Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
File: M35ja6YMcU_-h1SrnQTG0e7bm4k.mft (raw, json)
Hash identifier: 7EJDAoOUPiTwa7Uosp60PXj539D58mtvBXhmbPWvGIo=
Subject key identifier: 27:4C:04:A6:80:CE:C0:18:C0:EB:C7:2F:04:F7:A5:76:62:2D:E4:AF
Authority key identifier: 33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89
Certificate issuer: /CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89
Certificate serial: 0198D4DFF1604671EE59F0792739BC25CC4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
Manifest number: 02C7
Signing time: Sat 23 Aug 2025 03:01:42 +0000
Manifest this update: Sat 23 Aug 2025 03:01:42 +0000
Manifest next update: Sun 24 Aug 2025 03:01:42 +0000
Files and hashes: 1: M35ja6YMcU_-h1SrnQTG0e7bm4k.crl (hash: ClyXWc6tuHc9ve6seIyJuYBobn5HjTSRApMHw6PFKRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:f1:60:46:71:ee:59:f0:79:27:39:bc:25:cc:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89
Validity
Not Before: Aug 23 03:01:42 2025 GMT
Not After : Aug 24 03:01:42 2025 GMT
Subject: CN=274c04a680cec018c0ebc72f04f7a576622de4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:64:2d:08:84:a0:07:7f:04:e9:c1:e0:61:c6:
ca:91:44:18:a9:0b:37:66:46:9e:81:cd:2a:44:83:
19:b1:6b:2d:c6:f4:f1:79:54:60:8e:5a:98:28:32:
4d:5d:8d:51:92:d3:9c:3e:6a:94:f2:f1:35:ae:93:
4c:1d:1a:5e:fc:94:91:92:6e:00:3d:65:8f:5e:93:
a7:24:71:d6:51:90:52:46:10:6f:78:5a:98:58:ac:
7a:5c:11:20:55:2f:6b:10:86:cb:1a:b4:0e:41:2b:
7e:bc:63:38:0e:ce:1e:ec:18:4a:9e:f6:68:44:ee:
6b:6f:e3:20:27:dc:f0:97:50:52:27:3b:59:4a:05:
d8:44:35:c8:39:18:a0:e7:a5:f2:35:c5:39:85:ee:
55:b9:eb:4b:b6:20:9c:4c:f4:55:52:da:cd:e8:38:
33:cb:9d:49:51:31:e0:03:d0:a3:5f:1c:9f:0f:c1:
02:5a:94:77:ad:db:bc:a6:ae:0b:05:fb:7b:05:27:
70:c6:f6:b8:90:71:92:15:75:c6:dd:5c:ae:7b:86:
74:52:b6:45:b6:20:92:81:6f:e9:72:72:f3:e7:19:
e1:c7:f7:6a:02:79:c6:43:b6:02:9e:eb:bd:25:0e:
74:16:a4:e3:c7:f2:8b:e9:8a:6b:70:97:1d:da:13:
43:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4C:04:A6:80:CE:C0:18:C0:EB:C7:2F:04:F7:A5:76:62:2D:E4:AF
X509v3 Authority Key Identifier:
keyid:33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:2b:ab:d7:d6:0e:69:97:2b:34:99:a0:8e:8c:27:6a:72:b7:
41:3f:13:68:d0:e1:48:48:fd:c3:73:8a:03:79:5e:48:36:7d:
22:0b:f3:38:72:8c:04:98:a1:b0:8d:6e:70:a1:77:06:14:2a:
8c:6a:68:53:1e:5b:1c:e8:87:bb:17:3f:6f:ba:c3:65:1b:24:
57:7c:1e:67:b6:11:bf:ff:26:8a:13:5b:98:2d:67:90:e6:23:
c2:c7:c2:ce:e9:43:fc:2a:04:f3:07:50:80:65:15:c8:4b:e7:
62:a2:f4:e3:be:c2:9c:6c:d5:f1:10:4e:a2:42:df:06:dc:d9:
9f:94:97:89:38:74:07:09:51:67:55:15:ec:56:92:e9:c7:90:
4a:3c:4d:80:9b:c8:02:18:8f:02:22:dd:6b:b6:94:0e:4b:d6:
b6:0a:f8:80:fb:e0:7d:2c:75:dc:ef:4a:59:01:e1:96:f7:34:
d1:46:2c:5c:e8:5d:f3:c7:a0:ba:34:d3:13:9b:ef:81:af:74:
d5:6c:5d:9f:7d:c7:85:75:d6:aa:10:18:19:5b:f2:64:d4:20:
9e:19:ef:e4:2a:32:ef:66:58:d5:03:b5:c6:73:2e:de:8a:eb:
37:5b:38:62:8d:5a:d8:2b:93:24:55:da:01:96:9f:b8:91:c2:
22:18:27:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU3/FgRnHuWfB5Jzm8JcxKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzN2U2MzZiYTYwYzcxNGZmZTg3NTRhYjlkMDRjNmQxZWVk
YjliODkwHhcNMjUwODIzMDMwMTQyWhcNMjUwODI0MDMwMTQyWjAzMTEwLwYDVQQD
EygyNzRjMDRhNjgwY2VjMDE4YzBlYmM3MmYwNGY3YTU3NjYyMmRlNGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWQtCISgB38E6cHgYcbKkUQYqQs3
Zkaegc0qRIMZsWstxvTxeVRgjlqYKDJNXY1RktOcPmqU8vE1rpNMHRpe/JSRkm4A
PWWPXpOnJHHWUZBSRhBveFqYWKx6XBEgVS9rEIbLGrQOQSt+vGM4Ds4e7BhKnvZo
RO5rb+MgJ9zwl1BSJztZSgXYRDXIORig56XyNcU5he5VuetLtiCcTPRVUtrN6Dgz
y51JUTHgA9CjXxyfD8ECWpR3rdu8pq4LBft7BSdwxva4kHGSFXXG3Vyue4Z0UrZF
tiCSgW/pcnLz5xnhx/dqAnnGQ7YCnuu9JQ50FqTjx/KL6YprcJcd2hND3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdMBKaAzsAYwOvHLwT3pXZiLeSvMB8GA1UdIwQY
MBaAFDN+Y2umDHFP/odUq50ExtHu25uJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTM1amE2WU1jVV8taDFTcm5RVEcwZTdibTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lNzBjODMtNDZmZC00MGI0LTgzYzkt
NzBjMjI4ZWU5Yzk1LzEvTTM1amE2WU1jVV8taDFTcm5RVEcwZTdibTRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9lNzBjODMtNDZmZC00MGI0LTgzYzktNzBjMjI4ZWU5Yzk1
LzEvTTM1amE2WU1jVV8taDFTcm5RVEcwZTdibTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACyur19YO
aZcrNJmgjownanK3QT8TaNDhSEj9w3OKA3leSDZ9IgvzOHKMBJihsI1ucKF3BhQq
jGpoUx5bHOiHuxc/b7rDZRskV3weZ7YRv/8mihNbmC1nkOYjwsfCzulD/CoE8wdQ
gGUVyEvnYqL0477CnGzV8RBOokLfBtzZn5SXiTh0BwlRZ1UV7FaS6ceQSjxNgJvI
AhiPAiLda7aUDkvWtgr4gPvgfSx13O9KWQHhlvc00UYsXOhd88egujTTE5vvga90
1Wxdn33HhXXWqhAYGVvyZNQgnhnv5Coy72ZY1QO1xnMu3orrN1s4Yo1a2CuTJFXa
AZafuJHCIhgn+g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:37 2025 by rpki-client