me_9SQo7jQzTGumZ8ObT6Y5oI.crl (hash: 0ZQ2Yc2mOjxRYv+CYri4WOjxLys6T00FccKSrRhyCag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:b2:ba:eb:40:9a:99:a1:06:ea:19:28:13:1b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Validity
Not Before: Apr 21 02:00:53 2025 GMT
Not After : Apr 22 02:00:53 2025 GMT
Subject: CN=b75a2bd28cdf5ed5fba6b9894d8f35b5fc20ad24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bb:98:b8:22:40:a5:b4:55:45:8c:70:01:e3:
bd:d0:95:d7:02:a9:3a:37:89:83:9c:cc:10:2d:64:
8f:ea:92:f8:7b:0a:20:b6:73:61:df:a6:2c:55:bf:
43:2f:85:f5:22:58:89:46:7e:b2:2f:47:95:2f:b8:
0d:02:3f:93:df:c0:a2:cc:26:59:18:fa:10:c8:ed:
67:1e:f3:68:38:7d:7f:46:3b:cd:8b:37:18:a0:1f:
30:f6:60:28:4a:e7:db:cd:69:13:d1:2e:9a:c4:18:
36:e1:7f:03:c2:d7:cb:86:6a:96:e1:4e:58:89:17:
b4:d5:05:b7:01:8f:ef:45:c3:06:27:39:ec:ef:74:
31:7c:2e:4d:08:80:a3:f0:51:fd:48:d0:df:f6:54:
64:43:97:09:f8:7d:bc:b3:be:d2:3c:43:dc:a3:b0:
2c:a3:bb:3e:fa:32:60:61:96:55:d8:35:5d:23:76:
3e:e1:c2:a3:a5:3f:19:e9:7f:9b:e2:3c:cd:db:10:
db:d7:31:e8:60:77:cb:06:fa:8a:c3:99:c7:9d:98:
5f:f5:89:87:81:11:86:23:e7:81:9b:19:d1:fb:56:
7f:6b:0f:db:c4:d9:d6:b2:6b:f3:9e:cb:2b:82:d4:
ae:97:b8:a2:c3:19:5c:75:bb:91:67:70:16:a4:06:
94:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5A:2B:D2:8C:DF:5E:D5:FB:A6:B9:89:4D:8F:35:B5:FC:20:AD:24
X509v3 Authority Key Identifier:
keyid:DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:1c:03:02:4a:6c:a0:77:c9:70:a5:0e:bb:0e:67:b2:49:fd:
4c:68:03:6c:02:23:a6:6c:b9:0e:98:35:ea:7f:d3:65:23:4b:
cb:77:c8:ab:18:34:82:25:74:ee:1f:ad:6f:8f:83:24:94:aa:
52:6d:a4:02:41:2c:dd:66:0f:bb:75:ef:00:31:e3:db:13:17:
8d:d2:95:5f:0a:4d:5d:b4:d5:a6:f4:db:1b:67:28:97:7f:65:
ad:b9:b8:4f:12:93:ba:62:15:b9:d9:df:52:f7:65:9f:03:b8:
96:13:26:51:a1:ea:b3:30:72:98:97:04:85:b7:80:54:85:9f:
59:e1:5a:8e:e6:31:2e:e3:4f:dd:3a:b8:8b:e8:fe:93:78:1d:
48:59:d6:c1:25:2c:65:15:bc:ed:d5:af:a4:37:ca:21:d8:c4:
ed:c0:8a:67:6b:e8:eb:87:43:53:4c:03:1e:1d:0c:51:db:07:
9b:30:87:dc:b3:d3:a7:87:1c:fb:95:53:78:0b:a1:4f:1c:b5:
5b:f7:8a:cb:1b:15:58:81:c8:3c:e3:01:30:9c:73:cd:e4:3b:
52:06:a6:61:14:8a:ea:3e:69:6f:97:d5:21:b1:ab:41:53:b8:
ea:55:65:fa:ec:a1:61:b4:94:98:76:49:b0:38:32:68:4d:67:
b2:5e:31:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWE7K660CamaEG6hkoExuDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmOTk5ZWZmZDQ5MGEzYjhkMGNkMzFhZTk5OWYwZTZkM2U5
OGU2ODIwHhcNMjUwNDIxMDIwMDUzWhcNMjUwNDIyMDIwMDUzWjAzMTEwLwYDVQQD
EyhiNzVhMmJkMjhjZGY1ZWQ1ZmJhNmI5ODk0ZDhmMzViNWZjMjBhZDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27uYuCJApbRVRYxwAeO90JXXAqk6
N4mDnMwQLWSP6pL4ewogtnNh36YsVb9DL4X1IliJRn6yL0eVL7gNAj+T38CizCZZ
GPoQyO1nHvNoOH1/RjvNizcYoB8w9mAoSufbzWkT0S6axBg24X8DwtfLhmqW4U5Y
iRe01QW3AY/vRcMGJzns73QxfC5NCICj8FH9SNDf9lRkQ5cJ+H28s77SPEPco7As
o7s++jJgYZZV2DVdI3Y+4cKjpT8Z6X+b4jzN2xDb1zHoYHfLBvqKw5nHnZhf9YmH
gRGGI+eBmxnR+1Z/aw/bxNnWsmvznssrgtSul7iiwxlcdbuRZ3AWpAaURQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLdaK9KM317V+6a5iU2PNbX8IK0kMB8GA1UdIwQY
MBaAFN+Znv/UkKO40M0xrpmfDm0+mOaCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzVtZV85U1FvN2pRelRHdW1aOE9iVDZZNW9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9kMDNkMDgtMjcwZi00ZGExLTlhMjQt
NTAxNTM4YzBkZDAxLzEvMzVtZV85U1FvN2pRelRHdW1aOE9iVDZZNW9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9kMDNkMDgtMjcwZi00ZGExLTlhMjQtNTAxNTM4YzBkZDAx
LzEvMzVtZV85U1FvN2pRelRHdW1aOE9iVDZZNW9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAARwDAkps
oHfJcKUOuw5nskn9TGgDbAIjpmy5Dpg16n/TZSNLy3fIqxg0giV07h+tb4+DJJSq
Um2kAkEs3WYPu3XvADHj2xMXjdKVXwpNXbTVpvTbG2col39lrbm4TxKTumIVudnf
UvdlnwO4lhMmUaHqszBymJcEhbeAVIWfWeFajuYxLuNP3Tq4i+j+k3gdSFnWwSUs
ZRW87dWvpDfKIdjE7cCKZ2vo64dDU0wDHh0MUdsHmzCH3LPTp4cc+5VTeAuhTxy1
W/eKyxsVWIHIPOMBMJxzzeQ7UgamYRSK6j5pb5fVIbGrQVO46lVl+uyhYbSUmHZJ
sDgyaE1nsl4x2w==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:18 2025 by rpki-client