Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.mft
File: 35ACA6262E13FCF885902051522BBE65379AE61D.mft (raw, json)
Hash identifier: IXxVJdR50LXSX8TO5JMpp+1YsllpUJY/KjMyNnA+I6k=
Subject key identifier: F4:4B:CF:6B:30:7C:FD:B3:01:0F:D1:09:F0:96:88:99:F9:13:84:5B
Authority key identifier: 35:AC:A6:26:2E:13:FC:F8:85:90:20:51:52:2B:BE:65:37:9A:E6:1D
Certificate issuer: /CN=35aca6262e13fcf885902051522bbe65379ae61d
Certificate serial: 434E85A06CCC30C413CFEFE8FA4B94120FCF8852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaymJi4T_PiFkCBRUiu-ZTea5h0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.mft
Manifest number: F8
Signing time: Sun 19 Oct 2025 13:42:14 +0000
Manifest this update: Sun 19 Oct 2025 13:37:14 +0000
Manifest next update: Mon 20 Oct 2025 15:53:14 +0000
Files and hashes: 1: 35ACA6262E13FCF885902051522BBE65379AE61D.crl (hash: leOi7wEZ2/9d3yF0fuHcqVwcVa6rbURmD/qEmZY6+JU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.crl
rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.mft
rsync://rpki.ripe.net/repository/DEFAULT/NaymJi4T_PiFkCBRUiu-ZTea5h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:4e:85:a0:6c:cc:30:c4:13:cf:ef:e8:fa:4b:94:12:0f:cf:88:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35aca6262e13fcf885902051522bbe65379ae61d
Validity
Not Before: Oct 19 13:37:14 2025 GMT
Not After : Oct 20 15:53:14 2025 GMT
Subject: CN=F44BCF6B307CFDB3010FD109F0968899F913845B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cc:92:22:75:99:a0:fe:91:82:1a:e7:aa:af:
21:d2:fd:21:24:f0:e3:5f:31:12:e3:2b:11:8b:aa:
2b:4e:44:87:5f:b5:37:44:3c:c8:2a:1e:ec:da:c2:
aa:a7:97:c6:3d:19:d6:43:f4:ba:f9:66:df:25:ff:
fa:f0:30:3a:a6:d8:64:b5:48:89:6c:7b:03:73:2d:
cd:a5:af:39:c1:98:dd:b8:c7:1f:9b:f4:e0:ed:9b:
27:94:a1:cd:61:42:8e:40:08:42:ce:81:9b:37:f8:
f5:f3:a3:13:e0:57:1d:ae:c4:1e:50:22:a5:c1:d9:
f1:69:db:24:87:53:f3:54:46:dc:cb:cc:93:82:1d:
f8:41:99:e8:46:c6:5c:30:fb:dd:b8:f7:80:26:dc:
98:d9:4f:00:d7:af:6d:24:a0:ae:66:b3:a5:44:ff:
f7:34:94:6f:d4:f3:71:64:32:88:24:9c:bb:e8:a7:
c2:9b:a1:80:6b:e1:81:01:8c:9e:52:0f:2d:7c:23:
a2:4d:ef:d8:24:43:12:03:d7:81:c0:a4:f7:f7:b1:
cc:12:98:8f:08:21:67:ff:f2:1c:78:18:bf:31:ab:
5e:c0:7f:91:73:de:94:0d:ac:cf:57:17:82:ac:6a:
80:03:10:a4:c1:c6:5a:91:50:b3:cd:7d:b0:de:da:
1c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4B:CF:6B:30:7C:FD:B3:01:0F:D1:09:F0:96:88:99:F9:13:84:5B
X509v3 Authority Key Identifier:
keyid:35:AC:A6:26:2E:13:FC:F8:85:90:20:51:52:2B:BE:65:37:9A:E6:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaymJi4T_PiFkCBRUiu-ZTea5h0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:6f:29:34:cb:40:a2:13:ca:ac:21:05:99:c5:88:56:90:f6:
8c:83:9a:49:25:a3:9f:33:b0:73:e0:94:2c:3a:cd:91:b4:1b:
b1:81:7e:79:61:7a:23:58:5f:cf:63:ed:a8:bb:b8:9b:19:ba:
c6:ee:95:5c:39:f2:0d:e3:ef:7d:99:9e:be:01:32:68:7f:0f:
41:3b:e9:9e:b1:bf:b5:d0:f1:a9:03:17:b1:0c:e0:f3:b0:33:
53:40:22:42:4b:0b:34:05:7f:55:53:4b:d4:ba:db:5f:80:83:
18:0a:cd:b2:48:ab:32:cc:1c:b6:d1:8d:b9:74:d2:09:78:15:
97:18:c8:b7:98:22:13:60:d3:69:52:d0:83:24:89:c5:a8:6c:
c8:7f:40:fd:84:74:0f:f4:5c:2a:29:d4:21:a0:1d:44:c0:77:
e8:c4:38:65:17:98:b3:1b:b0:b3:0d:33:f2:3b:1b:77:6c:cb:
68:c3:27:c2:8a:d6:11:80:2a:a2:58:c5:f5:3b:56:5f:ad:e5:
a8:64:6e:e6:2c:d4:0f:2e:77:b0:78:37:23:37:00:a6:d8:b8:
08:59:c0:a5:c0:1d:e6:4c:c3:cc:01:d2:9d:96:12:b8:a4:63:
6d:b3:83:16:cc:4c:a8:ce:4e:15:5f:85:65:52:67:0c:37:da:
9c:94:e4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:11:29 2025 by rpki-client