Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
File: 435f8SPqfS6DzidSDJh9A35knQM.mft (raw, json)
Hash identifier: dnsJIRLKy+5jIIMsBI/TOgILehO71RbwC6AG7ECecsc=
Subject key identifier: EE:CC:70:EF:F6:63:D4:69:4E:1B:E6:0D:8D:41:41:33:0C:9C:EB:37
Authority key identifier: E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
Certificate issuer: /CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Certificate serial: 0198D515FF4A96E4EB5AA3524B4B91742B31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
Manifest number: 10EC
Signing time: Sat 23 Aug 2025 04:00:45 +0000
Manifest this update: Sat 23 Aug 2025 04:00:45 +0000
Manifest next update: Sun 24 Aug 2025 04:00:45 +0000
Files and hashes: 1: 435f8SPqfS6DzidSDJh9A35knQM.crl (hash: Q3Y4MdoR6Ul02M+JHVr0kMiohoWS03fRZzwXAeud9Qs=)
2: tCjXyqFlakOJKQogp8h2votSD1A.roa (hash: m/O4S6Sl2dQY6fRE2qRWrRG8qwZhPhRAmDPSjwX0exE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ff:4a:96:e4:eb:5a:a3:52:4b:4b:91:74:2b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Validity
Not Before: Aug 23 04:00:45 2025 GMT
Not After : Aug 24 04:00:45 2025 GMT
Subject: CN=eecc70eff663d4694e1be60d8d4141330c9ceb37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:95:43:75:e1:3b:0b:b9:3f:66:11:ae:ae:80:
29:1b:34:99:6e:4a:6b:c5:27:8d:d7:3b:36:db:b3:
c3:33:71:d4:49:df:8a:78:67:f1:b1:e9:ea:85:88:
2a:b2:32:c2:bb:3b:9e:e2:07:93:99:e3:a6:28:99:
a1:a6:28:e1:d3:7d:d8:dc:54:61:e4:6d:ba:9b:88:
3b:fe:dc:4c:af:7a:2f:c2:43:97:d5:8d:bb:2c:b9:
87:01:ac:73:be:d2:10:eb:09:30:4e:05:9c:67:6e:
be:8f:75:19:0a:ba:da:8a:0b:38:f3:87:1f:51:67:
d5:4e:4c:3a:13:2d:d2:34:3a:a7:d4:0a:88:23:cf:
c8:cb:ca:05:c6:1c:05:99:d7:e5:ce:89:f9:08:56:
c4:5b:37:e2:ea:60:3f:d7:2f:34:cd:67:81:2e:a9:
05:5c:9e:90:85:c3:c7:e0:e3:0e:93:d9:ed:94:92:
bd:cf:24:88:45:b7:6e:98:53:e3:93:dc:9f:60:54:
bd:c6:bc:e5:0c:40:49:75:e6:c1:bb:70:d6:62:e3:
05:2b:e2:05:bb:32:b0:70:19:19:e5:bc:42:01:99:
d7:4e:b6:c4:d9:13:02:7f:e0:4c:85:f1:7d:b7:b9:
55:9a:76:0b:ee:67:7d:22:c2:06:c6:d1:66:bb:4a:
f5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CC:70:EF:F6:63:D4:69:4E:1B:E6:0D:8D:41:41:33:0C:9C:EB:37
X509v3 Authority Key Identifier:
keyid:E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:84:2f:56:d6:a6:e2:42:81:ed:24:9d:ba:36:22:39:06:8a:
b0:40:3c:b5:be:a7:14:56:8c:21:d9:fd:7e:2e:7b:a0:5d:30:
8b:98:b3:26:d7:06:d3:be:33:61:74:b8:40:9c:de:3c:ff:cf:
c1:24:f1:19:bb:d0:42:88:62:29:d1:94:12:9d:7c:8d:41:1e:
6c:40:65:6c:49:54:ad:9a:da:c8:79:b1:87:db:66:b8:cb:36:
45:bf:a8:a8:80:2f:f8:2d:15:5e:74:4b:75:0e:8d:2a:19:5f:
4d:4f:7e:89:39:46:7a:81:bf:c5:d1:ae:ea:1c:f7:5b:52:09:
32:f7:5c:d2:9a:4b:46:c4:97:bc:e2:2e:0d:8b:24:b2:9c:16:
8f:41:75:9f:dd:ce:5c:6c:22:98:e2:87:0a:94:8d:3b:b1:13:
86:c0:0c:b5:7c:3e:b3:45:22:83:a4:5c:8d:1e:41:0f:ac:66:
a8:18:d2:60:00:fa:35:a9:3f:82:18:da:6b:d0:84:f5:9a:fe:
44:3c:c8:3b:91:fa:04:dc:66:95:a4:b1:c3:15:a1:30:05:f2:
8d:8c:2d:9a:11:51:88:45:5e:e1:b8:5b:ba:3b:5c:b9:2c:01:
2c:b5:ff:7b:d3:86:9b:f1:c3:b1:3d:d4:4d:46:7b:bc:28:02:
47:89:68:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:53 2025 by rpki-client