Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
File: 32QSxd3xKOxxSvrqSD6Hsbx01B8.mft (raw, json)
Hash identifier: k5AyxTz2ifqp7+bXW2W5B3E0F+o0nEdBONqdkstUOWQ=
Subject key identifier: C1:3C:68:B7:EE:8B:3D:26:7D:21:12:A6:6B:DB:B9:EE:B9:6F:B8:2D
Authority key identifier: DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
Certificate issuer: /CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Certificate serial: 019921B0736EA5A0E6E6212AB8E417BC42C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
Manifest number: 052A
Signing time: Sun 07 Sep 2025 01:00:35 +0000
Manifest this update: Sun 07 Sep 2025 01:00:35 +0000
Manifest next update: Mon 08 Sep 2025 01:00:35 +0000
Files and hashes: 1: 32QSxd3xKOxxSvrqSD6Hsbx01B8.crl (hash: GVDrcI156Sy0U+3fYe/1NAY9NOeJtfnR5GiL0FpFAv0=)
2: NldJhq1MAVdUgbD6n6XKOd_rYuI.roa (hash: nicnFQBAIXmcU10eabjaRC66nw/nEzjS6x4xuq2azqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:73:6e:a5:a0:e6:e6:21:2a:b8:e4:17:bc:42:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Validity
Not Before: Sep 7 01:00:35 2025 GMT
Not After : Sep 8 01:00:35 2025 GMT
Subject: CN=c13c68b7ee8b3d267d2112a66bdbb9eeb96fb82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5a:6c:94:42:e2:71:f8:c7:28:0d:f8:ce:ea:
dd:01:16:fb:b2:5f:17:1a:aa:bc:eb:d0:52:3a:dd:
27:76:fa:b0:6a:b8:cc:a3:9b:88:fb:93:26:a4:b4:
ce:14:a7:6e:ab:36:08:3a:7b:8a:ae:e8:19:03:a5:
ca:58:f6:73:91:29:02:c3:3a:51:cf:4e:fe:e6:8d:
a3:50:39:9e:1e:fb:86:a2:8c:54:c5:ab:e8:5a:37:
0f:af:a6:6e:01:09:d9:c9:67:fa:a2:3f:82:80:85:
20:cd:1c:04:c1:e4:13:21:77:7a:d0:fb:53:e1:98:
23:24:50:82:f2:46:67:c5:4f:74:42:ad:ee:38:be:
e9:a9:14:ac:d1:ad:f8:a5:11:7e:74:6f:9d:e5:9e:
e3:8d:11:a5:b7:b7:ba:bb:2e:d7:ca:54:d2:09:31:
4b:32:6b:57:79:aa:7d:b9:ec:0a:25:74:ff:fd:21:
22:52:76:2c:c5:d1:30:22:0c:41:23:85:d5:02:12:
93:b5:73:c1:32:20:9e:59:5f:bf:4b:6f:57:d9:86:
5a:48:a6:7c:3c:05:e3:05:2b:d7:af:a5:17:7b:37:
19:f7:11:e7:c8:62:a7:a1:62:c4:1d:34:3a:82:65:
05:c0:58:cf:cb:b2:33:cb:63:d5:63:23:12:ff:ea:
19:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3C:68:B7:EE:8B:3D:26:7D:21:12:A6:6B:DB:B9:EE:B9:6F:B8:2D
X509v3 Authority Key Identifier:
keyid:DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:68:d8:12:48:d9:02:99:32:f0:25:7f:b7:23:7d:da:0a:40:
f7:6c:b1:04:09:dc:25:3b:62:c6:a3:ce:d4:00:af:ca:10:be:
