Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
File: 35GEXmXk8DlPHmw_-edzL2qkb9w.mft (raw, json)
Hash identifier: Ak8P1x+0eOp5Hcd7l/7v3bUF7z887x1y5iioaGlOX8s=
Subject key identifier: 7F:B4:EC:0A:7D:B1:A4:61:D7:D3:A1:8C:BA:1C:2C:42:63:89:D9:F2
Authority key identifier: DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC
Certificate issuer: /CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc
Certificate serial: 01974B1F61B56A03DC915B46600ECBD76758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
Manifest number: 0F64
Signing time: Sat 07 Jun 2025 16:00:37 +0000
Manifest this update: Sat 07 Jun 2025 16:00:37 +0000
Manifest next update: Sun 08 Jun 2025 16:00:37 +0000
Files and hashes: 1: 35GEXmXk8DlPHmw_-edzL2qkb9w.crl (hash: 8WWLKQdAERMGRy307okLQfjrmmo4F5rfcPRJvNZpJIc=)
2: ZrChAnEIC7XkkvtmNcAU0NitmrI.roa (hash: 99wLAgfUwposvYSU46TWayIZqmg33XG3e0RoKs9DbJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:61:b5:6a:03:dc:91:5b:46:60:0e:cb:d7:67:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc
Validity
Not Before: Jun 7 16:00:37 2025 GMT
Not After : Jun 8 16:00:37 2025 GMT
Subject: CN=7fb4ec0a7db1a461d7d3a18cba1c2c426389d9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:96:1a:81:14:dd:6c:8f:78:b3:b8:54:fe:ba:
14:b9:7c:49:20:91:d8:26:fa:62:5b:60:c0:b1:db:
43:e1:73:d2:f2:7a:bf:34:19:38:cd:d4:d1:dd:11:
bc:cc:fb:31:35:ec:be:9c:2a:36:88:af:31:ba:28:
9c:9b:20:29:8d:a7:05:ff:10:a9:af:1f:81:f6:c9:
05:cb:f9:90:22:f6:e4:26:35:d2:f0:17:50:a1:29:
9a:1f:e2:7a:b4:13:03:5c:f6:79:fb:c6:3d:f5:79:
40:a7:13:53:08:94:b2:ee:63:ac:cc:aa:96:65:91:
a1:d5:73:58:24:c7:66:ae:07:1d:d1:d6:db:e2:ea:
fe:ec:c9:d4:d9:b3:60:48:40:93:40:f5:a0:60:f4:
12:a0:2f:07:fa:73:fd:b5:ec:e7:90:c3:82:54:c8:
31:a0:b4:5f:96:3f:f3:f3:9a:0c:30:9e:f9:cd:41:
e5:1e:f2:86:e4:a7:04:93:06:4c:3a:19:8b:fb:53:
9f:e7:c4:02:b6:47:5f:4c:7a:07:f6:ce:7b:6c:7a:
29:d1:d3:7f:03:30:9c:cb:84:16:d6:d8:ef:92:6f:
98:c2:77:fc:97:b7:01:3b:f0:04:a1:18:4a:2f:78:
ad:74:f6:a5:ff:8d:44:c5:3f:c3:c1:a1:5d:37:93:
25:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B4:EC:0A:7D:B1:A4:61:D7:D3:A1:8C:BA:1C:2C:42:63:89:D9:F2
X509v3 Authority Key Identifier:
keyid:DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:03:61:a8:ca:ad:0c:43:ad:0d:3f:90:64:11:e9:f2:5b:4f:
eb:9a:5f:cd:c6:f0:34:7c:d6:c9:16:f9:9e:a8:34:1a:78:6d:
a4:35:ae:1d:2c:58:0f:cf:3d:c4:06:4b:a1:7b:b9:07:6a:fb:
ba:b4:bf:23:2a:66:de:a2:0f:7d:95:82:68:fd:41:e5:90:22:
7e:fa:3b:f6:b3:d7:a6:ee:0c:46:d7:4c:ac:98:9d:c9:cb:c5:
68:ff:66:16:f4:ad:1c:8c:ea:dc:e0:df:0a:91:8c:da:27:21:
eb:df:17:31:f0:82:13:3a:a3:58:20:be:28:d8:3b:a7:b2:7c:
53:51:4a:bc:f9:35:e8:e9:62:15:3a:07:50:db:18:33:89:09:
bd:e6:a6:a5:a8:0e:71:8d:c6:47:9c:6e:b9:d9:04:1c:35:28:
f9:88:cc:c0:b8:99:6f:bd:cc:8b:79:4d:cd:e6:58:9f:fe:35:
09:36:66:ac:ed:26:3a:8c:c3:49:7e:cd:7a:f4:de:de:8e:71:
6a:b8:5b:06:33:d6:87:87:ed:49:7b:d6:92:88:e2:c4:f6:2a:
9f:d8:fe:0a:33:0f:44:89:c6:7a:f7:f2:60:78:0e:0b:3a:c5:
ed:a0:3a:27:d8:66:85:eb:33:b5:69:1b:f6:a8:4b:1c:21:61:
c0:a9:f0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:30:50 2025 by rpki-client