Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
File: 35BBVe46z-P-qLv-6G6XxYyJkfQ.mft (raw, json)
Hash identifier: YBe/eBThoYvGuy3dvk5PIk7cJ+6pS6sUc3VGXTyMNEQ=
Subject key identifier: E4:E4:7F:4F:3C:61:57:B6:77:E1:8D:AB:5E:22:D5:1D:25:E2:4E:94
Authority key identifier: DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4
Certificate issuer: /CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4
Certificate serial: 0198CB379457496BEBBB889DB1C019BA32D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
Manifest number: 126A
Signing time: Thu 21 Aug 2025 06:01:13 +0000
Manifest this update: Thu 21 Aug 2025 06:01:13 +0000
Manifest next update: Fri 22 Aug 2025 06:01:13 +0000
Files and hashes: 1: 35BBVe46z-P-qLv-6G6XxYyJkfQ.crl (hash: SyQMxLrkjDE33Mj8jZu23RgkUVsyXKBsCgiGo8Sa12I=)
2: B-nM1GTMLKr4Gk1KLpOo23YK3j8.roa (hash: 0wOg2hC46+mvVWLdy3l+GE8WwSTmGrLshzLKyEpaIwQ=)
3: zrrMlICGpdDYFya8WKvO7u0XM-Q.roa (hash: txsRNfUipxo+CqvVL0kXrQvI1GxCBc26tW/8hZA3omw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:37:94:57:49:6b:eb:bb:88:9d:b1:c0:19:ba:32:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4
Validity
Not Before: Aug 21 06:01:13 2025 GMT
Not After : Aug 22 06:01:13 2025 GMT
Subject: CN=e4e47f4f3c6157b677e18dab5e22d51d25e24e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c8:47:5d:e0:2a:44:a6:32:63:07:3b:00:26:
27:2d:f7:92:91:8d:9e:bb:25:17:3c:4f:ab:86:6d:
5a:2d:33:27:ff:97:87:7f:83:47:b8:a4:17:56:e7:
2f:69:42:91:1b:37:9a:cd:81:73:35:ef:f5:00:48:
a5:3c:07:41:f4:cd:34:5c:af:cd:fc:a6:81:46:74:
9b:67:2a:72:34:59:58:7a:3d:da:65:54:a8:f7:d7:
bf:2a:44:30:e7:68:cf:9f:e8:b2:13:17:9d:0f:bf:
c4:05:9d:d4:4b:6b:9c:9b:af:99:e1:7c:44:4f:8f:
1a:ae:2e:c0:d7:9d:e4:e8:29:12:48:5d:e3:a9:37:
0a:a8:4e:93:dc:8a:f4:eb:ae:65:ac:48:41:d9:53:
f9:0c:b0:9d:9b:e6:f2:09:50:8f:b2:90:b8:ca:2a:
10:94:00:9d:d2:60:11:c6:85:88:76:83:b9:89:ab:
a7:e7:f8:bc:b9:27:a1:87:b3:87:8d:8e:94:6b:38:
fe:5f:f2:87:4a:62:42:f3:62:0f:da:47:18:34:54:
92:a6:eb:60:6d:f1:31:92:37:f8:d4:0a:04:0f:67:
ed:2a:0e:86:3a:e8:66:e2:e0:bd:8e:f7:d9:16:c4:
46:a8:30:f1:03:8b:7a:78:a6:be:4a:b3:d2:7b:60:
af:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E4:7F:4F:3C:61:57:B6:77:E1:8D:AB:5E:22:D5:1D:25:E2:4E:94
X509v3 Authority Key Identifier:
keyid:DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d1:94:c8:b8:2b:99:0b:1d:f8:c4:e5:61:07:ee:67:2b:db:
f2:0c:6f:80:69:20:1a:ea:2f:af:81:c9:6f:17:f8:52:7d:94:
26:fe:20:f9:a7:16:4f:4c:27:ae:d0:a2:90:ce:f9:16:4b:57:
fb:9a:a0:cb:70:49:2c:b6:a5:09:b4:f3:30:d7:e6:44:dd:dc:
a1:c1:f3:20:b0:b2:df:29:ae:3d:25:90:ea:8c:a6:11:c1:a8:
00:77:c4:04:64:2b:52:0e:04:9f:43:93:4b:6b:04:0c:2a:f1:
d6:ca:7c:04:7f:8e:92:09:53:36:ff:90:6d:68:f1:83:c3:95:
59:6d:ff:a7:bf:db:be:e6:d2:86:2e:c6:fb:58:0c:dd:92:46:
f3:b0:89:b6:8f:fa:2e:66:eb:83:53:be:72:24:8e:da:96:88:
9e:8f:ac:2d:b8:a9:1c:5b:9c:c0:67:7e:41:c4:b0:ab:15:cf:
b8:c2:f4:d1:10:98:7e:d4:67:38:8d:10:ec:4e:28:5b:0a:98:
df:85:dc:25:f0:cd:d8:2c:41:5d:b5:67:39:4b:fa:42:13:e9:
97:0c:9b:d2:97:d4:dd:f9:77:d1:02:c3:fd:c8:5c:cf:85:b4:
48:5e:a0:85:3a:b2:c7:8c:76:b7:03:7a:7f:c7:86:81:9a:0c:
74:8c:7c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 12:50:29 2025 by rpki-client