Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
File: 32QSxd3xKOxxSvrqSD6Hsbx01B8.mft (raw, json)
Hash identifier: NjWdB1PSVPd+4hAwv7BXC3LkxkZzJkK3z8IiwtbAkTo=
Subject key identifier: DB:BF:A2:24:D4:DC:17:51:BA:61:AB:3C:64:9D:7A:B9:87:E2:B3:76
Authority key identifier: DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
Certificate issuer: /CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Certificate serial: 019A71B91CC08830106B2FB81A0838D95C96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
Manifest number: 05D8
Signing time: Tue 11 Nov 2025 07:02:28 +0000
Manifest this update: Tue 11 Nov 2025 07:02:28 +0000
Manifest next update: Wed 12 Nov 2025 07:02:28 +0000
Files and hashes: 1: 32QSxd3xKOxxSvrqSD6Hsbx01B8.crl (hash: gqBoaC+0aLR6n/PLn25rTXcsniRNrrVFeHJ5cbRxQ0g=)
2: NldJhq1MAVdUgbD6n6XKOd_rYuI.roa (hash: nicnFQBAIXmcU10eabjaRC66nw/nEzjS6x4xuq2azqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:1c:c0:88:30:10:6b:2f:b8:1a:08:38:d9:5c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Validity
Not Before: Nov 11 07:02:28 2025 GMT
Not After : Nov 12 07:02:28 2025 GMT
Subject: CN=dbbfa224d4dc1751ba61ab3c649d7ab987e2b376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f5:a2:13:fa:99:f5:9b:a0:21:94:cd:b0:39:
41:09:fe:69:e3:44:34:a8:3a:89:a2:bc:12:bf:10:
99:84:0a:4d:29:71:20:da:5b:00:5d:35:0b:fd:23:
5d:eb:45:d3:ca:8f:f5:bc:cc:05:ce:24:64:8f:dd:
ae:6f:2c:f2:e2:15:42:e7:57:7c:45:e9:a6:9a:e0:
78:5d:96:8f:bb:24:a6:6f:25:b0:5b:0e:6c:98:c9:
65:98:4d:4c:c3:76:72:15:3c:0d:ff:e4:b8:84:37:
7c:87:ae:0e:6b:bd:74:fa:9e:03:c3:7c:8f:ec:20:
00:2d:8b:94:a1:d2:53:65:33:c2:50:ef:c6:b7:f0:
65:1e:f3:f7:66:9c:9a:36:52:f0:ae:0e:8e:30:ed:
22:ca:cd:4b:98:76:a1:8e:a3:60:54:ba:84:4d:66:
c7:8b:3d:c7:79:ce:68:af:5d:f7:35:ae:b9:56:92:
f6:46:f8:0b:de:9c:26:e9:74:92:9e:5d:f4:e4:54:
ff:8e:af:27:8d:44:64:f5:2c:c0:ad:d7:79:e6:09:
c5:03:20:9a:30:69:8c:c6:b2:9d:eb:d6:5f:ce:9a:
f1:b5:1d:9f:a4:ca:6a:5b:f7:b1:03:58:b1:e1:35:
74:2e:5d:81:b9:53:39:14:36:73:a7:88:31:1c:4b:
60:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BF:A2:24:D4:DC:17:51:BA:61:AB:3C:64:9D:7A:B9:87:E2:B3:76
X509v3 Authority Key Identifier:
keyid:DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c8:ac:a9:8d:da:3b:99:62:af:30:2f:aa:e6:ed:b8:1e:69:
9e:bc:ff:b2:04:e1:8e:32:e2:7b:a2:4b:38:7a:e2:34:72:74:
03:69:c2:92:ba:bb:99:3f:a2:dd:77:08:21:3d:6f:96:a3:51:
82:a1:0a:d9:3b:54:91:a0:a2:da:0d:f0:f1:79:f2:e5:ca:a6:
81:d8:9a:ca:db:2b:64:0f:4c:2f:22:2c:2f:5b:ff:39:19:83:
eb:9b:18:1e:dc:f8:c8:cd:02:04:f6:ce:eb:cb:fa:28:1d:e7:
09:43:99:e9:85:b0:99:89:93:34:e9:66:40:41:11:cf:cf:3d:
fc:77:33:a9:96:c0:38:b2:04:4b:3d:3b:d1:8a:89:db:95:bd:
53:a6:d1:57:c0:85:b9:ae:ba:74:e7:56:8a:ed:91:e8:ea:2e:
1c:e8:18:91:16:56:34:07:9c:1c:b3:45:ca:c3:f6:d1:ad:11:
53:7d:37:e7:a4:2d:12:f8:12:96:60:01:a6:62:89:73:3a:aa:
2b:91:c6:dc:ef:96:c3:2a:39:73:d0:64:84:f7:7a:96:b4:96:
72:97:e1:3f:4f:ab:43:df:40:ef:b9:57:d8:81:59:3a:9f:b8:
7b:39:5d:04:23:60:e6:8e:b7:2a:cb:01:24:69:da:b2:ff:81:
29:3c:19:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:46:52 2025 by rpki-client