Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
File: 435f8SPqfS6DzidSDJh9A35knQM.mft (raw, json)
Hash identifier: YSutBbivcRdJayE7c57BrM7tFhwadiViw4xdRcH9ZLo=
Subject key identifier: 32:F5:96:2D:74:4A:01:FC:2D:B5:4A:EF:5A:F1:2A:CB:D4:79:2A:A4
Authority key identifier: E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
Certificate issuer: /CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Certificate serial: 019A5187E6D11AFCF5F3D6741C327DD25462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
Manifest number: 11B1
Signing time: Wed 05 Nov 2025 01:00:52 +0000
Manifest this update: Wed 05 Nov 2025 01:00:52 +0000
Manifest next update: Thu 06 Nov 2025 01:00:52 +0000
Files and hashes: 1: 435f8SPqfS6DzidSDJh9A35knQM.crl (hash: MFMRqexVG48218ttqIZNBUQ3L2V6MXvXjAf1uQYQGwk=)
2: tCjXyqFlakOJKQogp8h2votSD1A.roa (hash: m/O4S6Sl2dQY6fRE2qRWrRG8qwZhPhRAmDPSjwX0exE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:e6:d1:1a:fc:f5:f3:d6:74:1c:32:7d:d2:54:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Validity
Not Before: Nov 5 01:00:52 2025 GMT
Not After : Nov 6 01:00:52 2025 GMT
Subject: CN=32f5962d744a01fc2db54aef5af12acbd4792aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:86:60:3f:2f:93:9d:e8:cb:ff:07:55:86:e9:
bc:4f:35:cb:73:d0:e3:69:74:85:d1:47:6a:fa:26:
8d:48:97:f6:8e:77:20:14:d9:2d:b1:57:07:be:fa:
96:32:4e:85:6d:bd:5c:ea:90:d4:e5:dd:c5:16:b1:
4b:65:aa:8d:31:c6:f2:50:58:04:a5:48:60:2d:a7:
19:d0:05:ce:ec:20:b5:6e:b9:60:da:34:07:d9:35:
92:bd:f7:08:93:35:37:e5:59:3f:d9:1d:ae:bc:6e:
69:90:5f:18:0a:9d:d7:c5:71:18:25:bf:af:92:67:
3e:f1:bb:c1:92:31:3d:b3:22:1a:71:bb:c9:c3:89:
6b:10:d1:66:bd:ed:c8:79:80:50:61:55:b7:0e:9b:
d8:43:01:79:f1:6a:38:72:24:07:af:5d:bb:60:38:
21:19:d8:f7:02:df:6a:61:88:0e:79:b0:e7:56:6e:
11:20:05:1a:0e:2c:75:68:57:8e:52:8a:98:f6:70:
ed:00:fe:86:81:ed:01:35:97:be:59:7f:61:0c:9f:
9a:d1:86:02:17:d1:07:4c:1b:16:bf:ee:81:cb:a3:
36:a8:97:09:2d:95:3d:af:1b:49:34:2d:38:55:ee:
1b:89:35:1d:e4:26:ce:07:a4:b9:2e:fd:0a:ac:fa:
ab:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F5:96:2D:74:4A:01:FC:2D:B5:4A:EF:5A:F1:2A:CB:D4:79:2A:A4
X509v3 Authority Key Identifier:
keyid:E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:77:9d:77:bc:7f:04:29:b1:f0:45:6f:83:0b:a9:bc:d3:8f:
1a:87:1e:ed:c8:fe:da:f1:fa:64:0b:50:29:5e:44:89:fd:f2:
b6:97:ff:c2:58:27:76:b8:30:4a:bb:f8:6a:6e:09:51:19:17:
2a:1a:21:cc:b0:49:05:5e:de:e6:eb:67:b0:d9:14:e9:22:fe:
6d:f6:58:79:2d:79:04:92:18:e8:3c:d1:d2:a8:b6:22:bd:1b:
75:7c:7f:75:bf:fb:11:34:4f:2b:d6:59:52:4e:93:97:eb:ac:
65:f9:28:ef:df:b0:a7:4b:27:f7:39:a5:e6:ee:18:58:45:7f:
f8:ab:1d:e8:1e:93:8c:3d:f0:86:39:30:9b:41:bc:b9:d3:dc:
a5:0a:b5:68:a1:f4:54:5e:1d:40:69:e2:00:ec:43:11:75:cb:
98:3a:62:30:81:f8:ed:e2:68:f4:a1:3f:bc:f5:b5:00:21:9e:
2d:2e:7e:3d:4e:2b:ac:92:ec:e8:15:c3:5c:f9:45:29:25:b9:
30:25:15:bc:9f:74:23:59:00:96:04:59:c3:b9:3c:b5:ac:22:
30:f0:18:0c:ac:c2:90:d3:24:43:5e:09:97:9f:ae:e7:61:ca:
92:55:b4:ad:90:d7:b9:46:68:e4:21:aa:3e:73:6c:71:44:80:
70:50:e1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:25:50 2025 by rpki-client