Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
File: _32KebrU-YPQxJiVr1DqigPrxw0.mft (raw, json)
Hash identifier: jLoMt8q68YuAgTBvBSRYpaeVmQ0Z7wWgeW3UEueYiRM=
Subject key identifier: C6:93:14:AE:E2:DC:02:60:CD:2E:20:53:92:25:6F:D1:2E:15:84:EA
Authority key identifier: FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
Certificate issuer: /CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Certificate serial: 0198D583668F718CA3D05D0C2A6F309C2EA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
Manifest number: 0CF9
Signing time: Sat 23 Aug 2025 06:00:15 +0000
Manifest this update: Sat 23 Aug 2025 06:00:15 +0000
Manifest next update: Sun 24 Aug 2025 06:00:15 +0000
Files and hashes: 1: 2fxk-csv6V5rX-CMe_DFR8a4JVM.roa (hash: aLAVdijVROuQTvAqCbXuXEZ8OKPl15hM/XdRngnEREE=)
2: 8LrCpJVZw00cB6v7Jxmu5danMVM.roa (hash: LkYRg4fRX+WYVMtQ+HSrUSifp72hGXmKbB4Mx1yLYEo=)
3: EEy6gJAmhpmEpToeahyxI211nao.roa (hash: bt34cvtSMhR5oe2u5pXbiTmmRNH/yvwh2lEhx2KoETw=)
4: _32KebrU-YPQxJiVr1DqigPrxw0.crl (hash: 95sa/HOJClKIJZWrTDkVFHFeX2QhYuSmKBtwl/4PIXw=)
5: is_2p9c72i9SqdHOdQECHoEj2KI.roa (hash: 68Pbkuya3pT0PDgvbPhuXTcECYTodGaR9wl/fj5QS8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:66:8f:71:8c:a3:d0:5d:0c:2a:6f:30:9c:2e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Validity
Not Before: Aug 23 06:00:15 2025 GMT
Not After : Aug 24 06:00:15 2025 GMT
Subject: CN=c69314aee2dc0260cd2e205392256fd12e1584ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9f:a7:fa:f7:3a:1e:62:30:40:b7:f3:66:c0:
ae:f3:b5:90:a9:d6:90:4d:c5:15:3d:95:92:12:b3:
0d:cf:5a:cf:3f:66:fd:0e:d6:7d:3d:7e:d0:09:0d:
52:f7:95:4b:95:1a:3d:fb:13:cc:55:86:41:d8:5f:
04:d6:35:7c:ac:dd:2d:54:9f:d2:5e:ac:f1:c9:a7:
bd:8b:c1:5a:15:26:8c:dc:e7:fb:a2:c8:f0:1c:a5:
73:81:7f:db:47:38:80:2f:03:49:d4:bf:d9:f4:4c:
21:cf:ef:cf:98:22:cb:a3:9f:a1:e4:a2:02:b8:e7:
2c:c6:3e:49:8f:dc:ac:ab:d3:84:d3:ab:9b:ee:c5:
33:05:ad:f2:c1:ee:79:5b:65:65:e8:d9:fa:72:7c:
de:ea:70:65:c3:58:b4:c0:87:d9:50:dc:e1:17:2e:
fc:2f:36:83:5f:83:65:72:32:77:1a:8c:84:f2:40:
26:31:d1:3e:11:d4:8b:af:dc:78:b1:32:70:d9:da:
c2:49:6c:e1:3d:8f:0b:d6:a5:57:6c:25:15:4e:45:
e4:0e:80:fc:ec:50:58:ed:15:18:be:21:1b:66:72:
15:f9:41:9f:d5:a6:d4:32:ba:37:a9:7a:df:06:fa:
ae:25:a1:af:a2:91:10:a2:26:8d:e1:41:fa:d5:83:
f8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:93:14:AE:E2:DC:02:60:CD:2E:20:53:92:25:6F:D1:2E:15:84:EA
X509v3 Authority Key Identifier:
keyid:FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c2:92:4f:7e:57:06:f3:7a:bf:43:ef:c3:93:df:3c:60:3a:
c3:88:0f:83:bc:e8:81:9d:ed:32:a7:5b:88:43:36:da:94:c3:
d1:a8:9c:22:ad:11:a3:67:dc:52:56:61:0e:2b:24:da:57:35:
fe:9b:f1:f7:7d:4f:b5:f4:c1:28:5b:09:f7:af:85:fa:26:5d:
80:00:67:60:3a:5c:4d:9e:f8:87:ee:74:dd:9b:de:4f:ca:a4:
e8:7e:61:d2:34:8b:2b:56:ad:71:46:4f:30:d1:ff:34:3e:79:
e7:42:62:04:39:e4:e7:0f:26:5c:c2:48:55:f4:9f:4a:d6:48:
cd:92:8e:9a:ce:31:3e:79:87:9e:1d:a2:d1:4d:7f:2a:29:3a:
e0:2b:ae:bd:bc:a1:e4:b5:4f:08:52:84:48:7f:0e:2d:6f:62:
01:b1:6b:02:9d:ca:c8:ce:09:08:f8:be:01:06:51:4e:3e:d1:
60:32:9f:f1:c6:90:5f:4e:63:ca:e0:46:b8:63:f6:4c:2c:63:
8e:c1:13:0a:59:27:33:cc:29:f7:c0:e9:d2:1c:32:87:1c:06:
aa:d6:08:db:ca:4d:e1:b3:9d:be:fd:2a:99:c5:ba:44:b9:9a:
f4:d9:f8:63:ca:38:46:a0:78:ce:23:a9:8b:5f:1c:62:26:ac:
78:e3:be:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:35 2025 by rpki-client