fd:6a:87:26:2d:72:e1:c8:1e:92:9f:ce:46:c1:0b:0a:44:3b:
12:70:13:be:e5:63:93:07:d7:e6:4d:e2:cd:17:f9:6c:db:9d:
78:42:83:cb:25:27:6c:ee:2d:31:ea:96:ae:f9:3a:5f:29:60:
a9:d0:7f:6b:fa:51:4a:99:a5:db:ec:2d:f5:dd:67:20:9e:21:
41:8a:6c:b4:ff:a5:c4:d1:31:66:31:cc:22:5b:24:79:dd:60:
9f:ff:5e:fc:1c:42:3f:73:10:9f:f7:d3:b8:64:13:73:c5:32:
10:d0:82:ac:12:6b:b4:77:01:c1:38:b7:c8:e0:49:d9:28:9c:
f5:e2:84:9d:5c:1d:d0:36:67:35:2e:4a:1c:96:16:43:3a:d3:
e5:a5:0d:c3:97:46:06:aa:fd:36:fe:37:b7:36:6c:84:fb:c8:
84:e9:c1:77:3b:f7:ca:47:d3:0f:6f:73:bc:ff:6f:88:e2:4d:
b5:f6:69:ce:f7:e3:f8:89:89:e8:d0:84:3a:49:14:5d:d4:90:
3b:db:0d:a5:eb:0b:19:af:00:d0:77:7f:94:ba:9c:5c:a9:86:
96:dc:ba:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsHNupaDm5iEquOQXvELEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNjQxMmM1ZGRmMTI4ZWM3MTRhZmFlYTQ4M2U4N2IxYmM3
NGQ0MWYwHhcNMjUwOTA3MDEwMDM1WhcNMjUwOTA4MDEwMDM1WjAzMTEwLwYDVQQD
EyhjMTNjNjhiN2VlOGIzZDI2N2QyMTEyYTY2YmRiYjllZWI5NmZiODJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1pslELicfjHKA34zurdARb7sl8X
Gqq869BSOt0ndvqwarjMo5uI+5MmpLTOFKduqzYIOnuKrugZA6XKWPZzkSkCwzpR
z07+5o2jUDmeHvuGooxUxavoWjcPr6ZuAQnZyWf6oj+CgIUgzRwEweQTIXd60PtT
4ZgjJFCC8kZnxU90Qq3uOL7pqRSs0a34pRF+dG+d5Z7jjRGlt7e6uy7XylTSCTFL
MmtXeap9uewKJXT//SEiUnYsxdEwIgxBI4XVAhKTtXPBMiCeWV+/S29X2YZaSKZ8
PAXjBSvXr6UXezcZ9xHnyGKnoWLEHTQ6gmUFwFjPy7Izy2PVYyMS/+oZ+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFME8aLfuiz0mfSESpmvbue65b7gtMB8GA1UdIwQY
MBaAFN9kEsXd8SjscUr66kg+h7G8dNQfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzJRU3hkM3hLT3h4U3ZycVNENkhzYngwMUI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8xMDFjMDUtYTkxYy00ZmJkLWJkMDct
Zjk1MDQyMGI5ZTA2LzEvMzJRU3hkM3hLT3h4U3ZycVNENkhzYngwMUI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8xMDFjMDUtYTkxYy00ZmJkLWJkMDctZjk1MDQyMGI5ZTA2
LzEvMzJRU3hkM3hLT3h4U3ZycVNENkhzYngwMUI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnGjYEkjZ
Apky8CV/tyN92gpA92yxBAncJTtixqPO1ACvyhC+/WqHJi1y4cgekp/ORsELCkQ7
EnATvuVjkwfX5k3izRf5bNudeEKDyyUnbO4tMeqWrvk6XylgqdB/a/pRSpml2+wt
9d1nIJ4hQYpstP+lxNExZjHMIlsked1gn/9e/BxCP3MQn/fTuGQTc8UyENCCrBJr
tHcBwTi3yOBJ2Sic9eKEnVwd0DZnNS5KHJYWQzrT5aUNw5dGBqr9Nv43tzZshPvI
hOnBdzv3ykfTD29zvP9viOJNtfZpzvfj+ImJ6NCEOkkUXdSQO9sNpesLGa8A0Hd/
lLqcXKmGlty6eg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:42 2025 by rpki-client