Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
File: 35GEXmXk8DlPHmw_-edzL2qkb9w.mft (raw, json)
Hash identifier: WO7isrH/7Gzi2iK18WhuHl2njk711+X5GAgsoKKZA+s=
Subject key identifier: 20:96:4D:E9:79:67:A2:EC:84:59:41:CC:B9:DB:BE:33:30:21:DE:8D
Authority key identifier: DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC
Certificate issuer: /CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc
Certificate serial: 0198D516214C84A9FC469E0D868E1B0DFE09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
Manifest number: 1030
Signing time: Sat 23 Aug 2025 04:00:53 +0000
Manifest this update: Sat 23 Aug 2025 04:00:53 +0000
Manifest next update: Sun 24 Aug 2025 04:00:53 +0000
Files and hashes: 1: 35GEXmXk8DlPHmw_-edzL2qkb9w.crl (hash: wVXyVvqMs1IJeg2d+aJIPnWtirduSpU2KUiJZWxn8pc=)
2: ZrChAnEIC7XkkvtmNcAU0NitmrI.roa (hash: 99wLAgfUwposvYSU46TWayIZqmg33XG3e0RoKs9DbJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:21:4c:84:a9:fc:46:9e:0d:86:8e:1b:0d:fe:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc
Validity
Not Before: Aug 23 04:00:53 2025 GMT
Not After : Aug 24 04:00:53 2025 GMT
Subject: CN=20964de97967a2ec845941ccb9dbbe333021de8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3c:40:7e:19:47:c6:75:07:34:6d:00:14:b5:
62:f4:b7:46:59:53:47:61:19:20:e8:b5:cf:24:f0:
b5:80:07:f5:9a:2d:8b:62:4b:98:f9:12:1d:17:c9:
7e:c4:91:3f:99:61:5e:04:65:c7:58:a8:39:99:9a:
31:01:81:b3:27:cb:d9:06:e3:7b:ce:5f:28:5d:f2:
fa:83:bf:4c:cc:55:26:00:c4:b1:0a:35:b1:21:5c:
bc:78:54:d9:47:b5:95:c0:08:e8:10:07:9e:dd:df:
de:ee:92:a5:f2:59:2a:ec:30:d3:f9:d1:0d:77:f8:
f7:b7:1a:44:79:ba:1d:66:6d:28:ab:83:de:83:34:
4f:30:23:c6:54:36:c5:e4:ea:dc:72:74:3b:e9:ba:
bb:50:fb:4c:66:a3:4d:59:60:79:ac:66:24:0b:1b:
33:a5:ce:c6:d8:0d:f6:9a:fc:e7:36:4c:75:1f:9e:
36:6c:1e:5e:d2:a7:1e:a6:b4:1d:9a:c2:34:2b:f8:
92:4b:ce:94:96:2a:42:2c:b5:e9:29:68:82:c8:30:
8f:01:bb:6a:3c:ee:54:f0:2b:a7:b7:2b:5d:93:1e:
08:21:b8:bb:25:bb:7f:68:5c:83:3a:7b:17:f9:3a:
d9:c9:10:e9:a0:a4:80:a7:b6:e6:42:fc:a0:0e:a4:
28:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:96:4D:E9:79:67:A2:EC:84:59:41:CC:B9:DB:BE:33:30:21:DE:8D
X509v3 Authority Key Identifier:
keyid:DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:15:be:3a:c3:1a:ab:ba:3a:e3:73:a8:fe:5c:3d:71:b6:36:
70:10:5f:ec:2e:33:88:ca:a9:47:87:3b:cf:34:e6:8b:97:28:
