Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
File: 35me_9SQo7jQzTGumZ8ObT6Y5oI.mft (raw, json)
Hash identifier: cezk7y9uiv78cxjo5/1bqH32o3IHDyMx1XUGX8szRx4=
Subject key identifier: 08:C0:75:35:8B:F2:34:FD:7F:44:A2:7C:27:2F:E6:9D:04:18:5B:74
Authority key identifier: DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
Certificate issuer: /CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Certificate serial: 019A70A599F09EA40328477CF779386AECDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
Manifest number: 0E28
Signing time: Tue 11 Nov 2025 02:01:32 +0000
Manifest this update: Tue 11 Nov 2025 02:01:32 +0000
Manifest next update: Wed 12 Nov 2025 02:01:32 +0000
Files and hashes: 1: 35me_9SQo7jQzTGumZ8ObT6Y5oI.crl (hash: o8XlXRkEAx7kFt83w7x6EeblNPmJ+dfPtzBJLtr+Z9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:99:f0:9e:a4:03:28:47:7c:f7:79:38:6a:ec:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Validity
Not Before: Nov 11 02:01:32 2025 GMT
Not After : Nov 12 02:01:32 2025 GMT
Subject: CN=08c075358bf234fd7f44a27c272fe69d04185b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:47:82:a4:f1:32:6e:42:82:bb:98:89:63:3e:
10:ec:20:2e:20:73:37:73:d9:e8:df:bb:2e:dc:9a:
90:9d:36:40:41:bd:70:76:ee:f0:4c:61:44:82:85:
92:73:fb:bc:91:c3:d6:3e:b8:aa:4b:8b:ce:6e:da:
7c:8c:f1:ad:b7:3d:82:10:eb:ed:61:78:ef:e2:67:
27:3a:54:06:16:7e:b5:08:4f:39:00:b2:b1:df:f3:
de:67:e6:b2:e2:ec:7c:03:12:8b:bf:4d:8e:53:fb:
a6:03:fe:5c:a9:12:82:c7:ee:2a:ce:fb:95:9b:6c:
85:ad:44:94:14:53:21:74:3a:24:84:e8:04:cc:50:
b9:8e:7d:13:29:0b:1d:d6:bc:34:31:7f:0b:33:b0:
af:56:73:66:73:16:95:84:94:c9:54:54:92:d0:69:
0a:c1:8a:c9:1c:a4:b2:a6:25:d5:39:bb:88:93:9a:
8c:58:ff:1a:c8:31:4a:d6:3e:24:04:bf:e6:60:d1:
0d:56:eb:2a:66:fa:f2:66:c6:df:84:33:62:98:87:
5e:bf:9e:72:4a:fd:9c:57:a2:4b:ce:b8:e4:72:aa:
b6:a5:25:0a:f7:4e:1d:56:f5:19:17:f7:bc:46:9e:
d9:ed:63:fe:e2:4f:06:d8:b4:c3:a9:af:45:20:30:
2f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C0:75:35:8B:F2:34:FD:7F:44:A2:7C:27:2F:E6:9D:04:18:5B:74
X509v3 Authority Key Identifier:
keyid:DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:43:83:b3:c5:79:7d:d0:9d:49:3a:c7:b2:58:2e:3d:99:54:
61:c2:02:89:d3:61:da:ee:24:ee:46:74:6a:ad:73:4a:02:8b:
5d:eb:6d:6b:28:7f:b8:d4:0b:5d:bb:7c:02:5d:41:b3:e0:2a:
e2:ec:6a:7e:91:da:e4:8a:dc:d4:f8:06:bc:a8:e5:83:2f:55:
53:04:2c:cd:69:b0:da:a9:b4:f2:8b:98:96:35:fb:b4:0f:91:
1c:6c:6b:1f:2c:1e:2f:cf:1e:18:c3:fc:c9:bd:63:2c:73:ca:
8f:09:0b:62:3e:d2:94:67:c6:b0:7c:03:99:d0:f3:de:13:84:
c3:dc:ed:da:bc:41:65:20:36:e8:91:ae:71:bc:4a:26:24:2b:
ed:c1:48:c3:08:3c:0b:1f:f7:76:11:e0:74:c5:d9:7d:52:79:
88:63:b9:ab:90:7d:de:51:6b:ec:89:b0:12:79:aa:a0:fa:80:
82:f3:bd:ee:b0:0a:68:28:27:94:b9:66:dc:f8:05:78:f4:f4:
95:0f:23:31:58:ce:d1:88:c9:8b:3b:8f:82:23:c6:db:05:ad:
27:44:dc:df:52:33:b6:ee:ca:81:36:f1:eb:84:cc:7b:2b:5e:
f7:b2:b6:0b:c8:6d:7b:d4:bd:88:41:37:5f:3b:1c:b6:1b:54:
5d:e3:62:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:27 2025 by rpki-client