Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
File: 34CJqp4dXBKrrUOnAVEdocZfn6Y.mft (raw, json)
Hash identifier: 7rm4kNhT6b9t8Go9Us2fb6vy0/vLyJH9Ry4TrmuS8uc=
Subject key identifier: 70:0A:44:56:08:9C:23:06:9A:F3:98:4E:C0:D0:4B:69:AA:D6:AB:9F
Authority key identifier: DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6
Certificate issuer: /CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6
Certificate serial: 0199FC8F6BC8F20E057E26CAB04BCBA6DD44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
Manifest number: 0FF0
Signing time: Sun 19 Oct 2025 13:01:21 +0000
Manifest this update: Sun 19 Oct 2025 13:01:21 +0000
Manifest next update: Mon 20 Oct 2025 13:01:21 +0000
Files and hashes: 1: 34CJqp4dXBKrrUOnAVEdocZfn6Y.crl (hash: W2Jwh0mhoYlkg2RRzMmn4vu7X6ZL0D3Zk8x+kItsSpA=)
2: b-VOh1iyKHVcDysv8XYced0xnLo.roa (hash: 0b/hMsK4rsISxKd+Kzt0DOFihl9RrwFHAkmEpylmN4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:6b:c8:f2:0e:05:7e:26:ca:b0:4b:cb:a6:dd:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6
Validity
Not Before: Oct 19 13:01:21 2025 GMT
Not After : Oct 20 13:01:21 2025 GMT
Subject: CN=700a4456089c23069af3984ec0d04b69aad6ab9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a7:82:7e:7d:02:eb:cd:ea:ee:8d:ad:01:b2:
40:11:51:9b:b5:4c:fe:b5:12:b9:2f:87:54:60:40:
28:9b:1a:f9:13:80:1a:74:a6:7a:51:ff:c1:65:49:
72:68:be:c5:7e:48:38:81:d1:79:a8:6f:e6:1b:48:
5b:ee:64:fd:32:34:7e:91:29:d0:44:04:aa:2d:13:
76:42:b0:f5:50:4e:96:fa:4a:bc:67:78:95:d8:c2:
37:68:4e:4d:4c:64:ff:77:7c:5b:d1:f0:29:db:38:
49:67:df:13:bc:7b:98:ab:10:f7:33:88:a6:cb:a1:
df:69:2b:32:fc:65:59:83:7a:c5:52:0d:58:92:24:
fd:1c:06:02:03:37:11:97:ad:37:4d:88:aa:ca:48:
75:74:30:13:07:dd:ed:00:18:6c:a8:31:14:3f:e8:
f2:f7:4f:a9:66:27:b7:b0:77:04:7e:5d:db:1b:49:
de:90:ac:98:ca:93:25:2d:ce:20:23:37:74:04:b6:
81:ae:25:05:32:ce:5d:98:3e:5a:c8:6c:dc:3f:ab:
df:bc:3e:bb:e6:2e:3e:2b:de:99:f0:d5:eb:d5:49:
1c:59:84:fd:e1:57:e1:66:32:23:5b:f1:a5:3a:f3:
48:98:75:2a:cd:cb:c4:6d:87:52:b6:44:16:4b:0f:
05:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0A:44:56:08:9C:23:06:9A:F3:98:4E:C0:D0:4B:69:AA:D6:AB:9F
X509v3 Authority Key Identifier:
keyid:DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:47:c6:91:f3:01:dd:f7:7c:c8:a7:60:f4:24:29:39:35:05:
e2:62:03:2b:ba:cd:85:0d:90:a6:e1:f7:6d:37:30:ba:f9:34:
c1:5b:31:30:63:56:45:b4:76:97:a4:b3:98:9a:29:74:a2:2e:
29:78:c6:0a:54:e5:6e:22:58:6c:46:ea:e4:f9:f9:84:e4:b6:
a1:89:b5:04:29:0a:6f:63:71:90:36:7d:6a:9d:10:4e:90:c1:
aa:21:68:db:52:4f:dd:67:40:db:a8:34:b0:f8:0c:5e:aa:6b:
f3:f1:7e:d5:10:18:ea:86:2a:4c:52:06:77:04:d4:c8:ad:df:
44:f7:15:ec:7c:d8:d9:4b:7c:06:bd:d0:52:df:73:5d:4c:5b:
f7:28:c0:c6:49:27:0b:c5:87:32:92:eb:ba:f1:ad:3b:ed:ea:
9e:3c:3c:73:93:1f:4f:26:cb:21:55:41:e4:95:d2:88:1f:e9:
7c:dc:e3:60:ac:ff:09:04:cd:5a:70:e6:37:66:0a:e8:ad:81:
ba:57:72:d6:8e:78:a6:de:4d:b7:1f:ef:22:a2:d2:01:bc:67:
a7:ac:15:38:2e:33:9d:ef:67:e1:e2:30:8d:00:77:c3:7c:ab:
10:76:fa:c6:e0:32:cb:38:84:66:ea:53:bb:fa:61:a8:f8:9d:
14:60:cf:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:23 2025 by rpki-client