Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
File: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft (raw, json)
Hash identifier: CzIMJhcxLvOSNPScZleX2WrqTjRlFmYK6LoToBAljgc=
Subject key identifier: 2F:83:C6:ED:B8:BF:1E:EE:99:27:3E:D0:3B:81:F9:51:07:A1:E3:3C
Authority key identifier: DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
Certificate issuer: /CN=df6a9267b18b36d828890a86387f310b84c04b63
Certificate serial: 0197B6A1CBD2CEC70049201E19E7DAB64BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
Manifest number: 0D4E
Signing time: Sat 28 Jun 2025 13:02:26 +0000
Manifest this update: Sat 28 Jun 2025 13:02:26 +0000
Manifest next update: Sun 29 Jun 2025 13:02:26 +0000
Files and hashes: 1: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl (hash: gqP+R8gfaMVm1JaspYaAe2I4mgRzwqa8XcQWflOGctA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:cb:d2:ce:c7:00:49:20:1e:19:e7:da:b6:4b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6a9267b18b36d828890a86387f310b84c04b63
Validity
Not Before: Jun 28 13:02:26 2025 GMT
Not After : Jun 29 13:02:26 2025 GMT
Subject: CN=2f83c6edb8bf1eee99273ed03b81f95107a1e33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a7:50:d5:b6:37:e3:cf:78:55:b7:47:07:b3:
f3:bb:b7:6b:ee:94:c2:c9:72:4d:e5:80:10:cb:f4:
04:22:8a:cb:14:b7:43:1e:3a:29:07:96:ec:73:4a:
60:d5:80:d7:17:03:b6:5c:66:95:a4:02:73:be:aa:
91:27:b5:fe:25:2e:5f:92:59:2e:9b:e2:fe:56:31:
c1:d2:8a:de:73:b7:f1:9b:b8:8d:20:cf:a5:5b:aa:
57:18:02:fd:08:06:7c:3a:4f:21:80:9a:b6:bf:45:
67:24:af:5d:4e:0e:9e:de:5e:79:8f:19:4b:f7:2c:
de:4d:65:80:d5:97:d2:9b:29:32:61:fd:fa:4d:37:
62:04:9c:9f:4c:fe:3b:6a:b7:6b:37:0d:30:ff:d5:
9a:23:a0:0c:4e:0d:59:a7:a7:3d:55:3d:a5:0c:60:
a2:c6:28:b9:53:59:ce:2d:fc:f9:75:b7:16:ff:51:
f7:43:5d:40:93:25:13:74:9c:e0:7b:45:69:db:33:
f8:e4:08:de:5e:4e:ec:16:ca:4a:ce:c8:9e:e4:0a:
8a:a2:1d:d6:bb:0c:94:ac:4d:58:da:37:82:e6:90:
57:0a:c0:b1:ad:9f:4c:cd:22:48:2d:fe:72:ac:ba:
26:24:61:44:14:ec:5f:d8:46:fe:15:48:c9:5a:ad:
c0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:83:C6:ED:B8:BF:1E:EE:99:27:3E:D0:3B:81:F9:51:07:A1:E3:3C
X509v3 Authority Key Identifier:
keyid:DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:43:28:ca:ff:c3:49:02:93:0c:db:d2:78:29:8b:ad:99:73:
5d:7b:42:7a:6d:82:00:42:4d:3f:8e:18:61:54:b1:8c:ed:3e:
f5:d9:24:40:8b:07:af:db:88:d9:8f:06:65:86:5a:40:cf:19:
31:a0:62:0c:d2:f9:f8:2d:fd:5e:08:e5:87:78:5e:78:2f:44:
f9:ee:43:0c:5c:3f:d7:31:ae:89:f2:28:4b:59:ac:1d:95:f5:
c0:cb:b7:97:db:12:8b:1f:62:12:76:e7:6e:c8:47:e2:76:50:
d6:09:1e:00:34:d3:f0:bd:18:2f:a7:9b:e0:db:2d:f4:55:2c:
80:44:ea:6f:38:72:2a:eb:be:64:85:09:7e:55:06:11:ab:4b:
f0:48:f5:73:42:09:83:21:38:31:ae:bd:57:43:68:f6:38:71:
61:9b:b8:4e:35:8c:fc:85:a3:41:f8:7d:31:3c:2a:07:10:16:
9d:7f:31:e6:06:6e:55:f2:ac:26:e0:19:3c:39:a2:e5:02:24:
2f:56:66:e1:b5:22:9a:dd:e7:98:e8:04:39:78:f0:12:63:d3:
ba:52:35:33:78:31:59:ac:1c:75:33:0e:4c:b9:fb:7f:3a:9f:
23:3d:66:47:cb:38:5e:fd:77:32:a3:6d:a8:5c:15:5a:89:75:
67:54:7c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:36:57 2025 by rpki-client