Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
File: 435f8SPqfS6DzidSDJh9A35knQM.mft (raw, json)
Hash identifier: 2zHKlhb3x2fAIkcaMYRr1wHknr6l7iqY8HGQtl9y05M=
Subject key identifier: 10:F6:1B:99:DF:C4:97:EB:A1:29:1A:33:B6:39:4F:22:69:13:2A:8A
Authority key identifier: E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
Certificate issuer: /CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Certificate serial: 0198481B974D5BF889DC0424B6178C09FB6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
Manifest number: 10A3
Signing time: Sat 26 Jul 2025 19:00:24 +0000
Manifest this update: Sat 26 Jul 2025 19:00:24 +0000
Manifest next update: Sun 27 Jul 2025 19:00:24 +0000
Files and hashes: 1: 435f8SPqfS6DzidSDJh9A35knQM.crl (hash: 0+NAbf6hw4bdoeMy1gq8vHZkBpFGhG0sJj/TG1+A41Y=)
2: tCjXyqFlakOJKQogp8h2votSD1A.roa (hash: m/O4S6Sl2dQY6fRE2qRWrRG8qwZhPhRAmDPSjwX0exE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:97:4d:5b:f8:89:dc:04:24:b6:17:8c:09:fb:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Validity
Not Before: Jul 26 19:00:24 2025 GMT
Not After : Jul 27 19:00:24 2025 GMT
Subject: CN=10f61b99dfc497eba1291a33b6394f2269132a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6b:67:83:b9:3a:30:01:e1:ce:7e:f8:8a:31:
86:99:fa:0d:e6:fe:47:64:ed:2f:5e:4c:50:88:93:
38:6e:77:f3:5f:2a:78:9f:48:e2:e4:8c:37:26:65:
79:85:78:75:b0:70:e8:9a:9e:69:d5:0a:22:7d:4c:
6e:0c:65:2e:cc:a8:48:9e:c5:72:39:4a:80:af:7f:
94:83:70:21:f2:9f:94:d5:6a:87:86:3b:cb:2b:d0:
80:a5:c6:ed:1c:62:f9:cc:2e:62:a9:da:50:b3:c7:
b3:a7:20:5d:20:68:55:65:12:09:7a:eb:08:95:dd:
36:96:af:51:a3:d7:8f:c7:9a:c3:42:5d:69:47:55:
dd:da:ea:70:d3:20:b4:4e:0c:fd:f2:16:f5:0c:c0:
2a:08:66:90:53:86:ac:58:3a:e9:00:6f:e6:61:56:
16:4b:3d:03:27:2b:0b:e1:28:3d:95:0c:6a:09:99:
42:a5:4c:a3:e7:33:6b:f8:3e:5c:20:29:7f:50:7a:
b9:2e:ec:f2:9e:ee:06:84:eb:9b:7e:6e:1e:8c:12:
40:a9:b1:a6:96:71:47:ce:df:f0:68:01:d1:17:95:
7e:db:1e:74:b5:1a:52:47:60:3b:5f:23:48:f3:94:
fa:91:a7:27:0a:79:f8:51:ed:9a:b1:10:9e:95:c0:
dc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F6:1B:99:DF:C4:97:EB:A1:29:1A:33:B6:39:4F:22:69:13:2A:8A
X509v3 Authority Key Identifier:
keyid:E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:d3:3e:7b:eb:70:d2:01:66:f7:e0:c2:6b:e6:7e:95:d2:14:
5e:8f:f3:9a:4d:1f:d0:d6:13:f9:fa:3e:85:d0:5d:ce:cb:31:
7a:de:1f:36:ed:c3:50:59:e6:aa:a4:f2:56:d0:e8:a9:dd:0e:
b2:23:0e:fb:e9:4f:f1:87:bc:9d:ad:da:cc:c5:5e:ad:1c:46:
d9:99:0c:c2:4c:90:ca:36:05:f1:45:83:92:16:11:49:1a:5a:
06:47:45:d3:25:8c:88:b8:ae:f9:de:6d:39:80:37:f6:89:eb:
e2:16:22:1b:fb:bb:46:24:37:93:97:40:e1:bf:6c:f7:8b:2e:
fa:ad:89:13:2a:2a:92:6e:48:a5:e3:af:a6:2d:24:2a:f9:29:
de:a2:ec:79:fa:99:d7:f6:24:1f:d7:d3:3d:a8:13:55:67:aa:
d4:76:c6:7f:c2:7f:17:2c:23:3e:c7:2e:92:76:91:60:79:46:
7c:d0:1e:89:84:85:95:ea:44:41:7a:06:74:2b:5f:0b:ec:a3:
7c:fe:19:1a:80:c6:c5:a9:4e:6a:06:63:f1:79:c8:b0:e2:7c:
d7:6c:17:1d:08:b3:a7:ba:b3:1d:52:68:8b:3e:7d:a9:b1:e5:
5c:09:d9:fd:80:4f:64:6e:69:f0:2c:2e:e9:31:71:ab:49:32:
ce:60:af:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:49:58 2025 by rpki-client