Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
File: 35qWOAlxTREDtkYNnQ4UoS6FAyU.mft (raw, json)
Hash identifier: TOzYM5RLuox+bJEJ5nWWQmDR90qBJlcBKjm1fO3xIA4=
Subject key identifier: 59:39:8E:46:4C:07:65:95:64:6F:EC:D0:A9:64:2D:34:F0:C6:A4:53
Authority key identifier: DF:9A:96:38:09:71:4D:11:03:B6:46:0D:9D:0E:14:A1:2E:85:03:25
Certificate issuer: /CN=df9a963809714d1103b6460d9d0e14a12e850325
Certificate serial: 0199FBEA9785AE0C1503154204DEE4CE784A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
Manifest number: 0DC7
Signing time: Sun 19 Oct 2025 10:01:19 +0000
Manifest this update: Sun 19 Oct 2025 10:01:19 +0000
Manifest next update: Mon 20 Oct 2025 10:01:19 +0000
Files and hashes: 1: 35qWOAlxTREDtkYNnQ4UoS6FAyU.crl (hash: sdGc9ukXrrNnKjrdy/vjvgXAjgh79IxwD/DQNDHMF80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:97:85:ae:0c:15:03:15:42:04:de:e4:ce:78:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df9a963809714d1103b6460d9d0e14a12e850325
Validity
Not Before: Oct 19 10:01:19 2025 GMT
Not After : Oct 20 10:01:19 2025 GMT
Subject: CN=59398e464c076595646fecd0a9642d34f0c6a453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:bf:e8:88:50:0d:52:92:11:1d:59:c6:53:7a:
2d:1e:72:ab:2c:f1:e9:ba:8e:29:89:ef:ce:61:d8:
c3:5f:0c:7a:e9:2a:78:64:b1:e1:4c:4a:c9:2c:d0:
af:ec:83:b7:d9:5f:1b:6e:0c:ee:ee:39:7d:9d:65:
47:d9:7c:f4:4d:c3:9e:b4:a6:35:ca:e1:82:55:7e:
3d:b7:e8:48:c9:84:9a:9f:fd:36:9a:52:0d:2b:55:
d4:c3:ba:bd:38:75:62:01:88:7e:22:2c:46:45:89:
be:67:28:34:0a:50:4c:1d:ec:ef:29:6e:12:81:d4:
4a:3e:9b:43:bf:3a:30:3f:c3:84:97:77:cb:64:76:
49:36:39:d6:d2:03:31:9b:84:63:fa:0f:c6:cc:1b:
24:b3:0a:d3:5f:e3:4b:9b:9b:61:17:d2:03:4c:b0:
29:78:00:6d:b5:e1:c8:9d:63:02:9d:10:ae:7b:79:
da:34:92:a7:59:49:86:d8:31:37:f2:21:51:a0:2c:
aa:20:82:87:7c:bf:dd:58:75:70:a2:09:de:7f:7f:
6b:f5:50:8f:42:6b:ce:43:14:fe:d7:41:7c:76:49:
4a:15:41:50:65:f8:c1:52:57:ff:9a:4d:33:20:76:
19:2a:66:ac:76:22:60:88:a4:9a:e4:0e:dd:98:8e:
cf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:39:8E:46:4C:07:65:95:64:6F:EC:D0:A9:64:2D:34:F0:C6:A4:53
X509v3 Authority Key Identifier:
keyid:DF:9A:96:38:09:71:4D:11:03:B6:46:0D:9D:0E:14:A1:2E:85:03:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:64:1b:17:89:41:f8:27:f5:af:88:93:fb:b9:37:3f:8f:9b:
55:a9:88:c3:a2:e9:9f:70:08:d8:3e:3f:3d:65:8d:39:f0:a0:
