Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
File: 335xZknay_bqmGAjUU3-QN8afPA.mft (raw, json)
Hash identifier: q5hzbEwbDAayIGzhGXLj4oFs/rvkjXinvVWnk1tNa3c=
Subject key identifier: D0:FC:35:2C:87:7F:EF:63:99:C9:06:E2:D5:C4:FA:7A:52:1C:A6:5D
Authority key identifier: DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0
Certificate issuer: /CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
Certificate serial: 019A515056E91F2CF2A22C3FFD680B7903AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
Manifest number: 0C16
Signing time: Wed 05 Nov 2025 00:00:10 +0000
Manifest this update: Wed 05 Nov 2025 00:00:10 +0000
Manifest next update: Thu 06 Nov 2025 00:00:10 +0000
Files and hashes: 1: 335xZknay_bqmGAjUU3-QN8afPA.crl (hash: hh9quxwjqBn7B2BqzJJzCoWJx0t3m4i0YD5ZoAWgoQc=)
2: it5TB1fVnn8wAT1GhxrXXPpJQhE.roa (hash: uFvB0yeXGCmgY/JUbCJTKqf/gHh6c2TkYoHqFThttag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:56:e9:1f:2c:f2:a2:2c:3f:fd:68:0b:79:03:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
Validity
Not Before: Nov 5 00:00:10 2025 GMT
Not After : Nov 6 00:00:10 2025 GMT
Subject: CN=d0fc352c877fef6399c906e2d5c4fa7a521ca65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7b:b4:68:d0:ff:90:6c:79:68:5d:90:7d:05:
6c:1c:3c:5b:33:fa:32:dc:6e:54:77:cb:af:48:c0:
be:cd:d6:c0:d5:e1:69:81:b7:c7:bf:26:dd:69:60:
2e:04:49:d5:dc:bf:e7:aa:f5:c7:3f:c4:ca:5f:cf:
b1:9a:d1:c9:a0:59:b6:7c:19:72:3c:bf:a7:02:e1:
c3:cd:be:f5:21:0a:10:a4:59:47:e2:77:88:e8:3a:
a5:12:a9:6e:3f:43:a5:b3:04:89:4d:3c:7e:73:1e:
9d:39:74:2f:43:65:c1:6e:d5:f9:21:64:c2:55:39:
8f:f3:1d:e6:b0:78:5a:f2:ac:a4:3f:b1:b8:fa:3c:
ef:dc:63:17:a1:2a:2d:ac:b3:42:38:ce:61:de:d3:
e3:63:2b:57:a2:3f:5d:42:dc:9f:c2:03:74:98:fd:
08:ef:1c:41:18:ea:81:ae:94:0d:a2:c1:3b:6f:ad:
9d:e6:50:37:d2:a2:e0:b0:70:26:16:28:7c:52:77:
03:15:47:a9:df:de:72:3c:49:fb:a7:46:e9:e8:55:
cf:4c:7d:31:a5:9e:7a:bf:db:17:cf:ed:20:6c:44:
a0:e7:f7:3f:3a:02:d4:e9:65:da:6d:50:38:8c:6e:
b5:db:81:26:d5:cd:51:79:b9:05:fa:fb:ea:0f:32:
5f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FC:35:2C:87:7F:EF:63:99:C9:06:E2:D5:C4:FA:7A:52:1C:A6:5D
X509v3 Authority Key Identifier:
keyid:DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a9:cb:fa:ea:8d:c0:cb:ab:c1:34:63:fc:a0:44:a5:57:1e:
b6:12:b2:fb:a1:b6:da:61:28:0f:be:70:57:40:84:15:23:51:
b6:92:bd:67:df:7c:b9:15:20:3a:bd:d6:bd:9d:fd:6b:f0:74:
12:d0:91:7b:c7:3c:fe:58:a7:dc:4e:22:f6:6f:f4:93:d1:05:
dc:ad:af:77:f5:d0:49:12:e5:fa:59:67:d7:8f:54:97:35:a5:
0e:57:92:57:19:1e:16:43:b6:62:ba:28:1c:06:80:66:67:19:
03:3c:13:0e:83:2c:81:d4:cd:d9:e6:8b:f9:b1:2e:1d:79:c3:
82:a8:28:45:81:d8:7e:09:d8:13:33:ec:db:f6:b0:88:7b:70:
1a:78:a2:ca:f4:82:e9:d4:62:ba:e5:be:c2:7a:fe:c8:29:82:
19:b6:76:72:18:b8:c4:8e:96:cb:31:87:9f:6c:c8:31:fe:ee:
b1:65:a1:c5:b6:b1:9e:81:ac:95:52:21:f2:a2:8e:7e:7a:a9:
93:43:78:bc:f5:db:d8:58:46:83:5d:00:11:9e:65:eb:32:b7:
0d:bb:ca:55:07:8b:75:cf:56:93:d0:bc:eb:1d:fa:68:2f:ec:
f4:56:d6:ea:03:18:70:3f:be:b5:96:87:1e:c3:e1:59:ff:fa:
55:f0:28:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:04:34 2025 by rpki-client