Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
File: 32QSxd3xKOxxSvrqSD6Hsbx01B8.mft (raw, json)
Hash identifier: DxxNYDu/E30Ra34naX7Owtp/jwQKwmkivHRTKSXp8nk=
Subject key identifier: ED:4D:31:7F:1F:F3:B7:3F:56:2A:FE:CB:6F:5B:E9:03:BC:49:4F:97
Authority key identifier: DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
Certificate issuer: /CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Certificate serial: 01974C68C27D02EF5303F32F7DA4392A1BA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
Manifest number: 0437
Signing time: Sat 07 Jun 2025 22:00:23 +0000
Manifest this update: Sat 07 Jun 2025 22:00:23 +0000
Manifest next update: Sun 08 Jun 2025 22:00:23 +0000
Files and hashes: 1: 32QSxd3xKOxxSvrqSD6Hsbx01B8.crl (hash: 8GQnKMn77W6TrEgHk5LXtjMbSMft4/TMznUEgFOOOQk=)
2: NldJhq1MAVdUgbD6n6XKOd_rYuI.roa (hash: nicnFQBAIXmcU10eabjaRC66nw/nEzjS6x4xuq2azqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:68:c2:7d:02:ef:53:03:f3:2f:7d:a4:39:2a:1b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Validity
Not Before: Jun 7 22:00:23 2025 GMT
Not After : Jun 8 22:00:23 2025 GMT
Subject: CN=ed4d317f1ff3b73f562afecb6f5be903bc494f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:10:67:78:a1:cc:9c:34:46:87:55:41:ce:f5:
09:04:5f:0e:f4:56:18:a6:20:73:44:6c:73:78:4f:
f0:9f:12:4b:fa:d5:44:24:83:86:10:54:81:82:5b:
9b:c7:6d:4f:3a:22:93:f0:7f:d4:2e:71:c2:b6:b8:
c2:66:de:53:7a:45:cf:85:2a:a1:6b:dd:ff:cd:4a:
90:fe:bd:97:01:dd:cf:ac:d5:71:90:3d:0f:4a:11:
50:cd:9c:63:5f:6e:03:ad:ed:54:27:33:fa:0d:7d:
d1:7b:00:cb:3f:19:22:48:62:52:09:6e:22:10:2c:
a7:07:c5:4b:e9:a8:c9:2b:28:84:11:ff:1b:a6:a3:
5f:f3:05:c0:7d:32:03:1a:81:50:ac:45:73:b8:eb:
2b:27:4a:49:35:fd:d9:4f:63:2a:98:22:31:57:1c:
68:bd:ed:a6:42:16:e6:cd:da:06:85:46:51:9a:c9:
a6:98:f7:cd:b2:7e:31:b7:3b:08:3b:46:35:43:13:
fc:7f:31:fc:63:5a:46:64:5d:77:47:17:17:38:99:
8d:e2:64:90:57:5a:58:64:92:6d:88:b3:b3:5c:02:
a2:99:8f:37:a7:e5:3f:59:2e:1b:e2:ea:e3:fc:f0:
d8:a2:7c:1e:93:73:2f:87:ae:45:2c:dc:7f:42:31:
b1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4D:31:7F:1F:F3:B7:3F:56:2A:FE:CB:6F:5B:E9:03:BC:49:4F:97
X509v3 Authority Key Identifier:
keyid:DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:96:9e:fe:00:5b:83:09:92:5b:20:cf:e0:ff:ac:34:bf:00:
bc:22:b9:5d:f3:61:3e:ab:3a:47:7f:cf:b7:3d:da:6c:44:38:
09:d9:6d:e9:8d:26:90:f5:b4:57:0f:85:86:08:46:4f:4b:85:
7f:76:d9:66:fa:5d:1a:bc:cc:75:47:34:99:c6:a1:4c:16:2a:
18:4a:71:64:61:75:02:2b:ad:b6:a5:3b:78:0b:ad:b0:b9:ed:
eb:3e:3b:37:42:30:ea:76:24:53:1d:2a:ba:18:0d:c7:cb:9f:
d6:90:21:27:5d:0a:93:ca:38:da:7c:69:1d:80:b2:25:b5:4f:
da:23:ed:c5:23:b0:69:eb:d3:d6:ba:cb:e3:d4:d1:16:19:10:
19:b3:17:10:29:7f:87:94:69:62:98:63:14:7b:10:72:4f:22:
66:ac:9a:32:7c:c6:43:c6:e2:c0:da:ab:b2:e2:ba:f7:49:2e:
74:80:cf:41:82:f3:73:f9:a2:35:d3:8b:d9:f8:10:34:e3:7d:
48:2e:19:f2:a9:3a:cd:73:62:fe:5a:51:44:8e:83:4a:ab:56:
b4:a0:3d:c0:ed:bc:79:41:f1:c9:51:5e:bd:18:92:30:b1:2e:
1e:72:2f:47:ca:c5:fe:41:58:25:32:18:4f:e6:a7:3f:42:f4:
89:f1:b6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:34:50 2025 by rpki-client