Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
File: 35BBVe46z-P-qLv-6G6XxYyJkfQ.mft (raw, json)
Hash identifier: oMm/Gk0WyMzaKqkn46yJcS7DY9b8NZN3owcSCz2HRmQ=
Subject key identifier: FF:A9:C6:C4:87:81:4C:9D:1C:A4:18:E5:DB:EE:DD:D7:E7:E8:65:F5
Authority key identifier: DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4
Certificate issuer: /CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4
Certificate serial: 01975E383101C28A81A97558FBF596BCF648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
Manifest number: 11AD
Signing time: Wed 11 Jun 2025 09:00:30 +0000
Manifest this update: Wed 11 Jun 2025 09:00:30 +0000
Manifest next update: Thu 12 Jun 2025 09:00:30 +0000
Files and hashes: 1: 35BBVe46z-P-qLv-6G6XxYyJkfQ.crl (hash: NG3bhgpRCuiwg02O/h1LMDOlawygG28OsJjq8Yrxg10=)
2: B-nM1GTMLKr4Gk1KLpOo23YK3j8.roa (hash: 0wOg2hC46+mvVWLdy3l+GE8WwSTmGrLshzLKyEpaIwQ=)
3: zrrMlICGpdDYFya8WKvO7u0XM-Q.roa (hash: txsRNfUipxo+CqvVL0kXrQvI1GxCBc26tW/8hZA3omw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:38:31:01:c2:8a:81:a9:75:58:fb:f5:96:bc:f6:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4
Validity
Not Before: Jun 11 09:00:30 2025 GMT
Not After : Jun 12 09:00:30 2025 GMT
Subject: CN=ffa9c6c487814c9d1ca418e5dbeeddd7e7e865f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8b:c5:b9:83:b4:f1:d5:db:81:1c:eb:91:e4:
64:25:c3:7c:5a:f2:4f:ae:cd:c4:e2:ec:64:42:49:
e7:b2:bf:d6:7e:5b:be:b4:05:e8:5a:c6:36:04:cb:
84:c4:76:c1:b7:3c:c6:64:9f:9e:03:27:09:d4:f6:
86:a5:31:2b:85:3b:0e:19:a8:e9:e2:bc:66:aa:49:
db:03:a5:f2:60:d9:6b:1f:b9:ce:58:0c:0c:f5:cb:
35:3c:5d:55:07:37:21:d6:5d:cc:6d:5c:0f:57:52:
fb:18:7e:58:6b:47:7f:c1:3d:3b:e0:80:01:c8:27:
db:7a:13:69:b0:bd:3d:9e:88:7b:51:40:8c:46:5a:
96:f7:2c:3e:34:17:fa:4d:38:ed:8a:4b:b0:c5:98:
ea:f9:0e:7d:6d:4e:0e:af:58:23:65:26:8d:b3:29:
4f:57:76:c1:0f:47:91:72:50:d3:5d:00:83:18:7d:
06:b3:93:27:59:d4:b6:f1:7c:29:b2:96:df:ad:69:
e2:99:56:18:f3:34:94:70:36:27:0f:d8:7c:d2:76:
b6:1c:31:ec:72:38:62:ee:b6:3f:44:b9:9b:2c:f8:
a9:ed:b8:f9:31:66:c0:cc:e1:82:d1:95:a0:44:05:
49:e7:9a:b9:1f:0d:8d:9f:60:2d:b6:ac:dd:68:00:
64:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A9:C6:C4:87:81:4C:9D:1C:A4:18:E5:DB:EE:DD:D7:E7:E8:65:F5
X509v3 Authority Key Identifier:
keyid:DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:2a:db:36:18:1a:26:73:c4:50:d6:55:b0:9f:80:68:ca:ed:
9d:bd:88:73:a5:38:04:b8:9a:4d:4f:14:88:0f:6c:be:9e:e2:
9d:45:97:4b:ef:d7:53:ec:84:d1:1e:f3:fc:0b:bd:d9:13:16:
c2:a0:9d:76:2f:fe:ed:a4:e0:24:7e:a7:76:a0:69:a7:69:76:
ba:bc:6d:ad:fa:ab:d9:e4:e1:0a:46:3a:c8:c5:0d:67:b1:62:
05:4a:0c:e5:a6:ab:fd:48:d4:83:3a:4c:00:2f:13:c8:12:66:
ed:3c:1c:f5:2d:1c:57:ea:42:84:14:14:61:43:b5:65:3b:8c:
a3:71:dd:e8:3f:2c:6f:ef:92:72:76:1b:9c:be:04:d9:57:c0:
3b:d3:64:a1:4d:a6:d4:2d:2b:62:cd:97:05:57:cd:d7:7f:f8:
26:b4:9f:02:39:74:e9:56:85:8d:84:78:e5:46:87:03:56:62:
7d:76:93:0c:c6:07:d5:d5:eb:e9:45:9b:88:db:31:a2:ce:fa:
e3:30:19:aa:69:a8:0c:d8:59:1e:d5:32:c1:8b:48:cb:3b:97:
d5:a9:f3:b2:a7:0f:60:fd:e4:a9:63:c9:4a:48:2c:e9:95:ff:
76:40:20:ef:c0:d6:9d:8f:f0:eb:b2:cb:73:d9:e1:53:42:08:
42:f4:91:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:06:45 2025 by rpki-client