Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
File: 35BBVe46z-P-qLv-6G6XxYyJkfQ.mft (raw, json)
Hash identifier: poKF4X0Htol7jcDsasNouOT80GCCbf1reMsxdNCqTAk=
Subject key identifier: B3:D3:24:BC:D4:10:DB:E7:6C:3A:F9:12:FD:4A:CB:54:43:EB:47:26
Authority key identifier: DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4
Certificate issuer: /CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4
Certificate serial: 0198D4E0968AC262A0D05258DA4746778B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
Manifest number: 126F
Signing time: Sat 23 Aug 2025 03:02:25 +0000
Manifest this update: Sat 23 Aug 2025 03:02:25 +0000
Manifest next update: Sun 24 Aug 2025 03:02:25 +0000
Files and hashes: 1: 35BBVe46z-P-qLv-6G6XxYyJkfQ.crl (hash: UAw2vgGfslW64XjxYalgcKFL9ND43bte8nEuBnSfPB0=)
2: B-nM1GTMLKr4Gk1KLpOo23YK3j8.roa (hash: 0wOg2hC46+mvVWLdy3l+GE8WwSTmGrLshzLKyEpaIwQ=)
3: zrrMlICGpdDYFya8WKvO7u0XM-Q.roa (hash: txsRNfUipxo+CqvVL0kXrQvI1GxCBc26tW/8hZA3omw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:96:8a:c2:62:a0:d0:52:58:da:47:46:77:8b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4
Validity
Not Before: Aug 23 03:02:25 2025 GMT
Not After : Aug 24 03:02:25 2025 GMT
Subject: CN=b3d324bcd410dbe76c3af912fd4acb5443eb4726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a5:a0:8a:30:36:a3:de:7b:a2:63:b8:e6:08:
a8:fd:5e:5b:75:c6:26:19:1e:ec:9b:77:96:d3:37:
c8:23:16:20:c7:e7:eb:78:f7:68:3e:6c:e6:31:26:
51:84:32:c7:e0:37:4e:6e:49:c2:dc:55:ce:6a:d7:
1f:80:97:2b:67:44:f6:e2:0b:ee:0c:e9:6b:7a:a4:
ec:a1:04:d4:ac:07:f2:c7:45:c2:6f:de:87:c0:91:
ee:a2:cf:f3:6f:6c:5f:bf:56:32:48:43:10:fe:0c:
48:ff:ea:76:35:da:45:c3:ac:00:70:24:10:36:bb:
05:9a:50:32:a1:cc:40:ab:e5:83:a1:74:aa:f5:93:
0c:5b:cb:83:85:73:fe:0f:80:29:84:3a:b1:e8:44:
00:0f:6c:0d:55:18:ba:e0:eb:8f:e3:ba:a7:e8:ba:
40:c4:cb:95:2c:ea:8f:3a:03:28:c7:1a:ca:38:fc:
ce:1a:a3:d2:3a:ab:66:94:61:32:94:10:8a:81:ba:
ab:fc:0d:82:38:40:8a:dc:3a:3e:97:72:b6:9c:c7:
21:d1:58:00:9f:23:69:51:bf:ab:bc:be:11:ed:f5:
ec:6b:da:34:df:a0:69:ec:ab:5f:67:83:98:69:89:
e7:65:fe:67:bc:f8:98:04:55:97:7c:0a:f8:8d:79:
83:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D3:24:BC:D4:10:DB:E7:6C:3A:F9:12:FD:4A:CB:54:43:EB:47:26
X509v3 Authority Key Identifier:
keyid:DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:cd:31:05:e6:ce:c2:4d:3e:32:f4:fc:e2:c4:f0:59:18:35:
