Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.mft
File: 35ACA6262E13FCF885902051522BBE65379AE61D.mft (raw, json)
Hash identifier: MdtkDU5nq6wyolSR0EFkyutpiGowdEgzqx1Ptxycb/k=
Subject key identifier: 1A:3F:16:C8:CC:51:5A:FD:FE:08:50:52:BE:10:0B:C5:74:3E:44:74
Authority key identifier: 35:AC:A6:26:2E:13:FC:F8:85:90:20:51:52:2B:BE:65:37:9A:E6:1D
Certificate issuer: /CN=35aca6262e13fcf885902051522bbe65379ae61d
Certificate serial: 5AD018214B8D2175CB301C3B6656D6E10DB9AA96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaymJi4T_PiFkCBRUiu-ZTea5h0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.mft
Manifest number: 0116
Signing time: Mon 10 Nov 2025 17:58:55 +0000
Manifest this update: Mon 10 Nov 2025 17:53:55 +0000
Manifest next update: Tue 11 Nov 2025 20:52:55 +0000
Files and hashes: 1: 35ACA6262E13FCF885902051522BBE65379AE61D.crl (hash: tlNx5TTiLyosTMIR/I6l8QEihO8oAh/DaR/V9QnJ7qE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.crl
rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.mft
rsync://rpki.ripe.net/repository/DEFAULT/NaymJi4T_PiFkCBRUiu-ZTea5h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Nov 2025 20:52:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:d0:18:21:4b:8d:21:75:cb:30:1c:3b:66:56:d6:e1:0d:b9:aa:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35aca6262e13fcf885902051522bbe65379ae61d
Validity
Not Before: Nov 10 17:53:55 2025 GMT
Not After : Nov 11 20:52:55 2025 GMT
Subject: CN=1A3F16C8CC515AFDFE085052BE100BC5743E4474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b9:e9:da:41:4e:05:51:81:b4:ef:1f:f4:ae:
1d:6e:db:ba:4c:5d:95:9a:b9:82:15:e7:92:72:4d:
21:01:05:b2:2d:40:74:c3:39:52:00:a6:81:9d:83:
08:e3:c2:4c:84:73:de:58:55:c6:76:1c:4f:f7:2b:
f5:23:f9:9e:0b:6b:75:be:83:58:5d:fe:32:a9:57:
72:14:fe:0f:38:42:18:c5:09:6d:84:4a:9b:ee:5c:
1f:f3:37:44:91:c1:b6:41:6d:85:79:53:dd:95:74:
85:ef:e8:bb:ea:12:3e:67:36:b5:cf:4f:5d:79:f5:
b2:fb:c2:cd:ab:43:6a:d8:61:f1:2a:9b:db:d0:a9:
40:1a:49:e7:db:2d:23:5c:f6:a6:75:bf:41:b6:65:
fb:0e:fe:5c:0c:2e:df:78:18:81:a6:f3:f7:3c:3b:
48:d1:1f:4b:e9:e8:55:ac:ce:60:4f:fc:db:82:b2:
d4:98:28:7c:16:5a:62:9c:74:58:c7:49:c6:d0:51:
fd:55:65:b0:83:b8:f1:76:77:5d:c4:7a:48:e0:7c:
8e:18:06:33:f9:e5:dd:47:e4:99:6b:f6:5e:f3:94:
66:c3:8d:09:93:27:1b:f2:06:25:fa:5e:ea:fb:c0:
c3:15:31:2e:a5:e2:22:29:ba:44:15:3c:b4:78:46:
d1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3F:16:C8:CC:51:5A:FD:FE:08:50:52:BE:10:0B:C5:74:3E:44:74
X509v3 Authority Key Identifier:
keyid:35:AC:A6:26:2E:13:FC:F8:85:90:20:51:52:2B:BE:65:37:9A:E6:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaymJi4T_PiFkCBRUiu-ZTea5h0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:57:97:f8:7f:3a:92:b7:a1:14:05:05:d8:3d:34:67:cc:d4:
71:46:73:5d:83:65:79:24:8a:a2:2d:73:37:ed:30:67:74:6a:
fc:52:b9:2a:29:b3:79:e3:8b:41:3f:e5:07:12:fb:64:ee:6c:
ab:67:e1:8c:34:d9:66:4a:b3:95:85:48:b4:23:c4:fd:0c:9b:
c9:aa:a4:53:f3:6e:dc:2b:dd:95:38:28:b2:cb:19:84:6a:b8:
f9:f8:10:5a:91:5b:af:d6:a0:6c:86:ff:27:1e:1c:ed:4e:21:
59:16:59:03:84:2b:4d:87:53:8e:f4:af:87:68:72:c8:43:0e:
55:7a:a3:c7:a0:fe:04:02:b3:df:b9:d8:0c:1e:41:60:75:54:
1c:d2:e0:77:25:67:ed:97:87:f3:11:7e:de:48:f7:7f:ac:ee:
f6:af:99:5a:71:74:a5:8c:32:2e:7e:41:bd:c4:13:10:28:97:
72:52:4d:af:73:a0:8f:aa:01:d3:e5:e8:5d:48:ad:33:a8:fd:
c6:8d:dc:21:58:73:16:08:90:e8:4e:56:a7:92:07:06:56:af:
a6:96:97:26:eb:86:a2:ef:e9:58:d1:e0:3a:49:a5:78:04:2c:
02:74:6a:17:56:48:6a:03:1d:c8:cb:a1:c3:1a:91:2d:f9:18:
bf:88:c4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:41 2025 by rpki-client