67:31:99:d1:f9:26:5b:b6:34:aa:bb:fc:92:03:37:24:6a:af:
71:0f:fd:82:5d:6c:04:f7:e1:3f:54:51:d0:ae:50:7a:78:e4:
cc:29:4b:eb:ca:88:8d:0d:17:5b:9d:cc:7e:b9:d1:6c:26:b3:
2d:ed:f5:3c:44:d9:ce:87:44:53:c6:5f:9a:9b:61:ca:0f:c5:
e2:00:4c:50:43:09:26:08:16:e7:95:d3:2e:20:f7:19:3f:24:
e5:89:c9:a9:8c:73:1a:6a:d9:0d:8e:62:65:14:43:c1:a5:0f:
4d:e3:05:df:2d:1d:85:64:14:25:f8:bc:99:9a:e1:09:9b:d5:
4f:e3:e9:17:50:38:c0:61:c8:1c:c4:b0:03:2f:1a:52:ab:de:
84:67:9d:68:9e:c1:c0:42:61:de:45:fc:f3:cc:64:82:7e:ac:
ad:36:3f:37:e8:d5:20:16:01:dd:87:57:8e:bf:1c:0b:28:61:
0c:1a:fe:b3:ba:2f:7d:60:4c:1b:e4:a2:5b:51:99:ed:b1:24:
2a:df:90:37:99:28:67:10:db:18:93:41:e2:12:4e:6e:30:ad:
16:ab:0a:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76peFrgwVAxVCBN7kznhKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmOWE5NjM4MDk3MTRkMTEwM2I2NDYwZDlkMGUxNGExMmU4
NTAzMjUwHhcNMjUxMDE5MTAwMTE5WhcNMjUxMDIwMTAwMTE5WjAzMTEwLwYDVQQD
Eyg1OTM5OGU0NjRjMDc2NTk1NjQ2ZmVjZDBhOTY0MmQzNGYwYzZhNDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47/oiFANUpIRHVnGU3otHnKrLPHp
uo4pie/OYdjDXwx66Sp4ZLHhTErJLNCv7IO32V8bbgzu7jl9nWVH2Xz0TcOetKY1
yuGCVX49t+hIyYSan/02mlINK1XUw7q9OHViAYh+IixGRYm+Zyg0ClBMHezvKW4S
gdRKPptDvzowP8OEl3fLZHZJNjnW0gMxm4Rj+g/GzBskswrTX+NLm5thF9IDTLAp
eABtteHInWMCnRCue3naNJKnWUmG2DE38iFRoCyqIIKHfL/dWHVwognef39r9VCP
QmvOQxT+10F8dklKFUFQZfjBUlf/mk0zIHYZKmasdiJgiKSa5A7dmI7PkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFk5jkZMB2WVZG/s0KlkLTTwxqRTMB8GA1UdIwQY
MBaAFN+aljgJcU0RA7ZGDZ0OFKEuhQMlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzVxV09BbHhUUkVEdGtZTm5RNFVvUzZGQXlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC81MTQxYWEtMThkOS00ZDM0LTgyNzgt
ZjMwOTZhMDI0ZTI5LzEvMzVxV09BbHhUUkVEdGtZTm5RNFVvUzZGQXlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC81MTQxYWEtMThkOS00ZDM0LTgyNzgtZjMwOTZhMDI0ZTI5
LzEvMzVxV09BbHhUUkVEdGtZTm5RNFVvUzZGQXlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl2QbF4lB
+Cf1r4iT+7k3P4+bVamIw6Lpn3AI2D4/PWWNOfCgZzGZ0fkmW7Y0qrv8kgM3JGqv
cQ/9gl1sBPfhP1RR0K5QenjkzClL68qIjQ0XW53MfrnRbCazLe31PETZzodEU8Zf
mpthyg/F4gBMUEMJJggW55XTLiD3GT8k5YnJqYxzGmrZDY5iZRRDwaUPTeMF3y0d
hWQUJfi8mZrhCZvVT+PpF1A4wGHIHMSwAy8aUqvehGedaJ7BwEJh3kX888xkgn6s
rTY/N+jVIBYB3YdXjr8cCyhhDBr+s7ovfWBMG+SiW1GZ7bEkKt+QN5koZxDbGJNB
4hJObjCtFqsKvQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:21 2025 by rpki-client