Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
File: 335xZknay_bqmGAjUU3-QN8afPA.mft (raw, json)
Hash identifier: erwjnBnj4aM3rlRiQqyGfKfRsbTJzTAfBJ1DfL7EI8Y=
Subject key identifier: E1:BA:E4:7A:67:9E:43:A0:A1:56:54:07:63:C1:D7:A6:B0:2D:FF:EA
Authority key identifier: DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0
Certificate issuer: /CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
Certificate serial: 019A2C9F68225C35B9D5E10BF30C5A1D86D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
Manifest number: 0C03
Signing time: Tue 28 Oct 2025 21:00:35 +0000
Manifest this update: Tue 28 Oct 2025 21:00:35 +0000
Manifest next update: Wed 29 Oct 2025 21:00:35 +0000
Files and hashes: 1: 335xZknay_bqmGAjUU3-QN8afPA.crl (hash: LRElFmvjvTuRKfZnBjSyE3B9OKkcciZsTH7Z1pl0w2s=)
2: it5TB1fVnn8wAT1GhxrXXPpJQhE.roa (hash: uFvB0yeXGCmgY/JUbCJTKqf/gHh6c2TkYoHqFThttag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:9f:68:22:5c:35:b9:d5:e1:0b:f3:0c:5a:1d:86:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
Validity
Not Before: Oct 28 21:00:35 2025 GMT
Not After : Oct 29 21:00:35 2025 GMT
Subject: CN=e1bae47a679e43a0a156540763c1d7a6b02dffea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a9:e3:e3:aa:60:0b:bb:e4:b5:c5:50:ed:3f:
74:72:27:db:27:50:0a:ac:f2:bf:7c:55:82:3e:0f:
fa:2f:4e:b8:03:94:6f:62:84:18:40:56:9a:51:fd:
9e:84:ae:c3:11:1f:e3:25:72:61:33:90:6e:a3:88:
39:64:5d:18:92:27:6b:d2:b7:1d:c1:9d:0e:a2:0d:
7e:f4:ac:99:51:e8:db:dc:13:ae:92:10:5d:55:e2:
88:b0:e3:6e:b7:f2:5e:93:ab:f9:cd:b7:c7:43:15:
a5:57:26:04:f2:dd:12:92:a2:fa:f2:a6:e6:68:e0:
87:82:1a:df:a6:6b:f3:3c:dd:99:ef:ab:f1:40:b2:
3c:47:a6:6f:cd:1e:63:2f:4c:1f:3c:06:cc:b8:18:
08:d4:b0:d9:de:d3:31:2d:54:cf:48:8a:8f:27:92:
91:34:67:85:db:22:db:f0:0f:e5:da:a3:25:13:d3:
9f:5c:60:91:41:bd:99:3a:c3:2d:ff:c4:b3:92:6a:
8d:1b:71:82:80:c0:40:29:49:b6:29:76:81:cf:11:
db:c8:dd:a9:1d:a9:ed:fe:46:ad:a5:56:74:4d:c3:
47:ea:23:42:42:c1:c7:fa:f4:2a:fd:12:19:64:02:
10:4d:1b:55:fd:88:16:f8:67:1f:46:ea:e7:77:0e:
d2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:BA:E4:7A:67:9E:43:A0:A1:56:54:07:63:C1:D7:A6:B0:2D:FF:EA
X509v3 Authority Key Identifier:
keyid:DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:52:02:ac:31:30:e2:8c:34:1d:25:11:30:83:15:a5:e1:f1:
b1:21:7c:4e:8a:4d:b6:61:0b:87:7e:d8:ca:1c:be:32:1a:72:
