Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
File: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft (raw, json)
Hash identifier: xlnx/tgWEDfBU6TDWW3A/wr4puRwlUj4zFEuT/jxh8A=
Subject key identifier: 25:25:12:21:0E:8D:3C:33:25:EC:4A:74:10:05:30:AA:39:E8:F2:9F
Authority key identifier: DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
Certificate issuer: /CN=df6a9267b18b36d828890a86387f310b84c04b63
Certificate serial: 019849652069D3E7F3D7523509BD6436584B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
Manifest number: 0D9A
Signing time: Sun 27 Jul 2025 01:00:20 +0000
Manifest this update: Sun 27 Jul 2025 01:00:20 +0000
Manifest next update: Mon 28 Jul 2025 01:00:20 +0000
Files and hashes: 1: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl (hash: RY5vSShLmp/7KhAr7JdInGOkieOF1BZWc8L8NpLR+tI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:20:69:d3:e7:f3:d7:52:35:09:bd:64:36:58:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6a9267b18b36d828890a86387f310b84c04b63
Validity
Not Before: Jul 27 01:00:20 2025 GMT
Not After : Jul 28 01:00:20 2025 GMT
Subject: CN=252512210e8d3c3325ec4a74100530aa39e8f29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ce:e2:ea:38:d2:7c:31:dc:54:98:61:c4:7a:
75:d1:f2:a3:05:13:36:27:67:90:a2:6f:99:44:ca:
72:f6:58:21:c3:9d:db:d0:1d:9b:4a:c1:e5:df:63:
1b:46:07:b7:8a:8b:bf:d9:77:72:b9:5c:f4:99:8c:
1c:d9:14:9f:c2:a9:6f:5c:07:97:3a:1c:36:b7:85:
bc:e7:0c:6a:4c:7e:61:b2:59:94:81:ee:48:ab:c8:
d9:13:ee:a6:2d:96:f3:4c:10:7b:02:6d:89:6e:81:
bb:cf:e1:c4:a4:cd:7f:d7:b6:48:59:75:45:55:99:
f6:1e:74:92:ed:38:bb:36:1e:dc:28:35:53:34:8a:
1e:ad:3e:ec:bf:a0:c7:23:e4:aa:66:67:91:d2:b8:
0a:d9:50:c1:f1:c0:e8:23:0f:92:b2:e2:a2:0b:f0:
3a:a4:ae:32:76:0b:fc:84:a6:4e:44:d4:9a:79:53:
a6:8b:84:83:63:6a:df:d1:8b:f1:5a:4f:55:6f:45:
39:77:e4:65:9f:a1:0f:01:8d:03:4d:a6:04:ab:25:
24:3b:a7:db:4b:b1:18:bd:6f:bc:3a:ec:44:26:1a:
d5:af:3f:a6:79:d1:85:23:87:58:d0:cb:a0:bc:bc:
68:d3:53:da:e3:93:bb:88:79:70:04:c3:3d:64:fb:
a7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:25:12:21:0E:8D:3C:33:25:EC:4A:74:10:05:30:AA:39:E8:F2:9F
X509v3 Authority Key Identifier:
keyid:DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:cc:a9:6f:9f:c8:0d:fc:be:f1:e1:cb:81:7c:e9:02:68:7f:
c7:9e:1b:ad:6b:f4:7c:4f:b5:a2:4a:a4:d3:3c:59:53:bc:d1:
8c:33:f6:60:b0:82:5e:df:07:a2:f8:50:84:0f:f8:46:0b:f7:
84:de:e0:57:70:f0:ad:21:35:83:38:da:7a:3f:fd:f3:fe:99:
4b:da:7f:5a:68:fd:c9:7c:27:e9:35:7a:69:46:81:41:ad:5c:
1d:8b:b3:c3:e6:02:da:32:0b:e2:bb:a1:11:a1:45:ea:cd:da:
08:f3:d3:94:12:0b:49:64:79:73:81:72:e4:c3:35:74:64:c9:
24:a0:82:f6:9c:4c:27:8f:66:b2:0c:27:0c:96:5d:bd:6a:c3:
e6:3d:f3:95:bb:44:76:5e:9f:7e:3b:a0:b8:ad:78:b2:07:67:
61:c2:e7:3b:1d:39:32:91:5e:4b:88:56:45:24:68:4f:58:18:
14:5d:8d:e0:e4:91:2e:65:02:08:a5:16:61:75:ce:ec:81:4a:
75:25:9a:ca:67:b8:ec:4b:69:22:89:5d:41:99:af:d5:e8:02:
3f:bd:58:9a:bf:8f:27:32:62:6c:4e:42:7c:65:62:08:30:6a:
8f:7f:4c:f6:17:a0:a0:1a:3a:b8:1c:cc:a4:1c:7f:f5:38:ad:
19:5b:b7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:48:09 2025 by rpki-client