Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
File: _32KebrU-YPQxJiVr1DqigPrxw0.mft (raw, json)
Hash identifier: tfJga8Ubh77myspnR+8RQA3NFLZxA/R+Cm8CiEmPPSY=
Subject key identifier: 0F:FB:95:DC:91:73:7F:1F:F3:C5:0C:17:B8:6B:73:21:54:34:28:8E
Authority key identifier: FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
Certificate issuer: /CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Certificate serial: 0199FC58878C82058E26453FEA159006F5BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
Manifest number: 0D92
Signing time: Sun 19 Oct 2025 12:01:24 +0000
Manifest this update: Sun 19 Oct 2025 12:01:24 +0000
Manifest next update: Mon 20 Oct 2025 12:01:24 +0000
Files and hashes: 1: 8LrCpJVZw00cB6v7Jxmu5danMVM.roa (hash: LkYRg4fRX+WYVMtQ+HSrUSifp72hGXmKbB4Mx1yLYEo=)
2: COurHBmKxKzA2XaP35V0TKv22j8.roa (hash: mOJRDgA4eGDtP6pug7iu4FVIpAjMDZJckmCB6cKfpOc=)
3: EEy6gJAmhpmEpToeahyxI211nao.roa (hash: bt34cvtSMhR5oe2u5pXbiTmmRNH/yvwh2lEhx2KoETw=)
4: _32KebrU-YPQxJiVr1DqigPrxw0.crl (hash: 7OF879mLlRmdorb2HAuoCxrBEBrL7DjpmNFJBI16Lio=)
5: is_2p9c72i9SqdHOdQECHoEj2KI.roa (hash: 68Pbkuya3pT0PDgvbPhuXTcECYTodGaR9wl/fj5QS8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:87:8c:82:05:8e:26:45:3f:ea:15:90:06:f5:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Validity
Not Before: Oct 19 12:01:24 2025 GMT
Not After : Oct 20 12:01:24 2025 GMT
Subject: CN=0ffb95dc91737f1ff3c50c17b86b73215434288e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2d:49:57:bb:b9:0f:39:f8:72:5e:e2:b0:6c:
9a:70:49:6d:29:b3:e1:02:17:fc:0e:9d:d6:bf:58:
d5:a6:ef:41:e4:ce:00:8a:cf:4e:c3:2c:54:7c:5e:
ef:90:86:be:12:40:ee:df:f0:97:79:46:d7:8a:8d:
e2:96:c1:76:d2:1c:9b:03:c9:ee:71:64:30:8e:b5:
cb:f1:a2:5c:94:6a:28:d8:7b:14:ec:39:76:cc:7a:
91:0f:1e:b9:b3:99:2d:c9:47:a8:25:8b:7c:ec:3c:
5d:5e:1f:dd:74:17:35:cd:11:44:82:df:75:32:21:
4c:0b:e1:fe:53:12:73:35:cb:72:6b:2c:f6:03:fa:
f8:ee:27:1e:15:ef:85:d2:14:54:90:21:a9:56:bf:
21:36:5f:9e:16:3d:87:ce:e3:02:cc:c8:a6:32:a9:
1a:ee:89:87:fc:b6:c5:89:af:96:5d:d6:7e:be:29:
e1:27:c5:e9:ce:42:dc:09:db:9f:c7:a9:9b:aa:6f:
57:4d:f0:e9:72:f3:09:af:d0:21:57:73:9f:af:bf:
15:32:15:e8:4e:bf:17:11:fa:c9:4a:cc:76:db:da:
97:63:49:87:76:c0:b5:2b:fc:74:62:d2:24:78:de:
bd:e7:9d:0b:e2:e6:09:57:9e:8e:5c:1f:2c:8b:9f:
7d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:FB:95:DC:91:73:7F:1F:F3:C5:0C:17:B8:6B:73:21:54:34:28:8E
X509v3 Authority Key Identifier:
keyid:FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:72:62:cb:82:86:41:7d:76:3d:ab:02:60:0e:c5:0b:e0:21:
05:7e:68:04:b0:22:fb:ab:67:00:cc:e3:47:10:db:e9:a3:b5:
38:26:33:d2:3a:78:0b:41:8e:5e:64:76:b1:7c:9c:1e:cd:4a:
91:7b:5d:d0:ac:c2:88:cc:39:6a:3e:0d:64:97:ed:7d:d3:bf:
00:7b:fa:1b:58:d1:d4:af:a1:29:29:58:44:82:99:77:3e:27:
28:51:2e:5b:f1:72:f1:87:05:55:4e:d4:2a:eb:3d:99:a8:21:
16:56:24:b2:36:45:7e:1f:e7:20:91:4e:f5:77:2d:13:e9:32:
0d:3b:7f:23:59:d5:f4:1e:9a:78:03:06:c1:d0:65:d2:a1:6b:
a1:2e:32:bb:c9:38:df:91:09:e6:f6:eb:3b:6b:69:36:02:d3:
c4:e3:0a:3a:bf:c5:b4:0a:74:82:4f:c3:ca:c0:24:32:07:66:
b7:46:17:71:b9:c0:4e:f9:b1:32:5b:5a:0d:7a:a0:db:b9:00:
8a:d8:cb:f5:12:12:7f:26:90:4d:b8:0e:c1:88:69:72:0a:b1:
0e:d7:83:f7:8c:49:4b:8e:33:a3:9e:06:e4:3a:c3:f1:9a:23:
ba:bb:57:1e:71:f5:9a:44:7a:99:1b:21:7c:18:39:cd:85:f1:
20:50:c4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:40:51 2025 by rpki-client