Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
File: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft (raw, json)
Hash identifier: Xotd4ETHIiuzxPU2AruFJacDnFyAjeO5PSG/eEDOW2Q=
Subject key identifier: 25:5D:B5:12:00:8B:69:91:04:4E:2C:4E:5A:9B:9C:30:F7:24:4C:67
Authority key identifier: DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
Certificate issuer: /CN=df6a9267b18b36d828890a86387f310b84c04b63
Certificate serial: 0199FBEC298D396890ACE8E67E20BFEE9FC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
Manifest number: 0E7B
Signing time: Sun 19 Oct 2025 10:03:02 +0000
Manifest this update: Sun 19 Oct 2025 10:03:02 +0000
Manifest next update: Mon 20 Oct 2025 10:03:02 +0000
Files and hashes: 1: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl (hash: Zv7kxO4ouBapbtfx+z1XemULdlMT1zMqeCtr+Skj3ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:29:8d:39:68:90:ac:e8:e6:7e:20:bf:ee:9f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6a9267b18b36d828890a86387f310b84c04b63
Validity
Not Before: Oct 19 10:03:02 2025 GMT
Not After : Oct 20 10:03:02 2025 GMT
Subject: CN=255db512008b6991044e2c4e5a9b9c30f7244c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:93:5d:f0:b4:17:fc:99:81:a3:d2:c0:1f:3d:
b0:1e:af:a6:8d:0f:32:26:e4:34:97:06:1b:46:81:
e4:03:bb:cd:9f:74:17:2e:03:97:a6:d7:e8:6d:a3:
96:5e:c5:0a:8d:4e:e0:e3:cd:8e:48:2a:af:82:a1:
cf:78:a7:5d:76:01:54:a3:07:26:ad:40:cd:bc:cd:
58:f2:a8:d4:8b:88:b9:3b:47:82:ab:1b:77:67:19:
39:48:90:85:1d:7d:8c:0d:a7:71:46:64:45:8b:93:
7f:72:bb:97:be:7e:e8:5a:6a:01:0e:26:73:e5:35:
5d:61:e3:74:d8:9a:be:ca:a8:39:66:31:28:ff:ca:
11:b7:71:91:2d:96:12:89:0c:0a:95:4a:bf:e8:10:
6c:6c:27:a4:7c:3a:e4:06:c5:ab:07:a6:60:ec:e9:
d1:d8:c7:01:03:32:f1:f8:b4:0f:a6:00:9c:8a:ad:
c8:75:67:72:e9:17:ea:30:07:0a:84:e1:33:98:99:
90:79:66:10:43:0a:15:f8:8c:98:e5:a7:47:cf:54:
47:f5:c0:9b:41:21:c3:d3:59:e9:70:73:30:72:ed:
bc:06:de:fc:6a:b1:aa:25:cc:a6:7c:67:5a:77:b3:
c4:f9:db:0e:2a:6d:ae:39:68:70:d0:ca:25:6b:3f:
78:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5D:B5:12:00:8B:69:91:04:4E:2C:4E:5A:9B:9C:30:F7:24:4C:67
X509v3 Authority Key Identifier:
keyid:DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:9f:f6:a8:e8:cc:2c:80:f4:34:9f:f7:8a:19:a5:2f:2f:4e:
b7:76:29:b2:9d:ff:74:5f:10:a6:88:db:45:68:4a:13:e6:10:
b8:29:8b:f8:4e:f5:8d:5e:56:0b:56:3d:56:f9:4f:58:8d:0a:
ea:2a:51:96:c3:79:d9:9f:ad:1d:95:cc:b7:08:9f:10:3c:b2:
73:6e:da:71:f2:97:05:cc:84:79:1d:76:59:79:73:91:66:99:
82:b7:1c:1d:c2:aa:62:6d:24:3d:b2:f4:04:96:c7:f3:65:6e:
9e:06:57:f9:f1:56:6c:12:e2:e2:bb:91:4b:63:61:7b:a5:f7:
98:88:cb:90:6a:1a:25:d6:3e:fd:9f:68:c0:5a:f7:43:c1:0d:
21:cc:53:50:4e:85:dc:7e:86:7d:60:8b:7d:21:4b:22:a3:07:
51:15:21:0a:bc:12:9b:7d:35:d4:c7:92:b6:98:7e:4d:72:ce:
f1:5b:f7:72:3a:cc:03:3e:dd:08:9a:88:cb:83:f6:50:b5:61:
09:77:fa:cc:54:6e:bf:3f:68:19:f9:90:e7:50:47:45:04:a6:
fd:e6:0d:5f:1e:e1:62:c4:7a:dc:71:df:ae:61:03:c7:ac:39:
3d:d2:a3:32:9c:b4:4c:d4:55:e0:d8:4a:c8:ba:d9:c0:27:61:
aa:0e:84:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:22 2025 by rpki-client