Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
File: 35qWOAlxTREDtkYNnQ4UoS6FAyU.mft (raw, json)
Hash identifier: Wi+GN13HpmAMwlzk/O4Mv/HYYTmXpP7tn73V7qhSi9U=
Subject key identifier: ED:36:01:8D:4A:95:E9:F6:AB:58:30:87:BF:63:6F:B3:B9:F1:27:F6
Authority key identifier: DF:9A:96:38:09:71:4D:11:03:B6:46:0D:9D:0E:14:A1:2E:85:03:25
Certificate issuer: /CN=df9a963809714d1103b6460d9d0e14a12e850325
Certificate serial: 0198D6612E1C9E2FBFACBF868AAED10CABE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
Manifest number: 0D2F
Signing time: Sat 23 Aug 2025 10:02:29 +0000
Manifest this update: Sat 23 Aug 2025 10:02:29 +0000
Manifest next update: Sun 24 Aug 2025 10:02:29 +0000
Files and hashes: 1: 35qWOAlxTREDtkYNnQ4UoS6FAyU.crl (hash: IoQ7vvBkicj+YydAPVR7RFa8z3u3hOSF5t+t91+w5ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:2e:1c:9e:2f:bf:ac:bf:86:8a:ae:d1:0c:ab:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df9a963809714d1103b6460d9d0e14a12e850325
Validity
Not Before: Aug 23 10:02:29 2025 GMT
Not After : Aug 24 10:02:29 2025 GMT
Subject: CN=ed36018d4a95e9f6ab583087bf636fb3b9f127f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:44:68:52:8b:02:bc:f1:4a:3a:74:d5:5d:74:
e8:07:40:76:6a:f7:d6:c0:5c:29:ee:ac:5f:63:e2:
dc:9e:de:ea:90:c1:73:df:70:5d:32:2b:0a:a9:82:
f4:b6:53:d8:9c:7f:46:8d:36:0c:f6:83:41:99:2e:
85:51:b6:89:9e:e8:2d:4d:ad:d9:79:ba:82:b4:2d:
a3:44:07:9b:b6:a7:f6:9c:17:1b:38:63:c2:0d:94:
b0:33:bf:e1:2e:9d:82:4b:f5:87:06:95:93:2c:12:
cc:a0:b9:c6:24:df:c2:ad:62:dd:90:a3:72:d0:bc:
98:5d:fa:a1:11:e8:ff:c7:8a:a0:ab:a8:df:ea:a5:
ed:26:bf:a1:09:21:71:14:02:34:d0:4c:cc:6b:fa:
91:7e:c2:2b:e8:d1:63:12:ec:b2:f6:6a:44:dc:6a:
13:49:7b:3c:7f:e8:46:27:37:9b:b5:5d:37:7a:1f:
51:f9:48:7b:bb:61:10:3e:ca:12:da:fb:08:f4:07:
71:93:e9:90:f2:f1:66:60:29:56:78:30:8c:9c:af:
8c:8f:29:c0:b6:e8:b1:64:7b:0c:a4:b1:60:9f:e1:
2a:8e:66:00:b7:0d:c9:e5:9f:6a:98:4a:d6:b1:2e:
ca:8c:47:4a:6c:75:b7:e9:ea:74:46:58:49:c3:30:
7a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:36:01:8D:4A:95:E9:F6:AB:58:30:87:BF:63:6F:B3:B9:F1:27:F6
X509v3 Authority Key Identifier:
keyid:DF:9A:96:38:09:71:4D:11:03:B6:46:0D:9D:0E:14:A1:2E:85:03:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:fe:fe:a7:cf:f1:e2:d2:6c:27:6d:d4:1b:6d:b1:28:0b:81:
6d:99:18:54:8b:9e:6b:46:c3:32:92:bb:46:3f:d5:94:cb:43:
