Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
File: 35xk4XC38lXXyjADXWUyyJV-sWk.mft (raw, json)
Hash identifier: ATN9ITlDZUCzovdeXQhgurCUUxX+qbNlbiGiKB4TtXI=
Subject key identifier: 7C:E4:43:B6:F4:A9:8C:34:93:84:F4:70:0F:2E:17:FC:5C:03:38:11
Authority key identifier: DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69
Certificate issuer: /CN=df9c64e170b7f255d7ca30035d6532c8957eb169
Certificate serial: 01992FA375B27384D5644FD405C3667945C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
Manifest number: 0FA9
Signing time: Tue 09 Sep 2025 18:01:05 +0000
Manifest this update: Tue 09 Sep 2025 18:01:05 +0000
Manifest next update: Wed 10 Sep 2025 18:01:05 +0000
Files and hashes: 1: 1KCeM_saj2EHwCtmvYUyod5fQVk.roa (hash: Pv9o3ZWxmDIYTSHQUpAENmb1SekUnxD3+SSuHyFLNIk=)
2: 35xk4XC38lXXyjADXWUyyJV-sWk.crl (hash: klvt2LpuOip4mHTvtY2q5Mkun0MMPmSCg5WSF5lLnJs=)
3: in9L7g-cpUmSO1ofhst17Y034lM.roa (hash: 2AqONqWNA5VFHVb3r9hcyDXspGh88tGgJFdZWuKJFOc=)
4: oQEjAmt7MyhDoFqfFRza8D6gzN0.roa (hash: J9bWIhZt9YEsnb61ecCMtgkEPaDbCaogiDdlzHyBCNE=)
5: s67wfBYN4Keq-XcZ3aP-wu5Usu8.roa (hash: iepRGsTeT7EybANIxB57/7dp/YbwlG1MHY+mia+/CQ8=)
6: y6UzEX6vHkxyP7L_2RZkJTZij0A.roa (hash: iY29x/bkzw37d2kNULsHdGh6yroQI6l4FkOncAmzIB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 18:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:a3:75:b2:73:84:d5:64:4f:d4:05:c3:66:79:45:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df9c64e170b7f255d7ca30035d6532c8957eb169
Validity
Not Before: Sep 9 18:01:05 2025 GMT
Not After : Sep 10 18:01:05 2025 GMT
Subject: CN=7ce443b6f4a98c349384f4700f2e17fc5c033811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e7:f6:37:2e:29:17:fb:92:9b:c5:9a:20:0c:
11:bf:15:27:94:85:52:84:e8:0e:be:25:4b:2b:77:
48:a5:15:cb:19:58:a8:14:0e:e1:70:92:ae:20:80:
b2:4f:d0:5e:1e:2f:2d:4c:8e:bc:5b:e7:89:9b:57:
5b:f6:77:1b:fa:12:5d:9e:5b:e9:ff:e4:4b:15:0f:
e0:b4:0b:7b:1a:81:66:d6:89:d9:28:7b:30:df:2b:
76:0c:eb:4e:1b:92:5d:57:e6:26:2e:96:cc:95:6f:
5d:68:e4:e3:a9:55:2d:61:1b:b0:1e:05:1f:90:2f:
f4:0f:66:64:d2:88:bf:95:3c:d5:5d:8b:c6:14:35:
0b:a2:32:2e:6f:ef:bc:8d:71:ba:21:75:e1:68:14:
52:1f:39:11:f7:d5:34:31:c0:79:f7:bc:3b:9a:1f:
39:6b:d2:1b:2e:10:47:ea:2f:fe:1c:12:cd:6d:36:
65:29:d8:41:98:c6:28:a4:f0:79:21:b5:4c:fc:e6:
2d:cd:fc:93:31:8e:c5:e7:96:35:67:56:02:87:6c:
02:76:71:e7:61:89:70:89:9c:07:e7:28:89:92:32:
c9:db:51:46:28:df:f6:94:f1:85:c1:c0:9a:b9:83:
b4:a7:b8:30:71:72:c4:0a:cb:ea:5d:78:14:7d:86:
39:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E4:43:B6:F4:A9:8C:34:93:84:F4:70:0F:2E:17:FC:5C:03:38:11
X509v3 Authority Key Identifier:
keyid:DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:83:ea:09:11:99:02:92:f8:8b:6c:92:15:30:e7:8f:be:a4:
e9:8f:ca:62:74:53:e1:a5:db:d6:26:9b:c0:09:87:19:cf:71:
6a:a9:a6:64:c6:4f:ef:8c:89:bd:d6:01:85:f5:7a:ee:1f:66:
83:34:64:6b:04:cc:50:c6:36:02:7c:6d:4f:d2:d0:a2:cc:38:
06:0a:9c:52:58:85:0a:87:df:6c:75:34:93:f9:70:ed:24:44:
9c:79:71:a3:39:58:87:e5:48:fd:f3:7d:49:97:6d:37:34:f2:
2b:6a:71:d4:07:ae:94:5b:8a:fa:aa:95:8b:dd:0e:9d:08:64:
87:67:76:c0:30:b0:3a:11:ea:4e:76:c4:ae:ba:aa:e7:7f:73:
18:76:8d:d7:ff:38:53:19:e0:08:82:8e:1c:69:0c:f1:90:a5:
c7:dd:fd:9e:7f:b9:ae:33:c7:3f:a2:78:86:14:9f:39:19:38:
f7:c0:6e:99:02:73:f5:2f:51:e6:7f:f6:fc:ed:46:50:a4:22:
6e:1a:2e:6a:a2:22:d4:ad:31:26:a3:04:0e:ff:82:2a:0f:f5:
0a:57:54:c6:cc:4c:6b:85:47:35:45:e8:86:b3:9c:89:28:2a:
b5:da:89:14:07:d9:48:b3:df:db:7e:df:94:2b:8a:e1:5c:71:
ec:77:31:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:41:06 2025 by rpki-client