Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.mft
File: 35ACA6262E13FCF885902051522BBE65379AE61D.mft (raw, json)
Hash identifier: uFFRQxmFaxfMA5Hk0S5jYpUQVC2cHXqSIEX/ose8fMs=
Subject key identifier: C7:D4:E7:CC:78:A0:AF:3E:88:64:31:ED:37:6A:58:11:E9:18:38:27
Authority key identifier: 35:AC:A6:26:2E:13:FC:F8:85:90:20:51:52:2B:BE:65:37:9A:E6:1D
Certificate issuer: /CN=35aca6262e13fcf885902051522bbe65379ae61d
Certificate serial: 56908A498A15123B48B7DFAD9C7E1A1BFDC96C84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaymJi4T_PiFkCBRUiu-ZTea5h0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.mft
Manifest number: 67
Signing time: Sat 28 Jun 2025 09:51:07 +0000
Manifest this update: Sat 28 Jun 2025 09:46:07 +0000
Manifest next update: Sun 29 Jun 2025 13:39:07 +0000
Files and hashes: 1: 35ACA6262E13FCF885902051522BBE65379AE61D.crl (hash: RjT5aXc4/km3+8ebs4HyUPw8P93wngpHNaOLBGE52Us=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.crl
rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.mft
rsync://rpki.ripe.net/repository/DEFAULT/NaymJi4T_PiFkCBRUiu-ZTea5h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:39:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:90:8a:49:8a:15:12:3b:48:b7:df:ad:9c:7e:1a:1b:fd:c9:6c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35aca6262e13fcf885902051522bbe65379ae61d
Validity
Not Before: Jun 28 09:46:07 2025 GMT
Not After : Jun 29 13:39:07 2025 GMT
Subject: CN=C7D4E7CC78A0AF3E886431ED376A5811E9183827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f3:50:e0:ea:ab:2c:e4:86:c1:f5:9e:35:fd:
96:61:e6:85:36:27:9b:d0:d3:be:d1:05:8d:cb:fb:
fb:0f:55:e9:38:5f:15:02:d2:a1:01:e3:01:02:b9:
5a:af:7c:7c:50:5b:90:7e:1c:d4:f6:d9:44:9b:bc:
48:2b:99:2e:21:0d:62:68:ca:1e:76:d0:6c:c8:68:
1d:ed:8c:ed:7a:3c:d5:64:7c:2b:27:66:64:5a:30:
fb:45:f6:40:dd:27:8a:18:73:80:49:f7:4f:d6:ee:
fe:3c:6e:6a:79:3c:f3:e6:7f:cc:0f:6b:0d:6a:18:
69:fd:02:b8:80:d8:a3:7d:72:5d:43:88:c2:74:73:
cd:3a:eb:61:ce:ea:d9:59:0c:d0:6d:87:44:47:6c:
dd:6e:e4:bd:b1:1f:73:0f:f6:47:16:8f:24:64:c6:
f4:fe:f2:e7:f3:41:3e:1c:0b:d7:87:e0:74:c4:2e:
c1:4b:56:ef:df:6d:75:a5:3b:24:67:8b:4e:fd:01:
97:1e:97:b0:46:a6:21:cf:f3:8c:74:52:9c:40:b3:
72:48:4d:69:45:06:09:00:ec:d6:d2:8f:18:21:cd:
0c:44:ae:d0:4c:e5:1f:b8:65:c3:b7:c9:da:39:9d:
2f:bf:2d:33:73:6d:60:ab:82:97:3a:00:29:3a:62:
a0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D4:E7:CC:78:A0:AF:3E:88:64:31:ED:37:6A:58:11:E9:18:38:27
X509v3 Authority Key Identifier:
keyid:35:AC:A6:26:2E:13:FC:F8:85:90:20:51:52:2B:BE:65:37:9A:E6:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaymJi4T_PiFkCBRUiu-ZTea5h0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:bc:9a:f7:d6:d6:b6:9d:38:eb:31:9f:39:8d:12:4a:cf:1d:
0e:00:84:93:ca:e9:9d:34:05:0f:a4:09:74:55:8d:18:b2:dd:
aa:88:f3:d4:c5:8a:dc:c6:cc:1f:f3:f2:dd:e9:fd:a5:27:d7:
2a:9a:90:26:4c:d4:cb:16:3c:1d:21:2b:d6:18:6d:ed:40:5a:
69:71:8c:02:13:1d:64:0c:03:cf:10:a3:d5:74:95:26:d4:2b:
e6:78:f1:3c:98:a8:79:a1:e6:5a:f9:93:96:51:4a:06:6e:c1:
6a:bd:66:00:90:a4:f5:31:e6:88:9c:98:01:4d:bf:72:e8:77:
4b:42:66:f9:a5:ad:2b:d5:92:dd:31:73:f9:7c:91:6b:d4:59:
8a:22:50:28:66:51:40:6c:02:eb:9c:6b:33:52:fe:f6:36:78:
90:99:a4:73:d9:67:49:30:6e:bd:60:f7:a0:c2:2d:d0:13:1e:
7f:c6:bd:01:5c:be:77:07:a3:5b:02:d8:02:a6:75:01:38:46:
5f:03:93:02:fe:e6:9e:a4:53:00:e3:e1:fb:76:16:e7:b1:6b:
eb:70:f4:fa:4a:d7:96:9e:f1:cc:73:76:97:d1:3f:f2:73:aa:
d1:96:f1:b7:96:61:a5:f6:8d:28:32:ce:0b:30:92:ec:68:12:
6e:56:0d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:36:04 2025 by rpki-client