Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
File: 35BBVe46z-P-qLv-6G6XxYyJkfQ.mft (raw, json)
Hash identifier: nDKMHV5m60fl5ehTo8DvfMPA/1yUXkR5v9sAq13DXvE=
Subject key identifier: D4:90:8F:F8:3D:6E:EC:74:22:CC:60:89:AD:69:09:B4:A0:30:14:E4
Authority key identifier: DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4
Certificate issuer: /CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4
Certificate serial: 019893366AB7D43EBA3AE047D846E0C14D87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
Manifest number: 124D
Signing time: Sun 10 Aug 2025 09:01:13 +0000
Manifest this update: Sun 10 Aug 2025 09:01:13 +0000
Manifest next update: Mon 11 Aug 2025 09:01:13 +0000
Files and hashes: 1: 35BBVe46z-P-qLv-6G6XxYyJkfQ.crl (hash: JU8kNc3q0x+2NK0jkdktvbdlkJu9SxtXg7aHvN8kalw=)
2: B-nM1GTMLKr4Gk1KLpOo23YK3j8.roa (hash: 0wOg2hC46+mvVWLdy3l+GE8WwSTmGrLshzLKyEpaIwQ=)
3: zrrMlICGpdDYFya8WKvO7u0XM-Q.roa (hash: txsRNfUipxo+CqvVL0kXrQvI1GxCBc26tW/8hZA3omw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:6a:b7:d4:3e:ba:3a:e0:47:d8:46:e0:c1:4d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4
Validity
Not Before: Aug 10 09:01:13 2025 GMT
Not After : Aug 11 09:01:13 2025 GMT
Subject: CN=d4908ff83d6eec7422cc6089ad6909b4a03014e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:74:d5:8c:bb:0e:48:b3:90:48:72:24:c9:5a:
f2:fd:ee:83:55:e6:fa:34:e9:15:a0:09:1d:9d:83:
71:cf:97:dc:75:25:c7:1e:21:80:f0:39:e7:57:5c:
d4:18:ef:fc:3c:f2:46:cb:db:65:ac:7f:74:aa:5d:
4a:b0:ae:cb:12:04:4b:04:ab:6d:02:e1:b4:ff:0e:
04:1f:e4:f3:89:ed:d1:9f:ef:ab:d2:cf:51:85:7e:
4e:d3:a8:d5:25:ac:16:5c:08:d3:13:e0:ef:9c:fa:
1c:18:41:5f:7b:6c:0d:74:37:32:26:66:e3:3b:15:
70:67:49:5b:ad:c3:f7:84:48:19:d5:b7:d7:2d:16:
67:bb:f9:8f:d1:05:73:83:2e:0a:24:84:14:bd:1a:
e0:ff:36:be:64:b0:da:aa:c1:44:7b:8f:ba:55:d3:
8a:69:9c:a6:09:de:00:94:7d:f1:39:c0:8e:36:6f:
30:4f:25:05:50:7e:ae:b0:8b:84:6c:0c:66:f2:c8:
60:38:b5:73:70:8b:d7:dc:8d:56:00:11:c4:b1:f7:
80:0e:61:61:cf:e2:14:de:da:cf:64:de:22:2b:58:
67:98:ca:ad:24:85:02:b1:da:69:5a:b8:54:a7:39:
18:cd:81:cc:21:8f:c2:25:d4:dd:e4:fe:0e:77:67:
81:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:90:8F:F8:3D:6E:EC:74:22:CC:60:89:AD:69:09:B4:A0:30:14:E4
X509v3 Authority Key Identifier:
keyid:DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e2:29:7c:db:03:6e:0d:04:36:ea:b5:2f:e7:26:21:10:73:
cf:37:af:96:03:47:4a:71:13:bd:0f:94:59:4f:95:fd:83:82:
2a:00:1f:14:a4:a0:c7:3e:17:5c:10:46:25:45:6d:5f:77:cc:
f7:47:76:e8:ae:e5:15:46:b4:f8:52:06:fd:d7:73:fe:b7:eb:
50:21:80:70:29:84:3f:8c:0a:1a:1e:a1:a9:e3:3e:56:97:46:
98:7a:cc:8a:ac:78:5a:bc:ed:9d:09:5a:88:ec:4c:c6:be:72:
04:49:3d:f2:3b:b8:67:82:0a:bc:8b:71:90:fd:0c:41:98:ad:
c3:4b:05:9d:10:21:65:2a:ab:6c:b0:77:bc:d7:c8:e5:fe:7e:
1e:2f:a9:99:c9:b4:bd:65:15:c2:41:76:69:15:b7:27:83:65:
0b:9b:23:c8:bf:6e:c7:72:c5:86:93:8d:b2:0d:ea:12:5c:2a:
01:30:06:84:21:e6:43:35:e3:63:b4:81:e2:c6:78:20:74:71:
a7:c1:32:57:ec:ba:9e:89:b9:5a:3f:c9:6b:1b:67:00:7b:83:
72:88:dc:73:cb:52:bb:ab:3f:ea:ac:4c:08:04:2f:69:f0:91:
93:6c:72:1f:94:12:c4:e8:86:a9:83:dc:fe:6d:ed:1a:c7:55:
90:e6:1e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:53:09 2025 by rpki-client