Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
File: 35xk4XC38lXXyjADXWUyyJV-sWk.mft (raw, json)
Hash identifier: HLh+ilpF7HWnJR3qYze34HjVWB9KdKsqw1/vgK77Xxc=
Subject key identifier: E8:63:42:9B:C6:02:E6:DD:2C:26:8B:BA:40:44:20:DC:9A:9C:5E:DB
Authority key identifier: DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69
Certificate issuer: /CN=df9c64e170b7f255d7ca30035d6532c8957eb169
Certificate serial: 019A4D7383EFB53A7B2190FF757BEC7F1A2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
Manifest number: 103D
Signing time: Tue 04 Nov 2025 06:00:07 +0000
Manifest this update: Tue 04 Nov 2025 06:00:07 +0000
Manifest next update: Wed 05 Nov 2025 06:00:07 +0000
Files and hashes: 1: 1KCeM_saj2EHwCtmvYUyod5fQVk.roa (hash: Pv9o3ZWxmDIYTSHQUpAENmb1SekUnxD3+SSuHyFLNIk=)
2: 35xk4XC38lXXyjADXWUyyJV-sWk.crl (hash: 1g4jpP/S/sBDSG9MHJ72oUdej3g1gV/wa1GAf+Ezd2M=)
3: in9L7g-cpUmSO1ofhst17Y034lM.roa (hash: 2AqONqWNA5VFHVb3r9hcyDXspGh88tGgJFdZWuKJFOc=)
4: oQEjAmt7MyhDoFqfFRza8D6gzN0.roa (hash: J9bWIhZt9YEsnb61ecCMtgkEPaDbCaogiDdlzHyBCNE=)
5: s67wfBYN4Keq-XcZ3aP-wu5Usu8.roa (hash: iepRGsTeT7EybANIxB57/7dp/YbwlG1MHY+mia+/CQ8=)
6: y6UzEX6vHkxyP7L_2RZkJTZij0A.roa (hash: iY29x/bkzw37d2kNULsHdGh6yroQI6l4FkOncAmzIB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:83:ef:b5:3a:7b:21:90:ff:75:7b:ec:7f:1a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df9c64e170b7f255d7ca30035d6532c8957eb169
Validity
Not Before: Nov 4 06:00:07 2025 GMT
Not After : Nov 5 06:00:07 2025 GMT
Subject: CN=e863429bc602e6dd2c268bba404420dc9a9c5edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a0:20:3e:af:91:49:e7:fa:bf:7e:05:c2:11:
90:44:55:ac:63:65:fe:a6:e8:60:6c:cd:72:b8:98:
7e:d1:74:30:ed:05:ca:58:02:46:5f:83:14:5c:ae:
71:e8:cc:84:5b:d4:6d:72:a8:4c:fe:50:b4:d1:16:
5b:8e:e7:5b:77:b4:3d:0b:f9:fa:28:00:a5:ae:47:
c0:09:24:a1:7f:77:72:52:d9:8a:22:ea:25:11:f7:
3d:3b:f1:df:98:e5:e0:0a:12:b8:5c:18:a6:9d:58:
fc:04:27:a1:8c:32:f5:93:58:41:66:2f:00:b1:27:
44:ed:6b:ce:5d:e3:45:94:3f:ce:d0:ad:57:cf:96:
38:65:7b:24:74:21:f6:e5:e0:0f:f4:cb:1d:38:9d:
20:74:79:31:ed:b0:dc:5d:4c:d5:4e:ba:99:ff:d2:
fe:8c:00:60:17:cf:f2:b4:a4:12:82:1b:20:ff:d9:
b3:a7:07:84:f6:17:7d:2f:06:06:f9:e4:82:f0:39:
d0:65:72:50:09:6f:a0:48:ae:9c:f3:81:06:4b:04:
0b:e9:d3:d4:7e:30:d8:6f:69:d5:be:a3:1c:18:93:
10:3b:82:1f:c0:fd:97:f1:b6:2e:03:c1:eb:e4:b6:
18:5d:60:4a:d2:06:07:a3:06:b7:c3:83:e5:56:cd:
cf:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:63:42:9B:C6:02:E6:DD:2C:26:8B:BA:40:44:20:DC:9A:9C:5E:DB
X509v3 Authority Key Identifier:
keyid:DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:fd:a4:41:7e:59:64:3f:f0:da:1b:1c:a3:6c:63:a5:ef:0d:
11:07:24:24:c5:5e:b4:4c:7e:20:ca:3d:2a:21:2d:eb:e5:8c:
b5:cb:9d:7c:63:3e:3a:a7:bc:2b:10:7d:3a:5b:34:23:cc:36:
46:7c:4b:60:01:af:f2:70:99:04:62:d6:5a:9a:88:af:52:64:
0a:4f:c8:2e:68:03:3a:93:45:b0:68:0a:62:f4:d2:37:47:45:
70:16:b5:81:3c:79:fe:8c:7e:9f:b8:06:bf:41:c4:35:ad:3f:
22:1e:89:e0:b8:6e:4e:68:5e:d5:45:8a:5e:7e:47:63:dc:a7:
ce:0c:90:4b:c7:2b:f0:77:e2:83:26:d5:6b:ef:13:4d:18:a1:
63:e4:68:3f:49:a7:95:72:82:e3:4c:9b:0a:e2:4b:65:ec:31:
4b:fb:c2:e9:63:aa:30:e4:db:8e:0f:d5:fa:e4:12:92:e6:df:
e3:c7:2e:62:42:84:4a:c6:ad:6d:be:5b:f3:0e:dc:68:36:98:
e0:9f:3d:bf:a1:80:81:f7:38:03:7c:33:a3:8f:91:f1:2a:7b:
87:c3:c6:02:4f:53:58:09:12:17:19:38:af:ae:d1:f5:f3:09:
dd:a5:e8:e5:92:76:76:f2:43:30:49:9f:24:2d:a0:65:fc:05:
db:97:16:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:11 2025 by rpki-client