Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
File: 35BBVe46z-P-qLv-6G6XxYyJkfQ.mft (raw, json)
Hash identifier: iKIMz3ick5JTfN7Jg2Y1akWRD+oPo3Khhf+aIBGynjM=
Subject key identifier: FB:AC:88:86:B8:8D:8F:D0:71:25:3B:08:07:AD:0F:FF:81:67:FB:04
Authority key identifier: DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4
Certificate issuer: /CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4
Certificate serial: 0197586D37E8E3A4CAB46C12CCEE95D1822B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
Manifest number: 11AA
Signing time: Tue 10 Jun 2025 06:00:42 +0000
Manifest this update: Tue 10 Jun 2025 06:00:42 +0000
Manifest next update: Wed 11 Jun 2025 06:00:42 +0000
Files and hashes: 1: 35BBVe46z-P-qLv-6G6XxYyJkfQ.crl (hash: 8Ys8DK6VkwG1rbQALUP/p2luaE3G0IeiSS1MWhwfP68=)
2: B-nM1GTMLKr4Gk1KLpOo23YK3j8.roa (hash: 0wOg2hC46+mvVWLdy3l+GE8WwSTmGrLshzLKyEpaIwQ=)
3: zrrMlICGpdDYFya8WKvO7u0XM-Q.roa (hash: txsRNfUipxo+CqvVL0kXrQvI1GxCBc26tW/8hZA3omw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6d:37:e8:e3:a4:ca:b4:6c:12:cc:ee:95:d1:82:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4
Validity
Not Before: Jun 10 06:00:42 2025 GMT
Not After : Jun 11 06:00:42 2025 GMT
Subject: CN=fbac8886b88d8fd071253b0807ad0fff8167fb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a5:51:33:c9:d4:a1:91:48:48:e2:e5:29:9e:
07:06:8e:b3:43:8c:aa:dc:a4:a3:97:f0:fc:a4:39:
44:3a:48:ef:d0:8c:7b:91:4d:7e:fb:a9:ed:12:ce:
de:20:8e:0e:9f:e7:6e:75:bc:ef:d8:2a:df:53:b3:
fb:ee:c1:7e:e7:5b:69:dc:da:84:8f:29:0c:7f:8e:
76:42:7e:79:18:d1:a2:c6:97:06:b4:50:c7:d9:15:
3e:36:50:e5:0b:c0:ed:3e:3e:fa:19:e7:30:db:60:
7d:c8:26:26:6e:c5:ea:cd:68:10:41:f3:10:1b:18:
73:05:b1:fd:c9:9f:e8:16:e0:ea:f8:87:e4:fa:0a:
87:a4:a5:e5:10:2d:f5:1e:7b:a3:d4:58:1e:a9:f8:
c6:5e:20:c8:70:9c:a8:78:80:b0:7b:1a:64:b4:59:
60:23:92:3c:aa:0f:2f:3e:3f:a8:89:d2:a8:a0:27:
68:ed:68:09:ca:e1:30:25:10:40:28:46:be:eb:a1:
83:f4:41:3c:b3:4d:b3:7e:2e:c3:e8:a0:b0:dd:cd:
52:75:c1:93:86:8f:95:d9:9e:3d:96:4b:b8:00:5b:
73:eb:c8:ca:0c:50:bc:fb:7b:92:1d:be:3d:45:d3:
84:1a:20:c0:49:f9:ad:de:6b:47:a4:03:ec:96:b1:
bb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AC:88:86:B8:8D:8F:D0:71:25:3B:08:07:AD:0F:FF:81:67:FB:04
X509v3 Authority Key Identifier:
keyid:DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:55:b9:74:4a:1f:70:49:a2:9a:27:8b:97:da:a6:34:af:78:
72:dc:ed:30:bb:94:eb:71:e8:4b:71:df:56:d5:b8:a0:83:86:
25:0f:9e:05:79:77:06:f2:f5:14:28:84:2c:3d:85:83:2c:04:
1e:7f:0d:9c:c2:90:84:17:d9:90:63:d4:c8:a3:36:0e:5c:d6:
ed:39:84:24:39:65:79:7c:a6:ad:45:02:0f:1f:96:30:2b:29:
5e:3d:98:85:68:c0:90:ee:f1:3c:8c:c3:cf:4a:f4:00:17:95:
5a:8b:36:3d:34:55:81:03:3a:5a:ff:11:24:ee:61:d2:be:b2:
6e:2b:fd:bd:98:36:73:b0:85:30:c6:84:b3:28:6c:45:44:35:
c5:d6:a0:f9:ba:9a:eb:5c:aa:22:c7:a6:14:92:07:20:5e:08:
be:93:e6:d3:80:04:22:7d:42:f2:ed:9a:7d:ea:f0:96:24:b6:
2f:59:13:44:f0:bf:fb:e7:f4:ed:29:b1:eb:7c:52:be:7e:49:
09:ce:64:a8:f7:d3:39:10:42:22:22:91:b3:58:61:3a:a7:23:
00:2f:e9:f5:72:c8:df:78:ce:a6:60:cd:e3:8e:3c:a9:a5:d2:
ad:e2:32:bd:1c:c2:b6:9d:cf:32:e3:59:80:d5:37:dd:80:77:
f2:08:b2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 15:23:16 2025 by rpki-client