Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
File: 35me_9SQo7jQzTGumZ8ObT6Y5oI.mft (raw, json)
Hash identifier: 246etApCFNbOAGIsoT+1zYew4xZkMvKg3M5gveNcLDY=
Subject key identifier: 40:AF:B0:81:7F:14:C3:66:3B:7A:63:8E:FF:9A:F8:0A:F5:46:6D:CE
Authority key identifier: DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
Certificate issuer: /CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Certificate serial: 0199FCC6C2C96583F1D4B8D133ED5887562B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
Manifest number: 0DEC
Signing time: Sun 19 Oct 2025 14:01:48 +0000
Manifest this update: Sun 19 Oct 2025 14:01:48 +0000
Manifest next update: Mon 20 Oct 2025 14:01:48 +0000
Files and hashes: 1: 35me_9SQo7jQzTGumZ8ObT6Y5oI.crl (hash: 39Oa9OVYgQrGn3CsEA3LOwvy0OTk6EvIz0I7YPcv6Jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:c2:c9:65:83:f1:d4:b8:d1:33:ed:58:87:56:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Validity
Not Before: Oct 19 14:01:48 2025 GMT
Not After : Oct 20 14:01:48 2025 GMT
Subject: CN=40afb0817f14c3663b7a638eff9af80af5466dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b8:71:8f:5f:41:dc:04:17:06:39:84:c8:f9:
32:5a:4d:c7:67:f9:a5:c6:ad:51:ff:d6:32:28:61:
45:38:b0:0d:ce:2c:16:de:a5:cf:08:40:d8:f1:ce:
56:90:3b:83:c2:56:a1:fc:78:e1:9c:34:f8:53:36:
63:6c:28:d7:fe:52:38:81:c4:12:2b:ca:69:48:c6:
45:bd:36:ae:98:8a:58:4b:6d:4a:dc:e7:32:7f:35:
bc:b3:97:0d:b1:26:db:cd:25:19:ca:7f:56:bd:7e:
d0:31:9e:c1:d0:7f:52:77:83:76:b1:f2:c2:82:ef:
9f:36:d0:39:36:c8:2a:3a:98:8b:a4:b4:59:fa:d7:
47:76:09:12:d5:cb:47:d4:10:33:26:e5:73:ae:4c:
ad:03:ee:e9:91:47:8f:b1:2f:de:c8:d4:50:0a:cb:
cb:24:4d:6b:c4:75:e4:88:ec:f4:fb:fb:19:01:86:
a6:ae:0a:1d:89:aa:77:2b:c3:c5:cc:a9:7e:08:94:
77:7f:17:9d:f1:3b:a8:6f:d9:b7:14:0c:46:8b:55:
01:04:95:11:6f:0b:71:57:c7:97:d3:84:fa:df:e6:
71:47:f6:be:24:df:d2:99:51:91:e7:0e:20:9b:53:
56:14:b9:ba:75:ba:df:2f:ac:46:89:34:e5:4c:01:
5a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AF:B0:81:7F:14:C3:66:3B:7A:63:8E:FF:9A:F8:0A:F5:46:6D:CE
X509v3 Authority Key Identifier:
keyid:DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ef:7a:35:f2:47:b8:e8:80:14:5d:6b:d7:d5:1d:5e:cc:2c:
e4:9e:95:6a:f2:6b:17:c1:d3:55:1e:2b:24:32:5b:0a:d9:11:
5a:eb:3d:9a:ab:b9:c0:e7:8a:8e:d6:01:b8:57:15:d2:7c:05:
31:b0:d0:98:5a:cb:f9:c4:c7:95:59:2f:f7:9e:9b:93:08:43:
dc:af:61:4f:e3:c0:4a:53:a4:6e:84:ff:9e:4c:c6:5a:11:a2:
c2:cb:fa:15:52:c9:85:c4:d2:78:73:90:8f:08:4e:df:56:ec:
35:5c:0c:88:47:2b:46:7d:a1:86:30:37:8d:d5:94:f1:cf:c1:
ab:ab:6c:75:93:c1:fa:5e:7b:7e:93:e2:04:c1:c6:fe:21:86:
21:b9:66:6c:89:36:cf:35:88:55:ce:99:13:55:a0:1f:59:21:
2a:d0:e3:bf:36:b7:45:e7:79:44:f2:4b:4c:37:54:b1:f7:9e:
8c:02:ed:1b:61:c2:fe:05:f7:77:6a:9b:ba:6d:ff:cc:ce:ba:
df:3f:ad:ef:38:4a:29:13:62:12:f9:f0:3c:d1:e8:ba:03:88:
74:95:b3:5d:fb:b0:a7:b6:86:2b:6f:9f:a5:ea:f1:3c:aa:83:
f1:94:6d:94:b0:1f:e4:a6:88:e1:bc:ed:82:c0:74:74:bd:97:
78:b9:68:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:32 2025 by rpki-client