d5:fb:d3:b5:a5:ec:57:83:36:a6:84:d2:bb:8f:e0:2e:9c:6e:
67:3e:f5:28:d8:63:be:bb:0e:8c:81:63:c5:c4:4e:6e:f0:6b:
78:61:03:28:2d:42:67:0e:87:e6:8b:65:54:ae:33:21:4d:cf:
39:7f:c5:82:2d:1d:e1:93:14:8d:48:f7:88:64:de:7f:27:87:
88:c3:48:87:3e:33:e9:fc:a9:2c:c9:9f:27:0f:d2:49:7c:40:
dc:ba:1a:22:85:d6:81:d6:ed:ae:9e:43:11:24:85:12:7b:53:
83:41:a3:e3:f8:40:43:ab:e3:05:0c:6c:b4:d6:45:1e:02:e1:
7d:be:8b:c6:fd:b9:66:2e:e5:fd:fd:30:5e:6f:b4:97:e1:37:
d3:2d:a6:83:a0:e4:fc:91:05:d8:81:74:9d:f4:0f:e9:cd:7d:
fb:5f:79:1b:7f:a8:dc:ca:0e:9a:52:fc:b2:05:53:7c:02:78:
43:49:c2:c6:eb:93:20:ee:3b:e1:57:14:88:76:20:a1:81:f6:
97:eb:f5:6a:b7:02:29:16:1e:13:a9:f3:72:94:5d:aa:bb:4f:
a7:6b:c4:ef:2d:8c:ab:63:54:eb:58:ef:fb:9f:2f:d1:24:5f:
d4:92:a0:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4JaKwmKg0FJY2kdGd4saMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmOTA0MTU1ZWUzYWNmZTNmZWE4YmJmZWU4NmU5N2M1OGM4
OTkxZjQwHhcNMjUwODIzMDMwMjI1WhcNMjUwODI0MDMwMjI1WjAzMTEwLwYDVQQD
EyhiM2QzMjRiY2Q0MTBkYmU3NmMzYWY5MTJmZDRhY2I1NDQzZWI0NzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6WgijA2o957omO45gio/V5bdcYm
GR7sm3eW0zfIIxYgx+frePdoPmzmMSZRhDLH4DdObknC3FXOatcfgJcrZ0T24gvu
DOlreqTsoQTUrAfyx0XCb96HwJHuos/zb2xfv1YySEMQ/gxI/+p2NdpFw6wAcCQQ
NrsFmlAyocxAq+WDoXSq9ZMMW8uDhXP+D4AphDqx6EQAD2wNVRi64OuP47qn6LpA
xMuVLOqPOgMoxxrKOPzOGqPSOqtmlGEylBCKgbqr/A2COECK3Do+l3K2nMch0VgA
nyNpUb+rvL4R7fXsa9o036Bp7KtfZ4OYaYnnZf5nvPiYBFWXfAr4jXmDrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPTJLzUENvnbDr5Ev1Ky1RD60cmMB8GA1UdIwQY
MBaAFN+QQVXuOs/j/qi7/uhul8WMiZH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzVCQlZlNDZ6LVAtcUx2LTZHNlh4WXlKa2ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS80NDJlMTctNDE5OC00MzViLTk2ZjQt
NjQ2N2Y0NGI0M2JmLzEvMzVCQlZlNDZ6LVAtcUx2LTZHNlh4WXlKa2ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS80NDJlMTctNDE5OC00MzViLTk2ZjQtNjQ2N2Y0NGI0M2Jm
LzEvMzVCQlZlNDZ6LVAtcUx2LTZHNlh4WXlKa2ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO80xBebO
wk0+MvT84sTwWRg11fvTtaXsV4M2poTSu4/gLpxuZz71KNhjvrsOjIFjxcRObvBr
eGEDKC1CZw6H5otlVK4zIU3POX/Fgi0d4ZMUjUj3iGTefyeHiMNIhz4z6fypLMmf
Jw/SSXxA3LoaIoXWgdbtrp5DESSFEntTg0Gj4/hAQ6vjBQxstNZFHgLhfb6Lxv25
Zi7l/f0wXm+0l+E30y2mg6Dk/JEF2IF0nfQP6c19+195G3+o3MoOmlL8sgVTfAJ4
Q0nCxuuTIO474VcUiHYgoYH2l+v1arcCKRYeE6nzcpRdqrtPp2vE7y2Mq2NU61jv
+58v0SRf1JKgfQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:36 2025 by rpki-client