Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
File: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft (raw, json)
Hash identifier: J8n9WQvH3zkhjevsHOmVfxCjPZACv4gcL/ntY9MGSiw=
Subject key identifier: 48:2B:1E:62:AE:AC:77:26:26:79:70:D9:CD:36:80:83:06:17:3D:C8
Authority key identifier: DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
Certificate issuer: /CN=df6a9267b18b36d828890a86387f310b84c04b63
Certificate serial: 0198D65F8085B2070D17490BC7C7A1C110B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
Manifest number: 0DE3
Signing time: Sat 23 Aug 2025 10:00:39 +0000
Manifest this update: Sat 23 Aug 2025 10:00:39 +0000
Manifest next update: Sun 24 Aug 2025 10:00:39 +0000
Files and hashes: 1: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl (hash: M+2I/R+31uU81SLgDR1SrjhbxoLtFjFnUN7NNCu8D4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:80:85:b2:07:0d:17:49:0b:c7:c7:a1:c1:10:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6a9267b18b36d828890a86387f310b84c04b63
Validity
Not Before: Aug 23 10:00:39 2025 GMT
Not After : Aug 24 10:00:39 2025 GMT
Subject: CN=482b1e62aeac7726267970d9cd36808306173dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2a:05:3b:a7:cc:9a:c2:85:bd:fd:fe:d9:b1:
ea:bc:f2:4d:03:dd:d2:1a:bc:70:75:9b:4c:79:00:
3d:6e:b3:9b:53:2d:4d:0c:15:95:90:48:8b:f0:57:
b4:85:3c:50:d1:ea:7a:bf:2c:58:cb:52:47:4a:57:
6f:3e:63:74:50:cd:df:42:5e:89:7e:fe:24:c1:86:
a4:a9:d3:d1:b0:59:52:c0:81:91:1c:8d:b1:1d:90:
ba:16:23:8e:a4:1e:87:37:89:2b:b4:45:8e:ac:e3:
a6:d5:b6:2a:27:1e:9b:33:36:40:68:66:71:1c:4f:
cd:74:85:18:45:95:29:73:17:2e:8e:4e:7e:0b:0a:
c5:e9:66:54:78:f4:6d:b9:17:c2:85:d7:06:8f:11:
a6:7d:84:fe:86:69:84:f5:75:d0:67:ff:d0:e1:e7:
89:e4:7f:a1:ab:b1:ad:a9:83:b6:30:33:b3:49:23:
54:42:50:e1:b2:66:5a:1a:f8:bc:2a:74:a6:e3:dc:
01:da:d8:34:25:52:2b:40:47:22:f9:70:8a:f1:44:
24:f6:25:ca:17:e6:08:d1:59:df:17:84:3d:37:81:
c8:79:30:f6:be:56:12:3f:41:d5:78:3e:03:6d:8a:
7e:14:4a:9d:86:ec:07:e6:4d:79:a6:e2:a6:c2:1e:
d7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2B:1E:62:AE:AC:77:26:26:79:70:D9:CD:36:80:83:06:17:3D:C8
X509v3 Authority Key Identifier:
keyid:DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:35:6d:86:bd:7c:5e:2e:5a:4c:ed:ef:8f:32:57:11:62:0f:
ab:28:8d:2c:d2:a8:ef:99:d4:03:b6:57:be:97:27:fb:5e:08:
80:05:8a:a8:31:f3:8e:d2:77:a0:6c:6e:c3:50:1b:2d:08:86:
a9:f5:22:79:f2:85:2d:22:0c:47:71:7b:da:f1:c9:54:f3:74:
00:0d:79:c9:6e:d7:8e:42:44:5c:ac:89:42:45:23:84:9c:fc:
2b:d9:3f:d3:db:c1:f3:98:cb:87:88:0e:a4:1c:f6:26:6e:bf:
6f:62:37:b4:c3:64:7a:5f:bf:93:c4:4e:8a:b2:3c:78:ee:d0:
f4:1f:db:ed:92:bb:e6:9c:20:4b:e9:f7:08:a0:e8:54:30:91:
7d:16:79:fa:c7:88:5f:1d:4a:c0:b1:9d:73:2b:19:40:ef:2e:
81:db:a3:dd:1c:9d:26:05:10:25:84:07:3c:ea:bf:d2:d6:5a:
c8:b4:91:71:e0:74:51:5b:3a:26:17:fd:3b:e3:f1:c7:36:8c:
ca:0e:d5:96:87:fc:27:37:d7:1e:ac:ac:03:37:cb:ac:dd:ac:
80:b8:0a:79:b2:33:38:5c:38:ec:e9:ff:f0:9a:26:5e:7d:86:
d8:3f:b7:64:15:45:9d:51:4e:dc:86:a6:cc:f5:09:d6:14:3f:
cf:e9:53:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:44 2025 by rpki-client