Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
File: 35GEXmXk8DlPHmw_-edzL2qkb9w.mft (raw, json)
Hash identifier: fjCtFTrgiR+9gFuKQ+XHnW6lYAsKLyHafNCVGAeFv+s=
Subject key identifier: 62:9D:6A:26:7A:27:BE:08:E0:F6:20:8A:46:D1:2D:57:9C:C0:05:56
Authority key identifier: DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC
Certificate issuer: /CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc
Certificate serial: 0199FC8FBB4E9C4D09D595ED1D0C75B907A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
Manifest number: 10C9
Signing time: Sun 19 Oct 2025 13:01:41 +0000
Manifest this update: Sun 19 Oct 2025 13:01:41 +0000
Manifest next update: Mon 20 Oct 2025 13:01:41 +0000
Files and hashes: 1: 35GEXmXk8DlPHmw_-edzL2qkb9w.crl (hash: 06UKS6q1bTXl8KC4MHuhDEndSFJAzHsa6e1oQPwRI2c=)
2: ZrChAnEIC7XkkvtmNcAU0NitmrI.roa (hash: 99wLAgfUwposvYSU46TWayIZqmg33XG3e0RoKs9DbJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:bb:4e:9c:4d:09:d5:95:ed:1d:0c:75:b9:07:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc
Validity
Not Before: Oct 19 13:01:41 2025 GMT
Not After : Oct 20 13:01:41 2025 GMT
Subject: CN=629d6a267a27be08e0f6208a46d12d579cc00556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f8:a4:92:a5:49:6f:7d:ab:a9:4e:b9:16:24:
d4:2a:0c:c3:20:d5:2e:1a:da:24:2e:f5:96:58:95:
09:54:c4:0c:db:39:be:91:d7:a9:e0:d5:cc:b6:40:
f3:6a:0d:06:e2:ba:e7:e9:19:2a:88:27:55:cf:b3:
f5:52:5f:2b:4b:74:68:93:27:aa:89:b4:7d:b3:05:
2f:73:0a:6d:2e:4b:3d:4f:fd:d7:a0:e6:3c:c3:3a:
cb:c3:a9:b1:54:b3:9f:eb:21:bf:ec:1e:24:26:74:
0e:47:a8:19:17:4a:c8:37:4f:fd:db:ca:6e:ca:1d:
27:71:b3:0b:f6:71:08:5a:50:22:46:4b:a2:d4:2a:
02:f1:d6:9e:b7:41:b7:1f:92:72:35:4c:9a:07:35:
a1:ce:e5:04:59:6d:31:bf:8f:b1:d2:99:e8:92:23:
6a:f6:69:80:18:e4:b3:f9:bc:29:3c:33:8a:7a:f6:
b9:be:5b:73:dd:8a:0a:9e:41:99:48:c1:0d:d2:0e:
ff:b3:61:eb:7a:f7:54:d7:3e:0f:88:59:84:5c:ed:
f8:85:bb:86:36:3f:04:26:0d:8a:2f:d2:0a:33:36:
54:3f:64:52:e8:2b:db:20:77:ec:e6:68:e1:41:68:
66:18:7d:40:f0:a8:a0:40:47:17:82:59:c9:3b:2d:
a1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9D:6A:26:7A:27:BE:08:E0:F6:20:8A:46:D1:2D:57:9C:C0:05:56
X509v3 Authority Key Identifier:
keyid:DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a8:0a:73:67:ae:e6:0d:3f:a6:f7:7f:46:e9:4b:e3:09:cc:
34:fb:14:6e:9a:9f:26:a9:72:43:f0:a1:14:da:56:a2:65:e8:
5b:2f:25:4d:4e:e8:8c:a8:84:a7:79:2d:3a:6e:05:e9:d5:7f:
90:d1:ad:45:26:9a:1e:ca:e3:aa:5c:f0:be:0b:8f:58:d4:a4:
dd:d7:b9:1b:19:88:1c:db:ab:a1:fb:0e:f4:7f:15:59:a4:6b:
c9:5e:5f:0e:d2:46:cf:c3:cc:2c:77:c6:cd:47:75:25:b2:9d:
b7:75:85:d0:0f:e9:a9:62:af:74:2b:27:35:65:3d:db:cf:0f:
37:ee:1d:9f:87:7b:ef:b9:1c:f6:1c:76:21:89:ac:b2:95:fb:
08:16:ba:be:fc:cc:ac:2a:1e:4c:6e:ab:f8:e1:1c:6d:34:4d:
3e:0d:8e:51:26:f8:1d:cf:54:06:a6:db:1c:b0:7d:4a:6e:10:
26:a6:d8:8c:7d:7e:e9:f2:19:c1:61:57:2d:92:f6:ce:f3:c6:
eb:ef:7e:38:53:35:6f:df:f9:d7:af:86:37:42:3f:a1:3c:5f:
63:37:1b:dc:c5:a6:7a:ab:9f:ad:3d:71:ad:11:c8:81:84:e8:
99:0f:1c:49:8c:a4:bf:dd:f5:2f:11:bf:75:53:c3:45:fa:be:
49:81:f9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:57:21 2025 by rpki-client