Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
File: 35me_9SQo7jQzTGumZ8ObT6Y5oI.mft (raw, json)
Hash identifier: x77mjrz2v67T9abBSQEiu1wviKPeo/kY+5Hq8jtyquE=
Subject key identifier: B7:1C:CE:0B:0E:8E:35:39:0B:63:89:D3:D6:50:BF:4E:05:FE:E1:E9
Authority key identifier: DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
Certificate issuer: /CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Certificate serial: 0197B77C7BD53FE4F7D5DC960FF4E0B25E5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
Manifest number: 0CBF
Signing time: Sat 28 Jun 2025 17:01:17 +0000
Manifest this update: Sat 28 Jun 2025 17:01:17 +0000
Manifest next update: Sun 29 Jun 2025 17:01:17 +0000
Files and hashes: 1: 35me_9SQo7jQzTGumZ8ObT6Y5oI.crl (hash: X2J0z6wRP4KD/ebYbrGH/wHbYkCjjY1eMh5ZRoefaa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:7b:d5:3f:e4:f7:d5:dc:96:0f:f4:e0:b2:5e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Validity
Not Before: Jun 28 17:01:17 2025 GMT
Not After : Jun 29 17:01:17 2025 GMT
Subject: CN=b71cce0b0e8e35390b6389d3d650bf4e05fee1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3a:6e:32:f7:ff:de:b4:f6:2a:54:df:fb:a6:
5d:ac:9b:73:e0:56:28:b5:a3:00:1f:e4:8b:25:ed:
4d:bc:94:f8:0f:42:a3:40:76:56:69:20:dd:d1:a9:
be:c6:1f:d8:5e:4e:d3:26:aa:84:ce:17:97:70:92:
54:34:c4:26:15:ae:5d:97:21:d2:ae:fc:1d:80:9a:
10:5c:c0:7c:cb:99:14:bf:89:ef:eb:fe:aa:3f:a4:
91:31:53:a6:6a:17:29:37:82:c3:e6:c9:c2:ce:a5:
d6:52:27:77:33:03:fe:ec:64:86:7f:22:fc:8e:a6:
ab:e4:fb:21:dc:a4:0b:b5:dd:a1:59:e0:d1:8b:88:
d7:2e:38:1b:cd:52:00:5c:71:1c:8b:c7:e8:39:e5:
6d:4d:31:0f:38:70:9d:9c:63:cf:7d:ce:87:9e:81:
11:f6:76:8a:12:8e:48:28:d2:cd:57:63:15:6b:41:
36:09:e6:98:84:b2:69:d1:27:da:dd:dd:a6:59:dd:
49:40:5e:59:23:dc:f4:08:72:8d:62:33:2a:6b:28:
99:12:00:f2:9b:51:96:b7:5a:f3:7b:b3:24:4e:ca:
67:8d:c3:7c:c6:07:e3:c1:1e:99:b1:23:b8:c5:b6:
42:54:70:7a:12:c5:f4:0b:b0:57:7e:1f:4b:02:07:
39:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1C:CE:0B:0E:8E:35:39:0B:63:89:D3:D6:50:BF:4E:05:FE:E1:E9
X509v3 Authority Key Identifier:
keyid:DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:74:aa:be:4c:b9:7f:32:48:b7:67:3b:1d:c6:bb:b3:58:7c:
d4:fd:b6:fa:01:28:df:cd:96:41:14:8f:b0:8c:fd:77:c7:1c:
36:2a:d4:ca:30:6b:81:df:fb:47:8a:0e:c3:2f:10:2f:fe:95:
e7:b2:7e:4f:dc:db:80:68:96:d9:77:65:87:4b:b4:8d:2f:ca:
c2:eb:41:1d:85:ed:61:86:1e:d1:50:ce:54:2c:0f:08:5c:9b:
35:04:40:06:d5:8e:0a:08:7d:98:46:7a:3c:f3:71:86:05:ab:
5c:8a:f7:7a:07:99:06:32:1a:87:22:7e:74:e1:d7:32:02:8a:
5d:be:a2:67:1c:04:17:c4:8f:f8:38:f4:4e:65:23:d9:6f:65:
e2:a2:35:0c:ee:45:52:7e:70:3c:64:64:01:9f:40:52:00:3a:
d0:21:65:1c:7f:ad:4b:ff:17:d5:85:fa:c1:98:2a:a8:0a:74:
af:8f:90:1b:e8:48:bc:35:e8:57:85:d5:32:dc:a8:79:60:9d:
d1:6f:0f:ba:9e:39:97:89:d3:47:ce:27:2e:65:3c:b2:3b:cb:
49:31:45:30:2b:23:b3:b6:70:e3:73:80:c4:ee:a1:f7:8e:b2:
2e:2e:db:8f:91:a5:29:29:c8:fb:89:1c:78:05:7a:d4:ee:46:
83:c6:2e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:26:44 2025 by rpki-client