Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
File: 35me_9SQo7jQzTGumZ8ObT6Y5oI.mft (raw, json)
Hash identifier: ycwSZz4cAoKRirOK69/XjBPN06mEd3p4iZwJIEg/t+o=
Subject key identifier: CD:66:70:0D:D0:D5:21:73:E7:B5:B8:0B:96:BB:7A:FA:79:5C:8D:26
Authority key identifier: DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
Certificate issuer: /CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Certificate serial: 0199228CAB837C08C19E9AEE6866A4212B16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
Manifest number: 0D7B
Signing time: Sun 07 Sep 2025 05:01:08 +0000
Manifest this update: Sun 07 Sep 2025 05:01:08 +0000
Manifest next update: Mon 08 Sep 2025 05:01:08 +0000
Files and hashes: 1: 35me_9SQo7jQzTGumZ8ObT6Y5oI.crl (hash: F3CFxsgk8JxGVhGRK1RYNHWC+IVjiibkEDM9DcXyv/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:ab:83:7c:08:c1:9e:9a:ee:68:66:a4:21:2b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Validity
Not Before: Sep 7 05:01:08 2025 GMT
Not After : Sep 8 05:01:08 2025 GMT
Subject: CN=cd66700dd0d52173e7b5b80b96bb7afa795c8d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3c:1d:e6:02:d3:5f:8b:c9:7b:c0:48:d0:30:
a5:77:14:86:31:97:69:0e:9a:7a:e7:da:7c:22:e8:
00:a9:3d:d9:a6:08:e8:e0:39:57:6d:ee:4b:3c:06:
52:4e:b6:46:29:28:fc:b8:a1:5d:6d:ef:23:c3:ab:
0a:73:70:b0:ad:0c:45:ed:20:b9:a0:34:6e:5f:ce:
9d:bb:32:47:54:3d:4b:0c:5d:0c:12:4e:72:f8:0b:
08:3e:da:5f:ea:bf:5d:db:c5:9d:64:7c:d3:70:0c:
2f:d6:8e:61:bd:91:9b:8d:27:da:de:16:5e:b2:2c:
ad:5f:1b:33:b2:d9:c8:5d:29:28:15:c0:5b:90:14:
e7:96:27:35:83:c6:08:1f:1e:f7:ab:49:ea:e2:be:
18:30:0b:40:4d:27:ab:8f:d5:16:a0:a0:96:53:0c:
fa:cf:67:32:7b:42:9d:a7:31:84:cd:a8:41:ee:1e:
85:5b:7b:d9:f0:49:0f:29:57:fb:39:d2:f9:d8:9a:
b7:eb:c4:b1:97:63:f4:98:59:05:5a:23:fd:13:77:
30:da:fe:9b:bb:aa:54:85:e8:3c:66:cf:07:20:50:
52:4d:2d:73:5f:55:05:51:8c:d1:9a:cd:86:8c:24:
c8:55:95:99:ad:88:b7:18:12:82:44:d5:cf:bd:ae:
b0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:66:70:0D:D0:D5:21:73:E7:B5:B8:0B:96:BB:7A:FA:79:5C:8D:26
X509v3 Authority Key Identifier:
keyid:DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a0:0b:06:bc:98:a7:8c:a8:73:10:e6:47:33:9c:c0:b8:8a:
aa:51:b0:af:17:e0:33:e5:cc:d0:f4:19:d6:4b:93:48:80:ac:
9f:5d:2b:1a:a3:b7:bc:1d:8d:4f:2a:5b:2b:17:ad:bc:37:89:
fb:8d:03:b8:d2:23:8d:67:b5:5b:3e:b3:de:ff:e2:57:89:9f:
db:83:51:39:f2:a3:6f:78:9d:bb:06:89:d0:75:bb:18:7d:e3:
0b:a3:06:4e:71:32:59:64:2e:43:59:f2:42:e5:3a:7f:ca:ce:
8d:d2:c2:c2:80:5e:29:9c:6f:de:14:2b:e3:d0:a2:51:20:16:
75:23:7b:d4:e2:b2:2d:b9:32:93:bd:b8:22:e7:65:7e:0c:70:
eb:9b:8e:99:28:63:e5:61:8a:7b:69:43:66:71:c0:3b:56:8e:
1b:64:0e:b1:a9:66:54:f6:a2:62:3a:00:67:e2:5c:ae:8c:c8:
f0:99:ee:9e:68:e2:df:9b:69:cb:56:6f:80:93:6c:43:46:3e:
e2:e1:cd:1e:a3:23:45:62:f5:b6:ea:8d:02:2d:c0:23:72:1f:
da:d3:c6:46:fc:4d:da:7e:7d:c3:13:47:71:29:02:63:31:29:
5f:75:26:94:d8:08:78:ac:c7:e7:e5:92:da:1f:99:63:bc:b7:
bc:40:9f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:40 2025 by rpki-client