
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
File: 335xZknay_bqmGAjUU3-QN8afPA.mft (raw, json)
Hash identifier: xv5yt5aX5zwH1WGqXjaqqaNnwQw3xrFfLDCZoJo7t+I=
Subject key identifier: 7D:74:26:E1:C1:C8:8F:F7:AF:F9:72:01:97:00:10:57:91:23:27:CA
Authority key identifier: DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0
Certificate issuer: /CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
Certificate serial: 01988B7C52F15A147EB09E6FF687341E18F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
Manifest number: 0B2B
Signing time: Fri 08 Aug 2025 21:00:37 +0000
Manifest this update: Fri 08 Aug 2025 21:00:37 +0000
Manifest next update: Sat 09 Aug 2025 21:00:37 +0000
Files and hashes: 1: 335xZknay_bqmGAjUU3-QN8afPA.crl (hash: MVqpuSrTkdAG7WQSrk9F1OerdnV7ZOE9ipf/HxOseoY=)
2: it5TB1fVnn8wAT1GhxrXXPpJQhE.roa (hash: uFvB0yeXGCmgY/JUbCJTKqf/gHh6c2TkYoHqFThttag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:52:f1:5a:14:7e:b0:9e:6f:f6:87:34:1e:18:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
Validity
Not Before: Aug 8 21:00:37 2025 GMT
Not After : Aug 9 21:00:37 2025 GMT
Subject: CN=7d7426e1c1c88ff7aff9720197001057912327ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:94:d9:a2:0a:65:0e:9f:0c:b9:9b:3a:3c:58:
b1:01:c8:dc:f3:28:7b:14:80:28:de:71:ee:7c:8a:
c1:55:fa:b3:01:fd:fc:8e:3c:c9:a0:17:0c:50:2d:
46:ab:b0:8f:6c:97:f1:12:4d:be:d0:e4:e2:0b:f1:
c5:4e:87:ef:bf:0d:80:26:6a:e8:b8:60:ef:58:36:
21:a6:35:c0:ec:4a:f3:27:c7:1d:d0:53:41:c6:2e:
61:a0:c3:5f:8f:59:6f:e5:5b:ba:02:a5:22:d7:0c:
12:a2:7d:a5:da:25:0d:29:8e:7e:db:f1:6a:48:cd:
2a:c9:e4:13:06:ed:a2:7a:b5:3e:ca:ad:1f:58:04:
24:f8:5f:03:8b:48:7d:86:24:dc:6d:6c:34:c8:df:
0b:a8:eb:1b:f5:f4:6f:d5:cd:fe:14:a2:71:1c:90:
c5:25:5a:86:ff:c6:1e:0c:4b:c3:a4:9f:35:b5:6b:
5d:68:b0:82:2a:0b:cb:ab:e5:e5:7a:37:38:03:3b:
c8:a0:73:02:35:0f:2f:29:57:72:b4:d4:fe:e1:29:
f8:b2:b2:28:c5:e4:71:82:e1:19:e0:c6:aa:23:ae:
f9:e1:75:4e:f2:33:80:81:59:09:cf:8d:be:2a:9e:
ce:66:34:d3:eb:8b:8f:9c:70:ae:cd:27:25:ab:74:
d9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:74:26:E1:C1:C8:8F:F7:AF:F9:72:01:97:00:10:57:91:23:27:CA
X509v3 Authority Key Identifier:
keyid:DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:fd:63:0d:c5:b8:b5:c7:8f:3a:1b:99:3a:46:af:3b:97:7d:
0c:53:fb:b3:19:83:59:d0:96:3e:1c:ec:18:cf:8f:97:c1:60:
75:46:19:aa:01:11:ca:c9:41:07:be:9d:97:ff:ac:73:df:da:
56:29:18:38:29:e3:e9:ae:b1:8e:96:d4:2c:f2:46:9d:1b:d1:
c6:7c:2f:15:b1:df:2f:de:ac:b6:71:0c:05:91:04:30:60:c8:
53:9a:e7:e7:5e:7d:d2:e1:92:11:47:83:93:55:7e:d1:6d:bc:
dd:eb:03:1f:ab:22:c3:4b:a0:8e:b6:fc:bd:bb:db:1f:95:1c:
78:d8:42:ac:e3:b9:5b:cf:59:74:c8:42:07:3d:a5:43:ec:23:
67:ed:c9:9e:e4:4a:d2:63:31:17:46:db:3b:f7:84:aa:58:db:
8e:a6:aa:b8:da:5a:14:64:11:9c:98:38:df:71:76:49:ac:e4:
f9:1f:2d:e9:1e:57:ab:af:56:fd:9e:a5:22:9f:4b:22:a7:85:
54:4f:35:5e:65:f5:df:c0:74:d7:5b:88:e0:df:cb:72:41:e6:
72:8e:c9:0b:4b:5d:1c:df:89:64:83:8b:66:ea:4f:25:99:fe:
48:cf:5b:e9:73:06:a2:13:0e:e9:2f:f0:6c:e3:15:40:17:d9:
02:2a:cf:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:46:08 2025 by rpki-client