Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.mft
File: 35ACA6262E13FCF885902051522BBE65379AE61D.mft (raw, json)
Hash identifier: LQTrQUc6HAisNPVLst3lRs05mdnyh1/geXVh9EuZHOo=
Subject key identifier: 34:19:D2:83:06:EA:20:73:A6:0B:89:18:AD:FB:8F:99:D8:86:D5:2D
Authority key identifier: 35:AC:A6:26:2E:13:FC:F8:85:90:20:51:52:2B:BE:65:37:9A:E6:1D
Certificate issuer: /CN=35aca6262e13fcf885902051522bbe65379ae61d
Certificate serial: 6E08AE1718CDC804D5FDE1A3C854EC4FB3164126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaymJi4T_PiFkCBRUiu-ZTea5h0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.mft
Manifest number: 4A
Signing time: Fri 06 Jun 2025 19:37:26 +0000
Manifest this update: Fri 06 Jun 2025 19:32:26 +0000
Manifest next update: Sat 07 Jun 2025 23:18:26 +0000
Files and hashes: 1: 35ACA6262E13FCF885902051522BBE65379AE61D.crl (hash: XU7zEJrY/ak3hqpa3WhJfC5xddf38ZNBm4+Hbqp5XKY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.crl
rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.mft
rsync://rpki.ripe.net/repository/DEFAULT/NaymJi4T_PiFkCBRUiu-ZTea5h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:08:ae:17:18:cd:c8:04:d5:fd:e1:a3:c8:54:ec:4f:b3:16:41:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35aca6262e13fcf885902051522bbe65379ae61d
Validity
Not Before: Jun 6 19:32:26 2025 GMT
Not After : Jun 7 23:18:26 2025 GMT
Subject: CN=3419D28306EA2073A60B8918ADFB8F99D886D52D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d9:25:06:57:f2:5b:87:f9:3a:d9:8a:cb:92:
c2:6a:37:b3:ee:70:5a:56:9a:d4:76:d4:d2:40:ac:
e3:a1:4f:24:9c:a7:c8:66:fa:6e:e4:6b:02:f6:93:
ff:5b:69:c1:44:de:21:50:3e:f7:57:e9:3b:41:86:
4b:b4:d6:2b:07:e1:ae:3e:0c:1b:ef:a9:6f:59:22:
82:c7:6d:39:c0:4e:4e:b6:0b:cd:1a:de:d8:8e:53:
ab:fd:ff:95:7b:4a:98:5b:01:1a:0d:85:4c:d8:98:
a8:d0:83:85:1c:95:05:cc:4e:23:7f:d1:fd:2d:9c:
ed:1e:ca:cd:2b:90:1b:f2:fe:c5:10:8e:95:06:b2:
f9:ca:ea:18:46:dc:f5:9a:3e:02:d6:49:ce:f5:f5:
27:4b:c1:65:dc:8e:c5:9d:73:fb:9b:3e:a0:ac:d2:
44:c6:67:4f:9c:87:3a:8f:72:a8:62:c4:21:55:01:
a3:69:0c:8e:82:48:05:69:26:d1:f9:98:e6:a9:1d:
ec:90:36:6c:86:83:cc:a6:31:0e:91:b2:29:a5:0f:
84:a0:54:ae:7a:c5:24:62:3c:74:bd:1c:ad:fa:72:
fc:7a:97:e9:93:e1:64:2a:f5:08:1c:a3:9e:83:2a:
e1:f4:1c:fd:1a:c7:b2:d2:e6:52:b8:c1:06:d3:9d:
53:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:19:D2:83:06:EA:20:73:A6:0B:89:18:AD:FB:8F:99:D8:86:D5:2D
X509v3 Authority Key Identifier:
keyid:35:AC:A6:26:2E:13:FC:F8:85:90:20:51:52:2B:BE:65:37:9A:E6:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaymJi4T_PiFkCBRUiu-ZTea5h0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:12:9a:5b:37:0d:1d:5c:49:6c:3f:be:1c:c8:87:0d:eb:82:
98:76:70:0d:db:6c:8d:ba:43:d6:9f:42:5d:25:a5:55:70:3f:
96:af:04:dd:18:90:ac:67:08:c1:93:9e:2b:7d:34:be:1d:30:
f4:9d:c1:57:a5:b4:0b:1d:65:a3:d4:c1:b0:fa:5f:1e:f5:87:
78:59:cc:86:97:c2:6e:b6:ae:19:e6:46:86:03:56:ec:84:2e:
45:e2:2c:c1:7d:ab:b4:cc:5f:8b:fa:33:95:09:15:29:e4:cd:
4a:03:6e:35:22:61:bf:2e:d7:98:71:1b:ad:a7:e3:e7:26:eb:
15:86:79:ff:44:de:a2:1e:7d:5e:f6:27:0f:0c:74:26:89:e5:
8d:2b:84:e5:2c:a4:1c:9a:e9:f4:29:b9:08:b3:a1:5c:c5:06:
74:33:d0:c0:fd:80:b8:e1:2e:3e:95:73:56:56:98:06:7c:5f:
74:d9:3e:4b:bc:47:92:ae:7e:9c:a6:93:da:88:31:07:b2:a5:
95:80:71:4c:9e:96:f1:59:99:c0:10:63:dd:5e:72:bf:6d:84:
42:ec:cc:e2:76:00:12:df:55:f6:15:d3:be:be:d7:53:23:59:
c2:fc:c3:fb:d9:27:12:f0:0c:16:40:e6:3b:b3:d1:5d:8e:64:
59:2f:49:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:53:49 2025 by rpki-client