Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.mft
File: 35ACA6262E13FCF885902051522BBE65379AE61D.mft (raw, json)
Hash identifier: Y0H2JhFJJyAlnqOJH5vHdBYq6x8ATmzsl9lzQvShwao=
Subject key identifier: 79:A6:CA:58:AC:F0:0B:C6:0D:96:CC:4E:16:D5:34:44:42:66:67:2E
Authority key identifier: 35:AC:A6:26:2E:13:FC:F8:85:90:20:51:52:2B:BE:65:37:9A:E6:1D
Certificate issuer: /CN=35aca6262e13fcf885902051522bbe65379ae61d
Certificate serial: 168C527294CEC8F1A71E0CE1E6C92AC3F51FAFA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaymJi4T_PiFkCBRUiu-ZTea5h0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.mft
Manifest number: 23
Signing time: Thu 08 May 2025 10:54:40 +0000
Manifest this update: Thu 08 May 2025 10:49:40 +0000
Manifest next update: Fri 09 May 2025 13:58:40 +0000
Files and hashes: 1: 35ACA6262E13FCF885902051522BBE65379AE61D.crl (hash: 8pfMJc0w/nVwD+K/hfRx5PkD2YUlGr1lqhHRd6fMeiQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.crl
rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.mft
rsync://rpki.ripe.net/repository/DEFAULT/NaymJi4T_PiFkCBRUiu-ZTea5h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 13:58:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:8c:52:72:94:ce:c8:f1:a7:1e:0c:e1:e6:c9:2a:c3:f5:1f:af:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35aca6262e13fcf885902051522bbe65379ae61d
Validity
Not Before: May 8 10:49:40 2025 GMT
Not After : May 9 13:58:40 2025 GMT
Subject: CN=79A6CA58ACF00BC60D96CC4E16D534444266672E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f2:98:41:09:af:cf:04:2a:04:dd:df:93:5a:
8c:ef:52:19:84:9d:25:f8:f3:39:14:49:6e:79:3c:
ac:9d:0f:6a:18:09:6a:66:b2:82:5b:a9:70:d8:9d:
51:e4:06:cd:52:cc:49:d7:5a:50:32:6c:af:ac:91:
f3:53:a5:dd:6c:b2:93:06:23:e7:cf:17:dd:b9:32:
25:29:3d:ce:2e:17:f9:b4:da:1b:db:92:1d:7e:8c:
38:ce:f8:2b:40:6e:25:4a:4f:bd:3d:3f:52:3b:e8:
f7:fe:52:a0:43:71:9a:6a:03:9c:78:4c:7c:db:e9:
c9:2f:21:99:ee:23:9b:bd:d5:ad:ca:55:03:a5:f1:
8f:96:f4:b3:17:ad:cf:95:3a:09:16:a6:c2:ea:29:
5d:85:b1:f1:30:91:1b:b7:20:c6:25:fc:64:28:a0:
cc:e0:50:60:46:0b:22:90:33:72:b3:98:f1:f2:8d:
bc:a3:79:4d:ae:4f:8e:ab:48:d7:75:a2:ac:08:6e:
f7:a5:a4:65:31:0d:8d:a5:87:a5:76:d4:a6:90:80:
fa:38:26:d3:35:57:65:25:6f:2d:2f:42:c7:5a:e8:
eb:60:a0:24:29:82:3a:83:39:bc:07:2a:27:7d:98:
26:71:cf:c0:7b:9e:11:e6:56:6d:9e:45:57:fa:84:
80:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A6:CA:58:AC:F0:0B:C6:0D:96:CC:4E:16:D5:34:44:42:66:67:2E
X509v3 Authority Key Identifier:
keyid:35:AC:A6:26:2E:13:FC:F8:85:90:20:51:52:2B:BE:65:37:9A:E6:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaymJi4T_PiFkCBRUiu-ZTea5h0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:59:76:3f:11:c2:45:6e:44:cd:2a:99:cd:da:82:2e:b6:3a:
8e:37:e7:b6:c4:75:bf:22:16:9e:5e:9c:d2:be:04:7b:15:4f:
a8:c6:24:f9:a7:15:2e:e9:bb:cc:ef:f5:04:ba:c3:bb:a6:90:
33:8c:2d:27:e2:63:79:d3:aa:49:df:67:4d:fd:5c:29:88:4b:
71:76:f1:96:6e:bd:0a:72:d2:2f:ed:49:a4:b9:b0:ca:a8:9a:
97:fb:10:97:14:e4:65:b1:32:58:9a:b4:e0:6c:70:e3:e0:17:
62:47:3f:29:9a:38:f3:3d:f6:21:4f:14:1a:d1:37:a7:f4:28:
27:ff:09:fd:e0:a7:55:ca:11:83:12:99:07:4a:12:ea:94:90:
0a:b3:ce:d8:c9:b6:a1:e6:32:b2:2e:d0:1a:f6:33:cb:4c:2a:
ae:de:5d:a4:6d:33:6c:0a:2f:5a:a9:a8:0a:e5:b7:a8:24:1a:
fd:eb:d0:66:b7:51:24:d6:0f:f7:bd:78:16:6f:d6:7e:3a:08:
1f:42:68:59:08:40:a1:6d:be:99:0b:41:4b:16:23:b9:41:9d:
2e:75:72:f3:69:dc:3f:ed:7e:bf:ac:78:29:a3:48:8a:d2:06:
a0:35:b0:82:51:f4:f9:bd:43:d9:90:56:89:df:31:ff:9f:65:
cf:c4:3e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 18:57:53 2025 by rpki-client