Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
File: M35ja6YMcU_-h1SrnQTG0e7bm4k.mft (raw, json)
Hash identifier: GuwZlV/PQZMQyR5gLzP7bYkzhQcdManSYZAidx15ka0=
Subject key identifier: 01:72:8C:C1:67:9C:DC:8D:66:F9:C9:48:68:CF:FD:E6:6C:34:97:D5
Authority key identifier: 33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89
Certificate issuer: /CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89
Certificate serial: 0199221E53918555B78F831D7DF22CC52F40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
Manifest number: 02EF
Signing time: Sun 07 Sep 2025 03:00:36 +0000
Manifest this update: Sun 07 Sep 2025 03:00:36 +0000
Manifest next update: Mon 08 Sep 2025 03:00:36 +0000
Files and hashes: 1: M35ja6YMcU_-h1SrnQTG0e7bm4k.crl (hash: Wy2GyS7g+YhhAVREmJ7UzjmPn3UJhdtqhhCak1qb3go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:53:91:85:55:b7:8f:83:1d:7d:f2:2c:c5:2f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89
Validity
Not Before: Sep 7 03:00:36 2025 GMT
Not After : Sep 8 03:00:36 2025 GMT
Subject: CN=01728cc1679cdc8d66f9c94868cffde66c3497d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:20:4a:68:86:0b:58:6e:c7:0d:98:71:f3:b7:
b8:49:3a:24:6e:cd:e9:84:38:c8:21:7a:88:d5:cc:
b0:b4:19:f5:9c:ed:11:71:46:b5:45:8a:63:40:e9:
51:6f:6c:a8:c4:e6:32:0c:d3:b2:f0:9d:5c:09:20:
d4:d1:11:2f:ba:9b:38:9a:9d:ce:23:c1:50:d6:17:
2c:5f:03:46:d7:14:ad:5f:31:8e:0a:85:1a:86:fb:
50:0a:7d:9c:7a:99:db:eb:f4:a0:f6:98:8d:1d:5e:
8b:cc:10:97:e3:2d:2a:90:79:4e:db:35:c5:10:69:
50:3c:e6:73:29:22:0e:12:04:f5:67:d2:d4:94:98:
bc:1f:dc:ec:ac:da:ce:c0:86:30:49:e3:db:c7:4e:
7d:06:b2:73:7b:81:42:10:b5:38:9f:61:9c:10:ad:
a1:b3:6f:1a:b7:1d:1a:86:e6:4b:b2:31:46:3d:90:
c2:81:62:24:85:9e:85:fd:7b:ab:62:ac:fb:e0:cb:
e4:73:17:8e:3e:fe:2b:20:59:e6:ce:a1:30:f9:a3:
83:40:82:0e:37:a8:e4:fa:71:40:3e:d6:94:4a:e2:
3f:2b:37:79:d1:a1:9c:28:54:4a:43:5b:ff:b5:53:
9b:0d:ed:6b:1e:60:b5:00:08:a3:e0:a4:d9:bd:08:
65:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:72:8C:C1:67:9C:DC:8D:66:F9:C9:48:68:CF:FD:E6:6C:34:97:D5
X509v3 Authority Key Identifier:
keyid:33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:9f:03:cc:e8:90:89:fd:19:d0:3c:b8:89:e2:48:f2:2e:cb:
19:f4:0d:58:f1:bf:af:96:4c:65:16:d4:29:9e:1c:ba:d1:05:
d0:e2:4e:5d:a4:0c:43:5c:37:ca:3e:c6:11:6a:ab:17:c4:4e:
86:69:3d:44:11:98:66:bf:85:f7:ca:07:ed:67:10:fb:84:c3:
c3:fe:7b:c6:62:ad:ed:44:d8:ea:a6:a1:72:25:2a:bb:b1:44:
58:1f:6c:b6:9b:93:1c:22:2e:7f:4b:31:68:f8:1a:7e:08:fc:
51:82:8f:62:ee:54:62:eb:1e:30:16:32:1b:0f:f0:ca:9b:c1:
07:24:3a:4a:a5:1a:19:76:e2:54:f1:81:4b:95:7f:ed:71:ae:
0b:f6:9f:49:75:13:b6:1f:3d:48:94:4b:ff:ff:67:f6:c0:fd:
3c:25:f1:ae:15:f6:6d:68:2c:dc:49:f7:5b:ce:fa:0a:be:41:
79:c2:00:e2:a2:6c:12:e1:20:52:45:22:41:76:70:ba:5c:bc:
97:e0:00:72:1f:0a:aa:99:08:6c:04:24:28:e5:ab:0d:eb:9f:
22:ab:07:fd:7c:87:3e:bf:30:d2:ea:f0:7c:63:6e:6f:c9:cd:
79:e1:27:b2:05:66:36:18:93:9a:a5:31:36:4c:f4:75:7d:bf:
c3:a2:6f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:45:04 2025 by rpki-client