08:88:9c:96:64:b2:d9:7a:14:0c:64:74:86:3f:bc:fb:55:97:
9c:cf:2b:5b:b0:40:38:37:aa:82:43:8f:f8:39:5d:ee:d7:68:
fb:77:54:c9:6a:05:42:88:c7:01:f1:99:14:7a:29:73:be:fb:
c4:ec:07:4b:19:9e:6e:f3:96:ca:31:9b:be:96:15:4e:55:9b:
7b:7b:99:43:d8:f8:4c:a2:5d:59:f8:cb:b1:13:da:66:8c:3d:
04:71:82:2d:b5:55:2e:bc:12:8f:be:7f:e2:e9:1a:0d:d5:50:
9a:3d:bb:64:8e:90:5d:ab:f9:34:f4:bb:bd:e3:25:39:50:65:
cf:67:fa:ae:27:70:df:6f:cb:77:d6:82:98:0d:1e:62:ec:26:
ab:35:9f:0f:39:a0:c0:f5:d5:25:57:cc:76:3f:1d:dc:b4:80:
fa:28:b4:55:f9:cc:58:66:08:56:96:96:8c:94:ff:f4:58:de:
fd:f6:91:8a:f6:a3:55:c5:d4:8d:95:20:a4:26:47:d6:f1:09:
10:17:f5:c2:97:42:76:04:fd:06:40:0c:8c:0e:71:79:b0:c0:
5c:68:9a:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFiFMhKn8Rp4Nho4bDf4JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmOTE4NDVlNjVlNGYwMzk0ZjFlNmMzZmY5ZTc3MzJmNmFh
NDZmZGMwHhcNMjUwODIzMDQwMDUzWhcNMjUwODI0MDQwMDUzWjAzMTEwLwYDVQQD
EygyMDk2NGRlOTc5NjdhMmVjODQ1OTQxY2NiOWRiYmUzMzMwMjFkZThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDxAfhlHxnUHNG0AFLVi9LdGWVNH
YRkg6LXPJPC1gAf1mi2LYkuY+RIdF8l+xJE/mWFeBGXHWKg5mZoxAYGzJ8vZBuN7
zl8oXfL6g79MzFUmAMSxCjWxIVy8eFTZR7WVwAjoEAee3d/e7pKl8lkq7DDT+dEN
d/j3txpEebodZm0oq4PegzRPMCPGVDbF5OrccnQ76bq7UPtMZqNNWWB5rGYkCxsz
pc7G2A32mvznNkx1H542bB5e0qceprQdmsI0K/iSS86UlipCLLXpKWiCyDCPAbtq
PO5U8Cuntytdkx4IIbi7Jbt/aFyDOnsX+TrZyRDpoKSAp7bmQvygDqQoVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCWTel5Z6LshFlBzLnbvjMwId6NMB8GA1UdIwQY
MBaAFN+RhF5l5PA5Tx5sP/nncy9qpG/cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzVHRVhtWGs4RGxQSG13Xy1lZHpMMnFrYjl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8wZThlYjktZjY1Ni00Y2NmLWE4MTQt
Zjg5YWI5ZjEyODZjLzEvMzVHRVhtWGs4RGxQSG13Xy1lZHpMMnFrYjl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8wZThlYjktZjY1Ni00Y2NmLWE4MTQtZjg5YWI5ZjEyODZj
LzEvMzVHRVhtWGs4RGxQSG13Xy1lZHpMMnFrYjl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOBW+OsMa
q7o643Oo/lw9cbY2cBBf7C4ziMqpR4c7zzTmi5coCIiclmSy2XoUDGR0hj+8+1WX
nM8rW7BAODeqgkOP+Dld7tdo+3dUyWoFQojHAfGZFHopc777xOwHSxmebvOWyjGb
vpYVTlWbe3uZQ9j4TKJdWfjLsRPaZow9BHGCLbVVLrwSj75/4ukaDdVQmj27ZI6Q
Xav5NPS7veMlOVBlz2f6ridw32/Ld9aCmA0eYuwmqzWfDzmgwPXVJVfMdj8d3LSA
+ii0VfnMWGYIVpaWjJT/9Fje/faRivajVcXUjZUgpCZH1vEJEBf1wpdCdgT9BkAM
jA5xebDAXGiaUQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:12 2025 by rpki-client