Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.mft
File: 35ACA6262E13FCF885902051522BBE65379AE61D.mft (raw, json)
Hash identifier: E+ByPaN78hOTkdU3k7y+/x6yiIfn04ry8flOtuD3Vv0=
Subject key identifier: B7:26:BD:42:33:17:87:74:41:DF:F0:4B:94:9A:B1:56:68:A1:18:16
Authority key identifier: 35:AC:A6:26:2E:13:FC:F8:85:90:20:51:52:2B:BE:65:37:9A:E6:1D
Certificate issuer: /CN=35aca6262e13fcf885902051522bbe65379ae61d
Certificate serial: 0377998C74EF2FA2051AEA3289F632A64EA3D9F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaymJi4T_PiFkCBRUiu-ZTea5h0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.mft
Manifest number: 53
Signing time: Fri 13 Jun 2025 12:18:32 +0000
Manifest this update: Fri 13 Jun 2025 12:13:32 +0000
Manifest next update: Sat 14 Jun 2025 15:20:32 +0000
Files and hashes: 1: 35ACA6262E13FCF885902051522BBE65379AE61D.crl (hash: lmCZY0orSg08mtCpNAtW13iHPSNAmBeLx6Q6ySmeCJc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.crl
rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.mft
rsync://rpki.ripe.net/repository/DEFAULT/NaymJi4T_PiFkCBRUiu-ZTea5h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:77:99:8c:74:ef:2f:a2:05:1a:ea:32:89:f6:32:a6:4e:a3:d9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35aca6262e13fcf885902051522bbe65379ae61d
Validity
Not Before: Jun 13 12:13:32 2025 GMT
Not After : Jun 14 15:20:32 2025 GMT
Subject: CN=B726BD423317877441DFF04B949AB15668A11816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ff:74:82:74:a3:d8:0d:5f:e2:04:18:fc:53:
1f:1b:8e:54:f3:ca:39:e5:10:67:dc:7e:7e:c2:cb:
9c:7d:f8:4b:48:28:23:2f:2c:74:ee:f6:82:38:b1:
c5:ce:14:39:26:07:50:33:46:ed:3f:65:21:3b:9b:
b5:c2:49:d9:bf:1d:2c:30:4d:1b:7d:50:35:7a:8c:
c7:0c:21:80:32:b7:1a:44:0e:5b:1f:c3:b8:b2:e0:
f7:2a:6b:b7:f7:16:3f:e4:a3:28:79:4e:12:4f:18:
f3:12:1b:2e:76:3b:b4:29:96:9d:01:a2:3e:27:0a:
a3:ae:07:10:6c:bf:8c:6a:f7:a7:d4:de:57:de:ed:
3e:31:00:01:0b:0c:ef:98:1e:22:03:e3:e0:a2:a8:
29:dc:a4:5d:43:28:00:11:b1:3c:bb:04:10:51:5c:
9e:03:17:d3:32:05:e8:d2:4b:d4:99:32:00:61:36:
9b:a6:d9:dd:b1:76:7f:41:cc:8b:9d:d3:0b:28:8e:
dc:4c:a9:e4:46:50:c9:3a:49:7c:6c:7e:1a:6d:ee:
09:e0:d8:34:ce:db:00:29:f7:a9:77:d6:ab:1f:2b:
60:e5:ec:b3:36:f8:c6:85:2e:a1:f9:3a:60:7b:ee:
a0:6b:e6:41:80:4c:71:4c:52:cb:ef:bb:66:9a:55:
48:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:26:BD:42:33:17:87:74:41:DF:F0:4B:94:9A:B1:56:68:A1:18:16
X509v3 Authority Key Identifier:
keyid:35:AC:A6:26:2E:13:FC:F8:85:90:20:51:52:2B:BE:65:37:9A:E6:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaymJi4T_PiFkCBRUiu-ZTea5h0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:44:83:a0:dc:12:75:fb:4b:33:87:9b:c4:f3:cf:6b:51:89:
