Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.mft
File: 35ACA6262E13FCF885902051522BBE65379AE61D.mft (raw, json)
Hash identifier: AZAcO3XuR3Gy9k3QKzmDbW14VEx8RFEaLm3U6HKBEXw=
Subject key identifier: 33:80:C6:35:62:DD:B3:7E:A4:22:8F:E9:8B:BB:63:94:CD:0D:E8:9B
Authority key identifier: 35:AC:A6:26:2E:13:FC:F8:85:90:20:51:52:2B:BE:65:37:9A:E6:1D
Certificate issuer: /CN=35aca6262e13fcf885902051522bbe65379ae61d
Certificate serial: 7B3B0B55C1C6C650CA9B340B2E3494E4E62429B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaymJi4T_PiFkCBRUiu-ZTea5h0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.mft
Manifest number: CB
Signing time: Sun 07 Sep 2025 07:18:09 +0000
Manifest this update: Sun 07 Sep 2025 07:13:09 +0000
Manifest next update: Mon 08 Sep 2025 08:48:09 +0000
Files and hashes: 1: 35ACA6262E13FCF885902051522BBE65379AE61D.crl (hash: r1UL4/exNOrICVHG79h0XHyuHIP+O3c9MJ5OxKQpDSE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.crl
rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.mft
rsync://rpki.ripe.net/repository/DEFAULT/NaymJi4T_PiFkCBRUiu-ZTea5h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:3b:0b:55:c1:c6:c6:50:ca:9b:34:0b:2e:34:94:e4:e6:24:29:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35aca6262e13fcf885902051522bbe65379ae61d
Validity
Not Before: Sep 7 07:13:09 2025 GMT
Not After : Sep 8 08:48:09 2025 GMT
Subject: CN=3380C63562DDB37EA4228FE98BBB6394CD0DE89B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:66:ae:e5:39:0b:d4:d1:af:83:54:a6:4e:2a:
33:a6:54:ac:7c:5e:89:83:57:6d:63:56:ed:51:07:
af:a3:f9:34:b5:07:64:12:d0:1e:31:e5:ac:d8:ec:
f0:76:93:57:26:a4:2f:6f:60:2b:63:d5:0e:40:a7:
cb:7a:34:f8:1c:4e:e7:5e:17:27:70:e4:93:29:0f:
5a:09:22:90:96:08:51:4b:8f:c5:ad:08:66:12:89:
67:a7:01:82:bf:7d:43:e4:40:81:ea:39:81:b7:7f:
2d:2a:b2:8d:7d:fe:a9:04:65:2b:a6:40:6a:ee:99:
90:7f:f6:6b:04:ca:5b:be:c6:20:88:67:7a:58:1d:
37:49:0d:f7:f2:c6:d4:ae:5f:49:f9:6f:fb:72:67:
11:b8:df:5d:d2:22:04:8f:b2:f8:fe:d7:93:2a:ad:
fd:6c:1b:c9:18:2d:04:e4:66:d4:02:b4:53:a1:e0:
72:2c:59:c0:04:ef:77:e1:f3:29:12:b2:e9:53:4e:
f0:05:47:c7:2f:2a:59:fe:25:90:f6:0d:24:35:8d:
03:13:2c:9f:58:37:90:17:20:69:0c:ad:10:cf:87:
26:59:bd:db:b2:5c:68:14:d5:62:df:e8:97:b8:6e:
38:01:97:2d:d7:d8:6e:b0:2f:cf:8f:58:9d:03:51:
c4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:80:C6:35:62:DD:B3:7E:A4:22:8F:E9:8B:BB:63:94:CD:0D:E8:9B
X509v3 Authority Key Identifier:
keyid:35:AC:A6:26:2E:13:FC:F8:85:90:20:51:52:2B:BE:65:37:9A:E6:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaymJi4T_PiFkCBRUiu-ZTea5h0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:eb:9c:e3:70:2c:5e:3c:49:da:9a:19:51:38:c3:bf:f5:78:
6f:49:0f:f2:cb:39:60:d4:e9:87:26:84:40:f4:8a:65:c5:b3:
6c:3c:fe:c9:8b:13:ff:96:48:ea:dd:0a:67:24:37:d6:57:6b:
d3:61:30:40:b4:87:98:1d:7a:56:e6:28:e5:2a:f1:18:45:fb:
89:f1:68:54:3d:53:84:5e:18:cd:31:95:e8:ac:d6:32:88:0c:
80:be:69:d3:2b:11:85:e5:04:89:2f:28:99:5c:cf:74:3d:cb:
e0:f5:5f:5d:94:e1:8e:6a:b4:1f:2d:80:35:21:cc:76:13:af:
b1:2a:9b:2e:12:cb:04:31:77:04:46:af:e1:41:c7:0e:78:16:
3e:65:db:65:72:d7:a1:f3:6a:1e:c8:4d:e0:f8:2f:58:e6:e5:
3c:37:e3:17:d1:a9:75:68:d3:ed:0a:31:a0:8a:a6:5d:80:da:
aa:6b:da:bf:8f:34:51:83:a3:f6:8e:ff:b3:51:37:29:cd:5d:
6a:ad:52:ee:4f:39:fe:7c:6e:0b:34:4a:a7:fa:38:2d:bb:58:
ee:10:99:0d:c6:5c:f1:05:1f:3f:30:14:c4:98:55:de:0a:f5:
81:cf:16:7b:33:d6:ba:30:fe:c9:a7:75:f6:20:15:aa:3b:b7:
f2:8d:e5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:27 2025 by rpki-client