63:06:44:e0:40:5d:f6:3e:74:84:da:dc:61:82:d6:5e:82:a2:
ce:3d:9e:e7:3c:26:6c:f6:6c:43:96:21:90:4d:1d:67:1f:3d:
0f:cc:9e:3e:c4:78:a2:62:41:03:0a:3c:16:48:4a:15:a1:53:
ee:1e:9d:f2:4a:cd:fd:72:49:8f:35:9b:86:a2:0d:37:48:0c:
38:b1:d0:65:02:ed:c7:89:a4:0d:d7:da:7f:00:c3:90:72:54:
2d:17:9b:ea:73:0d:c1:5b:fb:c6:8b:ad:f2:7f:a3:37:d9:dc:
7b:ef:48:e8:68:ec:a5:54:03:33:cb:a5:fc:cb:b3:db:c7:19:
24:0e:cb:8d:39:ca:b8:8a:69:0f:05:b7:96:33:c6:c3:19:6b:
d8:9c:9e:de:79:2d:92:15:c6:fa:5c:fe:64:cb:2b:8b:54:41:
67:d1:33:32:93:28:e4:66:e8:91:95:29:f9:ad:d7:39:a4:98:
2d:d4:a9:15:7c:f6:2e:26:5a:84:d8:b9:16:e4:b6:d5:75:95:
d2:08:70:37:8d:48:6a:15:3b:b6:bd:1a:10:90:c9:ed:8c:fd:
29:06:94:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYS4cni+/rL+Giq7RDKviMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmOWE5NjM4MDk3MTRkMTEwM2I2NDYwZDlkMGUxNGExMmU4
NTAzMjUwHhcNMjUwODIzMTAwMjI5WhcNMjUwODI0MTAwMjI5WjAzMTEwLwYDVQQD
EyhlZDM2MDE4ZDRhOTVlOWY2YWI1ODMwODdiZjYzNmZiM2I5ZjEyN2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkRoUosCvPFKOnTVXXToB0B2avfW
wFwp7qxfY+Lcnt7qkMFz33BdMisKqYL0tlPYnH9GjTYM9oNBmS6FUbaJnugtTa3Z
ebqCtC2jRAebtqf2nBcbOGPCDZSwM7/hLp2CS/WHBpWTLBLMoLnGJN/CrWLdkKNy
0LyYXfqhEej/x4qgq6jf6qXtJr+hCSFxFAI00EzMa/qRfsIr6NFjEuyy9mpE3GoT
SXs8f+hGJzebtV03eh9R+Uh7u2EQPsoS2vsI9Adxk+mQ8vFmYClWeDCMnK+MjynA
tuixZHsMpLFgn+EqjmYAtw3J5Z9qmErWsS7KjEdKbHW36ep0RlhJwzB6QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO02AY1Klen2q1gwh79jb7O58Sf2MB8GA1UdIwQY
MBaAFN+aljgJcU0RA7ZGDZ0OFKEuhQMlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzVxV09BbHhUUkVEdGtZTm5RNFVvUzZGQXlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC81MTQxYWEtMThkOS00ZDM0LTgyNzgt
ZjMwOTZhMDI0ZTI5LzEvMzVxV09BbHhUUkVEdGtZTm5RNFVvUzZGQXlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC81MTQxYWEtMThkOS00ZDM0LTgyNzgtZjMwOTZhMDI0ZTI5
LzEvMzVxV09BbHhUUkVEdGtZTm5RNFVvUzZGQXlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoP7+p8/x
4tJsJ23UG22xKAuBbZkYVIuea0bDMpK7Rj/VlMtDYwZE4EBd9j50hNrcYYLWXoKi
zj2e5zwmbPZsQ5YhkE0dZx89D8yePsR4omJBAwo8FkhKFaFT7h6d8krN/XJJjzWb
hqINN0gMOLHQZQLtx4mkDdfafwDDkHJULReb6nMNwVv7xout8n+jN9nce+9I6Gjs
pVQDM8ul/Muz28cZJA7LjTnKuIppDwW3ljPGwxlr2Jye3nktkhXG+lz+ZMsri1RB
Z9EzMpMo5GbokZUp+a3XOaSYLdSpFXz2LiZahNi5FuS21XWV0ghwN41IahU7tr0a
EJDJ7Yz9KQaUTA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:45:48 2025 by rpki-client