Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
File: 35me_9SQo7jQzTGumZ8ObT6Y5oI.mft (raw, json)
Hash identifier: Cdy5vcyz65sTmevQ2R4esk1YTDw6bkMn5X2rkDYrhx4=
Subject key identifier: FB:20:BA:CF:84:89:62:7F:BF:65:CE:B4:FD:3F:E2:6A:7D:2A:EC:42
Authority key identifier: DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
Certificate issuer: /CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Certificate serial: 01974B56CE67C2461855FDAEE147FFD09AA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
Manifest number: 0C87
Signing time: Sat 07 Jun 2025 17:01:09 +0000
Manifest this update: Sat 07 Jun 2025 17:01:09 +0000
Manifest next update: Sun 08 Jun 2025 17:01:09 +0000
Files and hashes: 1: 35me_9SQo7jQzTGumZ8ObT6Y5oI.crl (hash: +2QRJTe95/DSZxG99dMlugXLZlWaikw3bUrLpRDqgms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:ce:67:c2:46:18:55:fd:ae:e1:47:ff:d0:9a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Validity
Not Before: Jun 7 17:01:09 2025 GMT
Not After : Jun 8 17:01:09 2025 GMT
Subject: CN=fb20bacf8489627fbf65ceb4fd3fe26a7d2aec42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8d:a1:4b:32:62:da:1a:fa:58:7a:d4:3b:1c:
e4:10:54:9a:0e:09:18:0e:43:48:67:02:2e:dd:9d:
77:7e:fc:ef:b1:1c:35:e5:3d:f1:df:67:61:bb:d3:
3a:1f:dc:f7:5d:e5:70:f5:3e:4e:8a:3c:78:fb:21:
d2:15:b5:e9:53:6c:7a:1a:17:11:10:e6:22:55:36:
3f:0b:31:2d:d1:b1:4c:01:1a:f0:27:d2:62:f9:cf:
ab:cc:fc:a6:c4:b7:c0:4b:2d:ed:e9:62:c1:d5:92:
d5:fb:e7:95:3b:e0:c3:de:98:6f:67:0c:73:c6:b8:
44:0b:1c:2e:62:4b:ad:ff:13:e8:71:d7:85:f9:39:
a6:af:65:d0:f4:ab:2c:e9:4e:4e:bd:b4:02:67:94:
39:e4:09:82:a4:28:33:11:fc:f2:b7:b1:ac:a8:3f:
cf:fc:e7:e5:90:f3:09:cc:12:a6:49:68:b3:75:bc:
23:b5:00:2f:c8:3a:2c:16:a2:d0:27:85:dc:a6:94:
e7:28:8c:d4:91:85:69:86:7f:08:e4:27:30:66:0f:
aa:49:1c:b4:7a:85:15:c3:97:1e:e3:f3:bc:3c:7f:
f5:29:cc:60:49:d3:52:f4:62:f7:f1:72:a3:13:6a:
49:b1:55:52:53:0a:13:f7:dd:59:f6:32:21:a9:61:
64:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:20:BA:CF:84:89:62:7F:BF:65:CE:B4:FD:3F:E2:6A:7D:2A:EC:42
X509v3 Authority Key Identifier:
keyid:DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:08:3c:e2:ca:f1:b3:fa:73:2e:24:07:fe:23:c0:af:dd:54:
d8:1b:7e:c5:0b:df:25:b5:ed:6b:f5:8c:02:2f:0e:df:e4:ef:
e1:7a:5f:52:02:41:f0:c3:a1:28:a6:f1:17:ac:0f:15:ec:fe:
6d:15:86:af:5f:fb:22:28:80:78:db:34:9e:07:6f:65:35:99:
26:41:50:c9:da:f7:90:39:60:d0:e6:8a:07:3c:77:df:f5:81:
c7:65:84:84:a3:0b:2c:26:4d:21:e0:32:0d:aa:c3:7d:09:52:
82:37:ae:e0:39:cd:66:8d:7b:76:cd:e4:ea:3a:39:45:4a:46:
18:4f:c4:5f:5a:35:58:56:b2:35:aa:76:3c:05:b2:98:53:83:
5b:51:b2:d9:29:68:77:f1:a3:ef:9d:d8:44:80:7c:2e:16:07:
a1:53:02:46:74:0f:f5:28:8b:26:a9:2b:a8:88:c7:35:3d:70:
00:49:ba:cb:6a:ff:70:0c:7d:5c:84:9e:99:0b:55:18:96:b2:
6c:04:49:0e:9e:43:86:05:2a:5b:1d:f7:75:2e:34:0b:ec:47:
dd:c8:f5:ae:9d:cc:d6:ff:b7:9f:55:df:10:1b:b0:35:e5:b8:
01:1d:2f:4b:22:eb:b4:1c:12:0f:eb:08:0f:42:e8:20:21:ae:
87:0b:e1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:08:34 2025 by rpki-client