66:0f:3b:48:40:4e:3a:9d:4e:a2:b3:70:30:b1:99:eb:b2:34:
c4:78:18:6e:79:11:ea:90:2b:a7:3b:b4:11:7a:d6:1e:fe:24:
44:1b:15:28:2f:96:f8:af:64:a6:77:f4:df:78:a6:67:f9:29:
b8:b2:eb:f9:93:29:51:f2:d0:6a:e8:3f:4b:53:32:b8:7e:1f:
c4:f9:88:44:70:0c:5b:2d:96:5a:82:42:92:d7:fc:3f:ca:ab:
05:c3:d0:e0:2e:43:e5:56:ac:ac:0c:75:3a:26:2b:70:f5:61:
33:fc:89:b0:08:9a:7a:79:b7:9d:47:90:0f:77:e2:32:ef:70:
91:bb:36:1b:7b:c5:bd:a5:1b:74:f0:c5:6f:82:f1:3e:51:e8:
05:c0:93:64:0a:4b:68:4f:29:e3:f7:39:a3:45:21:1e:61:2a:
0c:6f:b0:41:2f:e1:7b:a2:39:9a:9a:a9:5e:0b:45:60:a9:4d:
8b:7d:77:f4:61:39:de:5e:8f:bf:f3:eb:99:8f:4a:92:4a:41:
5a:35:45:8e:ab:b5:fd:21:21:50:41:1d:6a:37:bc:c5:21:39:
b3:a8:04:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZosn2giXDW51eEL8wxaHYbTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmN2U3MTY2NDlkYWNiZjZlYTk4NjAyMzUxNGRmZTQwZGYx
YTdjZjAwHhcNMjUxMDI4MjEwMDM1WhcNMjUxMDI5MjEwMDM1WjAzMTEwLwYDVQQD
EyhlMWJhZTQ3YTY3OWU0M2EwYTE1NjU0MDc2M2MxZDdhNmIwMmRmZmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqnj46pgC7vktcVQ7T90cifbJ1AK
rPK/fFWCPg/6L064A5RvYoQYQFaaUf2ehK7DER/jJXJhM5Buo4g5ZF0Ykidr0rcd
wZ0Oog1+9KyZUejb3BOukhBdVeKIsONut/Jek6v5zbfHQxWlVyYE8t0SkqL68qbm
aOCHghrfpmvzPN2Z76vxQLI8R6ZvzR5jL0wfPAbMuBgI1LDZ3tMxLVTPSIqPJ5KR
NGeF2yLb8A/l2qMlE9OfXGCRQb2ZOsMt/8SzkmqNG3GCgMBAKUm2KXaBzxHbyN2p
Hant/katpVZ0TcNH6iNCQsHH+vQq/RIZZAIQTRtV/YgW+GcfRurndw7SdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOG65HpnnkOgoVZUB2PB16awLf/qMB8GA1UdIwQY
MBaAFN9+cWZJ2sv26phgI1FN/kDfGnzwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzM1eFprbmF5X2JxbUdBalVVMy1RTjhhZlBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9lZWI3NTctNTA0MC00YmZiLWEzNWQt
YTY2Mjg5ODUxY2Q5LzEvMzM1eFprbmF5X2JxbUdBalVVMy1RTjhhZlBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9lZWI3NTctNTA0MC00YmZiLWEzNWQtYTY2Mjg5ODUxY2Q5
LzEvMzM1eFprbmF5X2JxbUdBalVVMy1RTjhhZlBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMlICrDEw
4ow0HSURMIMVpeHxsSF8TopNtmELh37Yyhy+MhpyZg87SEBOOp1OorNwMLGZ67I0
xHgYbnkR6pArpzu0EXrWHv4kRBsVKC+W+K9kpnf033imZ/kpuLLr+ZMpUfLQaug/
S1MyuH4fxPmIRHAMWy2WWoJCktf8P8qrBcPQ4C5D5VasrAx1OiYrcPVhM/yJsAia
enm3nUeQD3fiMu9wkbs2G3vFvaUbdPDFb4LxPlHoBcCTZApLaE8p4/c5o0UhHmEq
DG+wQS/he6I5mpqpXgtFYKlNi3139GE53l6Pv/PrmY9KkkpBWjVFjqu1/SEhUEEd
aje8xSE5s6gELg==
-----END CERTIFICATE-----
Generated at Wed Oct 29 02:31:27 2025 by rpki-client