Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
File: 32K78V3jRKzbX3gARQ8sgteX15g.mft (raw, json)
Hash identifier: 51tatpW5VHPDT3/wyNFx9J7zVf3eVCzL5b1fJELVRBY=
Subject key identifier: 7A:63:FD:83:89:C6:D3:B3:E5:4A:27:AC:71:2F:87:1F:81:DC:F5:19
Authority key identifier: DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
Certificate issuer: /CN=df62bbf15de344acdb5f7800450f2c82d797d798
Certificate serial: 0198D54DE2C2458326DA64A86D452BD5B4D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
Manifest number: 0CDC
Signing time: Sat 23 Aug 2025 05:01:47 +0000
Manifest this update: Sat 23 Aug 2025 05:01:47 +0000
Manifest next update: Sun 24 Aug 2025 05:01:47 +0000
Files and hashes: 1: 32K78V3jRKzbX3gARQ8sgteX15g.crl (hash: Ik3VC24boQqYrSf7j53gZPrGeJtu8HKAK3W+atDXNG0=)
2: oOmlEIPuZj-euGQgaSJSIdcSgws.roa (hash: 4HVEBIShSrKuBB15YN2IPkpfbl2tZhoTqa30YNiE+ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:e2:c2:45:83:26:da:64:a8:6d:45:2b:d5:b4:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df62bbf15de344acdb5f7800450f2c82d797d798
Validity
Not Before: Aug 23 05:01:47 2025 GMT
Not After : Aug 24 05:01:47 2025 GMT
Subject: CN=7a63fd8389c6d3b3e54a27ac712f871f81dcf519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c8:8a:f4:48:d9:8e:d1:5d:d3:42:86:59:89:
f4:2f:58:fb:1d:67:20:47:2d:69:a8:d5:43:99:b8:
19:0d:9b:90:4b:58:fe:d5:85:48:7d:e5:ad:76:e9:
3e:ff:c3:e4:7c:55:a9:fe:44:17:45:77:82:e9:82:
dd:62:8d:87:90:dc:a2:82:7c:e3:39:ef:88:4a:4e:
6e:0c:ec:e0:82:74:3f:92:d9:f8:4c:f7:86:b5:ee:
52:53:cf:f3:d3:a9:47:a4:8a:2e:69:63:7e:8b:b6:
32:30:34:61:1a:0c:a1:6c:4c:57:9c:63:09:43:72:
45:07:1c:70:66:84:93:0a:f2:00:3a:12:70:0d:63:
7e:fa:b5:19:13:84:7e:35:05:6d:14:da:8e:a3:d2:
9d:0d:8f:d5:2d:7d:7b:4b:da:67:ab:51:60:0a:b4:
c8:58:f7:1d:46:aa:49:bb:29:fd:85:a1:22:1e:ff:
71:d7:90:3e:22:46:ca:42:f3:5b:6c:72:8e:6e:9e:
8c:b0:d9:4e:2c:94:cd:34:07:f7:d3:cc:97:cc:73:
a2:01:4b:11:cb:06:f5:92:c8:81:5c:9e:75:ea:12:
9d:ff:a9:ce:02:77:84:f2:47:a1:49:f1:3e:64:15:
66:8b:5e:b2:9f:8f:fc:78:8f:bd:26:78:be:4b:3b:
50:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:63:FD:83:89:C6:D3:B3:E5:4A:27:AC:71:2F:87:1F:81:DC:F5:19
X509v3 Authority Key Identifier:
keyid:DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:94:cf:f6:e1:a0:8e:4f:57:e0:b0:d6:9d:5e:0e:63:71:54:
29:e9:1c:f3:0b:11:8b:aa:c3:7b:d3:0f:b6:55:3a:88:ce:72:
30:8f:ed:96:50:b4:f1:08:2d:d4:09:25:93:2d:6a:b5:3d:31:
9d:9d:43:9c:40:6d:36:1a:46:59:69:a6:71:99:5d:39:8e:7d:
e5:2e:69:4b:7e:c7:23:ee:1e:ad:2c:73:28:07:24:0f:3b:d5:
ce:ec:b3:ac:47:56:87:14:47:be:f2:d1:a7:6e:01:fd:aa:e8:
29:86:27:fd:5a:ab:5e:29:c8:c4:9b:90:75:b5:b9:45:65:59:
9a:b0:7e:61:8e:fe:11:bf:f5:bf:b0:fb:86:9f:5e:d4:d4:82:
cd:6b:63:3d:2c:14:63:f4:31:3c:b2:09:0b:51:da:3d:f9:8f:
ea:c2:63:b7:ab:af:42:9c:39:1e:72:03:67:7b:66:11:5f:58:
a9:ea:1a:ee:20:68:d3:27:f2:d5:4b:45:46:44:53:eb:dc:f0:
a3:49:a3:c3:3f:f6:3c:02:2e:8d:2f:65:68:6d:a9:d7:cf:0c:
5f:e1:78:c6:5b:25:7c:c5:89:1b:71:76:25:c7:e9:a5:3d:40:
8e:1b:39:72:ff:21:78:c8:2f:9d:68:5b:d3:48:c6:5c:b6:31:
eb:ac:32:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:11 2025 by rpki-client