Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
File: 35BBVe46z-P-qLv-6G6XxYyJkfQ.mft (raw, json)
Hash identifier: K5lMCggo2yKMbGWbJhxWigkqS4yfTIGdQwDRDNfnfeQ=
Subject key identifier: 40:D3:27:47:E2:0B:41:E8:D4:73:AC:EE:7A:20:6C:64:57:82:C5:60
Authority key identifier: DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4
Certificate issuer: /CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4
Certificate serial: 0199FC58EF87DF33C930EF7C437B2F994DEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
Manifest number: 1308
Signing time: Sun 19 Oct 2025 12:01:50 +0000
Manifest this update: Sun 19 Oct 2025 12:01:50 +0000
Manifest next update: Mon 20 Oct 2025 12:01:50 +0000
Files and hashes: 1: 35BBVe46z-P-qLv-6G6XxYyJkfQ.crl (hash: OVXTaJ/0xDgc8FdKZFqG+VBl1AonDs9nK6pO3ErpvLI=)
2: B-nM1GTMLKr4Gk1KLpOo23YK3j8.roa (hash: 0wOg2hC46+mvVWLdy3l+GE8WwSTmGrLshzLKyEpaIwQ=)
3: zrrMlICGpdDYFya8WKvO7u0XM-Q.roa (hash: txsRNfUipxo+CqvVL0kXrQvI1GxCBc26tW/8hZA3omw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ef:87:df:33:c9:30:ef:7c:43:7b:2f:99:4d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4
Validity
Not Before: Oct 19 12:01:50 2025 GMT
Not After : Oct 20 12:01:50 2025 GMT
Subject: CN=40d32747e20b41e8d473acee7a206c645782c560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2e:22:40:70:07:2f:27:88:6e:0c:f0:cb:74:
12:87:71:f9:38:3f:4a:53:ce:a1:16:0c:e6:d7:03:
c8:80:d7:f8:2e:7c:67:20:18:88:66:07:bf:57:c5:
7e:e4:3b:5f:0d:ee:47:0e:2e:c1:f1:75:a9:cb:e7:
01:2f:60:d7:3b:9d:08:e5:4c:85:a9:36:79:f7:be:
35:17:13:d4:4d:ca:4a:af:84:ae:65:cc:f2:df:1a:
16:84:45:3d:73:f3:79:52:65:74:8e:01:f7:83:45:
9b:69:cd:b8:11:e5:19:db:94:68:5a:c8:8a:4f:db:
97:8a:8c:02:a0:23:3d:45:e2:d8:fa:58:a5:90:78:
89:02:6b:81:aa:41:a1:0f:67:ba:9a:30:71:40:2b:
2a:9d:a3:3c:b9:a7:22:db:ed:11:b6:d8:31:18:b0:
46:c4:b3:cb:b9:4b:b3:e4:b7:f1:cc:f0:75:20:86:
d0:55:b1:bd:a0:fe:8e:be:ff:3d:5c:bc:c5:a9:8a:
e5:61:3f:86:c7:b0:a9:7b:56:11:e8:94:86:7a:01:
e8:a5:cc:83:74:a2:85:54:3e:83:5d:6c:11:ac:cd:
aa:3b:77:98:e1:c6:0b:d1:42:1d:9f:6e:61:db:af:
6f:35:df:a5:f6:45:e4:2f:4a:92:03:03:07:b0:4e:
ae:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D3:27:47:E2:0B:41:E8:D4:73:AC:EE:7A:20:6C:64:57:82:C5:60
X509v3 Authority Key Identifier:
keyid:DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:32:c4:09:82:cf:67:7a:67:f4:e6:e5:0a:41:af:ac:60:21:
45:a5:17:25:ed:b1:de:02:73:e6:42:60:d8:02:b7:c5:19:42:
4e:1f:8b:d7:a5:9d:0b:c2:bf:e8:3b:36:64:16:77:a9:70:15:
85:44:e1:8a:bd:b1:5c:48:be:99:0c:14:e9:37:bc:c5:f0:a6:
e3:a0:44:a4:2d:b9:5c:c5:b9:ed:90:f3:74:9d:4a:ee:f2:ca:
ab:67:8d:2b:56:51:c9:0d:3a:ca:91:37:de:76:28:aa:6a:2c:
36:33:ac:43:75:06:f1:1e:de:be:d3:9a:5f:f1:f4:85:d5:d5:
18:5c:99:13:eb:a8:a6:ef:24:be:0a:e7:3f:93:ad:7f:40:d4:
6b:4b:dc:2e:6d:ce:ad:cc:4b:53:31:59:a0:ea:e6:64:69:5e:
0a:b8:cb:93:c6:88:20:dc:5d:d9:4f:bf:b5:3b:91:ea:30:f4:
eb:86:13:ca:41:db:22:f2:61:c6:b9:35:a7:be:81:51:64:d9:
8a:40:cf:94:46:e3:fe:e5:36:74:44:f3:92:61:60:c9:5f:17:
e1:11:16:45:68:f2:9b:29:ef:9c:86:c8:93:aa:e2:53:72:d1:
fd:37:d6:6d:e1:d5:14:29:da:d8:b6:5d:52:4d:a8:f0:2e:87:
9e:9c:f0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:41:56 2025 by rpki-client