e9:7b:6a:e9:81:1e:b3:a4:bb:31:3f:c0:0b:47:41:72:2b:ce:
71:0d:81:b4:aa:71:b1:42:f0:f7:e2:f2:73:d5:67:f9:3b:dd:
20:f5:17:57:a2:ec:e3:ca:35:b7:15:a3:bf:98:30:ab:d4:45:
c8:67:ac:f2:43:23:9c:3b:4b:c8:3c:8f:40:8a:c6:8c:f4:e6:
20:4d:19:44:4e:a4:96:58:12:55:1c:a8:27:95:7a:55:7a:14:
d3:3c:43:14:25:91:28:62:04:40:e5:ab:98:bd:28:e7:96:43:
98:cd:ba:88:0a:e3:cb:15:4c:92:94:6f:12:9f:f2:cd:46:3d:
11:49:0c:4c:69:5a:ab:ad:7b:be:16:19:f7:7b:53:27:3f:52:
74:39:0a:80:31:61:3c:01:a1:45:7c:e0:9b:48:54:ac:82:5d:
6d:20:db:a6:98:15:83:f8:c9:8c:0d:cc:22:b6:3e:03:aa:2b:
8d:37:fe:20:cc:15:4a:aa:d5:c1:76:bd:50:91:1f:71:1a:28:
cf:5b:c6:30:94:b2:f9:f8:7a:a4:a0:59:40:f7:87:ab:06:1b:
e7:96:c5:60:44:8a:c5:e5:b8:aa:c5:98:86:b7:ae:26:ce:df:
a3:d2:a0:0e
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUA3eZjHTvL6IFGuoyifYypk6j2fIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzVhY2E2MjYyZTEzZmNmODg1OTAyMDUxNTIyYmJlNjUz
NzlhZTYxZDAeFw0yNTA2MTMxMjEzMzJaFw0yNTA2MTQxNTIwMzJaMDMxMTAvBgNV
BAMTKEI3MjZCRDQyMzMxNzg3NzQ0MURGRjA0Qjk0OUFCMTU2NjhBMTE4MTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz/3SCdKPYDV/iBBj8Ux8bjlTz
yjnlEGfcfn7Cy5x9+EtIKCMvLHTu9oI4scXOFDkmB1AzRu0/ZSE7m7XCSdm/HSww
TRt9UDV6jMcMIYAytxpEDlsfw7iy4Pcqa7f3Fj/koyh5ThJPGPMSGy52O7Qplp0B
oj4nCqOuBxBsv4xq96fU3lfe7T4xAAELDO+YHiID4+CiqCncpF1DKAARsTy7BBBR
XJ4DF9MyBejSS9SZMgBhNpum2d2xdn9BzIud0wsojtxMqeRGUMk6SXxsfhpt7gng
2DTO2wAp96l31qsfK2Dl7LM2+MaFLqH5OmB77qBr5kGATHFMUsvvu2aaVUjrAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUtya9QjMXh3RB3/BLlJqxVmihGBYwHwYDVR0j
BBgwFoAUNaymJi4T/PiFkCBRUiu+ZTea5h0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTVkNGMwMGItZDEwNS00OTA2LWI5ODEtMWQwMzQzZTMw
MWRhLzAvMzVBQ0E2MjYyRTEzRkNGODg1OTAyMDUxNTIyQkJFNjUzNzlBRTYxRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL05heW1KaTRUX1BpRmtDQlJVaXUtWlRl
YTVoMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNWQ0YzAwYi1k
MTA1LTQ5MDYtYjk4MS0xZDAzNDNlMzAxZGEvMC8zNUFDQTYyNjJFMTNGQ0Y4ODU5
MDIwNTE1MjJCQkU2NTM3OUFFNjFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlkSDoNwSdftLM4ebxPPP
a1GJ6Xtq6YEes6S7MT/AC0dBcivOcQ2BtKpxsULw9+Lyc9Vn+TvdIPUXV6Ls48o1
txWjv5gwq9RFyGes8kMjnDtLyDyPQIrGjPTmIE0ZRE6kllgSVRyoJ5V6VXoU0zxD
FCWRKGIEQOWrmL0o55ZDmM26iArjyxVMkpRvEp/yzUY9EUkMTGlaq617vhYZ93tT
Jz9SdDkKgDFhPAGhRXzgm0hUrIJdbSDbppgVg/jJjA3MIrY+A6orjTf+IMwVSqrV
wXa9UJEfcRooz1vGMJSy+fh6pKBZQPeHqwYb55bFYESKxeW4qsWYhreuJs7fo9Kg
Dg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:21:55 2025 by rpki-client