Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
File: 35qWOAlxTREDtkYNnQ4UoS6FAyU.mft (raw, json)
Hash identifier: v44JIzSHM/jdNVKrTU1jUTDo6PEVybcGZcVyYkt4kwI=
Subject key identifier: 5C:B5:38:C7:09:27:94:28:45:72:E0:92:09:69:AD:5B:49:73:22:C7
Authority key identifier: DF:9A:96:38:09:71:4D:11:03:B6:46:0D:9D:0E:14:A1:2E:85:03:25
Certificate issuer: /CN=df9a963809714d1103b6460d9d0e14a12e850325
Certificate serial: 019923A06B061585F9965EDBD944F7A579FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
Manifest number: 0D57
Signing time: Sun 07 Sep 2025 10:02:19 +0000
Manifest this update: Sun 07 Sep 2025 10:02:19 +0000
Manifest next update: Mon 08 Sep 2025 10:02:19 +0000
Files and hashes: 1: 35qWOAlxTREDtkYNnQ4UoS6FAyU.crl (hash: Ikek1LpOr9LoKMYoA53cExblM3bnqG28PTK9xymKh+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:6b:06:15:85:f9:96:5e:db:d9:44:f7:a5:79:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df9a963809714d1103b6460d9d0e14a12e850325
Validity
Not Before: Sep 7 10:02:19 2025 GMT
Not After : Sep 8 10:02:19 2025 GMT
Subject: CN=5cb538c7092794284572e0920969ad5b497322c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9d:1e:c7:b4:85:7c:92:36:5a:18:d6:cc:f8:
95:cb:35:41:9d:ea:e8:85:49:98:15:7e:d7:00:7f:
72:4c:bf:7d:ac:92:12:9c:e3:1f:39:04:c9:12:1d:
17:4d:51:d4:cc:61:32:e4:66:01:c9:2c:b4:ce:5f:
01:cb:d3:5c:7c:60:2a:00:c3:2c:bb:5d:b2:9c:c5:
fe:91:1f:5b:7b:13:ec:fb:03:96:16:05:4f:a9:7d:
a8:a8:78:35:82:a3:21:a5:f0:dd:d9:ac:b7:73:c8:
d9:79:67:c8:9c:58:80:e8:70:99:a2:23:1a:b5:ab:
01:2e:c1:f2:ec:55:bd:74:4d:90:3a:2e:b9:92:f7:
33:f3:39:8a:77:39:7d:d6:89:9c:94:2d:d8:52:02:
87:c4:d4:a1:3e:3d:b2:3d:7b:61:64:4b:21:6b:3c:
f0:33:b1:f4:19:6b:74:96:2f:09:17:b3:45:22:74:
4d:d0:8a:8a:91:1e:aa:40:4a:1a:94:7f:5c:7a:51:
19:59:c8:1c:5d:c9:c9:2e:b3:55:8e:87:ef:19:eb:
d0:7c:cc:95:44:7e:ff:98:da:a8:23:3e:a3:6a:06:
1a:6d:be:b9:e7:af:a2:1a:14:2c:54:25:38:a4:1d:
0d:0e:42:22:37:2d:04:44:8f:3b:5f:87:9b:a4:2a:
f5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B5:38:C7:09:27:94:28:45:72:E0:92:09:69:AD:5B:49:73:22:C7
X509v3 Authority Key Identifier:
keyid:DF:9A:96:38:09:71:4D:11:03:B6:46:0D:9D:0E:14:A1:2E:85:03:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:35:6c:ee:11:81:68:26:3f:89:65:54:21:d3:1e:32:84:bf:
4e:9a:d1:96:d6:aa:16:31:6b:5a:73:9b:47:9b:16:16:fb:b0:
9e:89:11:58:c1:30:30:1b:f9:f2:fa:66:52:3a:2c:f6:4a:a8:
60:00:b5:7b:16:6c:86:b0:9f:e4:95:e6:71:29:c9:4e:91:49:
02:71:3f:b9:77:d1:55:ca:98:ad:79:5e:0d:95:3e:9d:a1:42:
5d:e7:48:82:a4:72:57:7e:53:c1:a9:fd:52:d8:bc:52:ed:f1:
1c:5f:63:1c:b6:02:0e:28:19:a2:d3:4f:d0:4e:02:91:32:a5:
a4:9b:22:2a:f3:aa:63:7f:7f:cd:5d:46:1f:75:0f:e1:8a:52:
3d:31:b8:86:92:ed:5b:58:70:da:c2:0e:67:0c:89:87:ff:20:
e9:2a:fa:1e:98:39:c1:e7:43:43:a0:e2:33:bc:05:af:80:b1:
ae:64:01:ee:28:88:5c:51:71:65:c1:53:c6:2f:cf:7c:04:e4:
74:1b:c7:3d:2c:e1:bc:78:3b:31:59:8e:79:42:da:80:bb:1b:
da:ce:fe:e1:ff:34:b4:14:53:42:77:b2:2d:ad:7d:cf:39:33:
35:f0:a1:83:7e:36:ce:5a:16:ca:27:c6:01:4a:1c:b7:50:c8:
8b:de:73:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:47:29 2025 by rpki-client