
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
File: 32GikiI62a68itgsKlZHX72XqDQ.mft (raw, json)
Hash identifier: Tquj2Tyai4ptrUVodxtyBc3tKXWLPwbdyrMkOxoHtns=
Subject key identifier: 7B:3D:65:C5:65:A0:B0:99:83:1B:5A:0D:61:01:5F:17:94:D4:BF:FD
Authority key identifier: DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34
Certificate issuer: /CN=df61a292223ad9aebc8ad82c2a56475fbd97a834
Certificate serial: 0198D5BBC71F8B71F2D1B7052B5BBE898A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
Manifest number: 0CF8
Signing time: Sat 23 Aug 2025 07:01:49 +0000
Manifest this update: Sat 23 Aug 2025 07:01:49 +0000
Manifest next update: Sun 24 Aug 2025 07:01:49 +0000
Files and hashes: 1: 32GikiI62a68itgsKlZHX72XqDQ.crl (hash: cAeQZ87DVQ2jpqmGuKsUUet9K1Y4Bgd8K4FBd0p2ExM=)
2: DmQguxgVyJ_d0tpi3KUPtRcdGUQ.roa (hash: OiuAWrEvvfbOYm4huTJvJrvDJABO3FsTpYDNXs6sb+s=)
3: aI06tjVZeZrIS1TA5LHHtgH2TfE.roa (hash: LKF1KEnQy5/5rD4HRU7tZBGEwLV0sJ0zLyAcVF0BY1c=)
4: gCOrJJaf7HO535LCuEoI7vxf65A.roa (hash: 7Nbxw9zLeIaRzeX3DJv4MIaTHvVYcSTc1CbOKxR59lQ=)
5: k6eyynVladw6I8I9j1dsAe95OA8.roa (hash: A0AAtMX//zpiq0We38ivcj7YmnJWOeaOBnQnV51DCG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c7:1f:8b:71:f2:d1:b7:05:2b:5b:be:89:8a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df61a292223ad9aebc8ad82c2a56475fbd97a834
Validity
Not Before: Aug 23 07:01:49 2025 GMT
Not After : Aug 24 07:01:49 2025 GMT
Subject: CN=7b3d65c565a0b099831b5a0d61015f1794d4bffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d9:47:3f:fb:0b:dc:7b:e5:57:3b:26:80:87:
e6:4b:3f:63:ff:74:b8:03:40:21:47:2a:92:42:de:
31:e5:45:cb:a2:56:d2:38:39:b1:1d:f5:cd:5d:9f:
43:22:41:4a:8c:34:03:e1:df:74:12:e3:3d:4a:02:
f5:81:e8:7b:9d:6c:29:89:8c:4d:e0:5a:86:d4:d1:
80:f4:37:95:7c:92:38:1a:02:fe:2c:86:cf:77:a0:
12:0d:f2:74:81:5b:1e:d3:36:9a:5b:26:7b:50:f1:
36:c4:6e:f9:54:6a:f9:55:ad:54:e1:e9:d6:74:91:
91:dc:c1:72:98:33:a7:2a:2e:e7:eb:3c:c1:4f:d9:
73:4a:03:3e:32:70:c5:40:d4:6d:aa:22:3f:e6:43:
d5:ae:bb:56:f8:54:83:93:c9:cd:73:47:67:5a:d3:
60:71:ae:ba:b2:bc:82:c2:fa:93:b7:2b:a3:f9:b5:
14:f7:ac:48:fe:08:bb:79:7c:66:1e:5f:26:66:3b:
b9:fa:07:0d:55:db:25:08:62:d2:61:79:33:05:46:
63:a8:c9:f5:6e:ae:20:d2:c0:a5:5b:3d:8a:c3:6d:
44:f3:6d:08:3a:55:7a:5d:7b:1d:4d:6b:99:fa:0b:
0c:16:8e:8f:91:da:86:cb:c7:1b:d4:5e:8c:5c:ff:
6c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:3D:65:C5:65:A0:B0:99:83:1B:5A:0D:61:01:5F:17:94:D4:BF:FD
X509v3 Authority Key Identifier:
keyid:DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:31:73:b3:63:bd:10:24:49:03:9e:f4:34:22:30:0b:bd:22:
93:7b:bf:42:80:31:3c:b0:b6:4d:ae:8b:68:da:09:b6:c7:62:
e3:84:7e:24:05:55:de:2b:7c:1d:51:32:e3:e3:ba:cf:23:c8:
53:73:38:d8:29:de:20:ca:5a:15:b8:bb:d1:ef:f3:43:d4:ef:
e6:16:9d:52:3e:5a:4a:26:1c:4f:ae:f1:9b:48:a6:84:9a:2a:
ef:f4:17:06:f8:6c:9e:f1:f8:ab:58:99:56:66:3b:09:b5:c6:
f8:7a:c3:09:ab:c3:84:95:86:0e:d1:22:9c:78:b9:d5:79:0d:
f4:54:4b:42:80:64:bd:65:41:25:c1:b5:86:6c:83:09:94:ae:
4e:07:a3:c1:73:cf:7d:8e:16:f6:09:84:64:3f:1c:c5:3a:11:
3c:a1:08:1a:43:ad:18:3e:d8:77:38:d1:06:10:4d:b6:d0:d5:
ce:67:34:8d:7e:84:83:51:66:b8:7c:32:ae:b6:d2:08:a7:f4:
e6:3d:36:25:39:33:09:63:6a:f6:a2:18:a8:2e:b5:1d:77:47:
29:26:dc:83:23:f7:0b:c5:eb:bd:1d:41:00:f2:d1:21:26:30:
c4:5e:ea:ac:f7:62:71:4c:09:91:dd:08:ac:f5:8b:e6:2a:ab:
6e:24:6a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:30 2025 by rpki-client