Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
File: 35GEXmXk8DlPHmw_-edzL2qkb9w.mft (raw, json)
Hash identifier: CNwhF9F/h4keWxiaAq3a7ocbeDFehiyCz4Bs0YCocBg=
Subject key identifier: C2:45:7B:FF:06:0D:01:D9:56:33:00:83:79:9F:11:06:07:FA:8A:D8
Authority key identifier: DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC
Certificate issuer: /CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc
Certificate serial: 019A725C9B9079696724C78564A336917CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
Manifest number: 1106
Signing time: Tue 11 Nov 2025 10:01:02 +0000
Manifest this update: Tue 11 Nov 2025 10:01:02 +0000
Manifest next update: Wed 12 Nov 2025 10:01:02 +0000
Files and hashes: 1: 35GEXmXk8DlPHmw_-edzL2qkb9w.crl (hash: HKEXjFGHHtdyhhg/ljbiy8HXw/MIYqmExxd/nO8Qe3I=)
2: ZrChAnEIC7XkkvtmNcAU0NitmrI.roa (hash: 99wLAgfUwposvYSU46TWayIZqmg33XG3e0RoKs9DbJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:9b:90:79:69:67:24:c7:85:64:a3:36:91:7c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc
Validity
Not Before: Nov 11 10:01:02 2025 GMT
Not After : Nov 12 10:01:02 2025 GMT
Subject: CN=c2457bff060d01d956330083799f110607fa8ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7d:ec:45:62:43:9d:f4:9c:71:da:9e:71:8a:
c8:21:c4:2f:28:05:a6:00:2f:44:4c:99:71:0f:63:
8f:22:ac:7d:d3:76:04:9c:b1:2e:04:27:cd:5b:44:
8f:f8:30:a7:54:ff:1b:a7:e2:95:03:a9:af:ea:ed:
49:14:7c:b4:11:3b:fc:00:1b:0b:91:bc:f0:f4:62:
54:8e:7a:c9:59:08:6f:f5:9e:96:06:67:c8:94:f6:
1d:46:40:dc:a7:1f:d4:67:d5:b7:a7:97:30:72:92:
73:eb:80:38:d7:1e:b4:43:a8:b0:91:a4:fb:95:ad:
ad:93:7b:a5:a0:ea:d4:97:23:ed:87:a5:5c:3f:d9:
58:38:19:03:68:57:0a:01:e5:b4:54:29:4a:bd:74:
2f:be:86:e9:f0:77:fc:14:44:cd:a5:df:86:45:20:
0a:01:2d:9f:0d:16:7b:61:6b:a9:73:0a:64:b0:5f:
1c:3a:94:70:c3:60:80:8e:3a:fa:c8:c0:df:dd:a8:
f1:0b:bf:a6:b1:0f:1a:a9:44:27:17:43:88:4e:ee:
8e:c5:39:8a:8b:50:da:e3:2c:40:54:10:44:32:38:
24:49:bd:2d:07:ec:f6:7a:ca:8c:49:f3:61:46:ea:
97:df:42:4c:21:ef:4d:13:39:0f:d1:08:f2:86:82:
ea:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:45:7B:FF:06:0D:01:D9:56:33:00:83:79:9F:11:06:07:FA:8A:D8
X509v3 Authority Key Identifier:
keyid:DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:49:29:59:7f:b9:4c:f0:fb:9f:2c:15:b4:f7:ae:cc:01:1f:
32:8f:0b:34:63:b2:11:e3:89:4d:b3:79:68:24:03:36:bc:70:
18:c3:ba:33:e6:4a:3c:2d:6a:03:81:ac:1a:13:e3:24:71:97:
3e:d3:34:fe:de:56:1c:0b:09:62:20:9b:c3:d8:47:67:88:17:
3b:4b:f9:53:6b:db:1c:81:66:59:17:7e:bb:88:77:46:e3:f8:
43:00:27:7d:47:9d:55:36:6a:3d:9b:78:bf:98:51:99:e9:1d:
9c:55:a9:ff:1a:c2:49:75:97:17:b0:99:1b:76:1d:53:c9:c8:
10:50:46:c3:fe:12:2b:e5:97:bc:81:be:94:03:83:55:5c:82:
fb:14:4b:de:74:f5:a4:01:ba:bd:db:64:d5:de:64:39:bd:81:
a4:4e:69:e3:5f:dd:86:0e:1d:2f:d4:5d:4d:15:a6:d3:21:dc:
c5:1b:1f:dd:ce:08:f4:b9:e1:07:3c:34:22:4d:3f:66:67:13:
e8:b5:cb:30:09:29:82:68:2d:ea:95:15:e4:23:4c:71:fe:0d:
8a:77:d3:0c:3d:87:b7:39:94:65:53:00:02:27:39:93:b9:6f:
9c:4f:a1:10:92:f7:76:4b:ad:91:8f:07:4b:9e:89:81:66:61:
ea:53:a5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:52 2025 by rpki-client