Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
File: 32K78V3jRKzbX3gARQ8sgteX15g.mft (raw, json)
Hash identifier: 5yW2dl0JLTegn1l8s9uslb0gQu4ekYF8dQf4xt258pQ=
Subject key identifier: CA:D2:5D:D9:AD:62:F0:07:A0:15:90:6F:49:16:D9:04:A3:82:FD:82
Authority key identifier: DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
Certificate issuer: /CN=df62bbf15de344acdb5f7800450f2c82d797d798
Certificate serial: 019A7293D4C58AB6CDE4F57D666A1C571387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
Manifest number: 0DB2
Signing time: Tue 11 Nov 2025 11:01:22 +0000
Manifest this update: Tue 11 Nov 2025 11:01:22 +0000
Manifest next update: Wed 12 Nov 2025 11:01:22 +0000
Files and hashes: 1: 32K78V3jRKzbX3gARQ8sgteX15g.crl (hash: JgLXGUfRWU37ATbyS+mkYgB5Vbjn19zK9JpBD2J20bY=)
2: oOmlEIPuZj-euGQgaSJSIdcSgws.roa (hash: 4HVEBIShSrKuBB15YN2IPkpfbl2tZhoTqa30YNiE+ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:d4:c5:8a:b6:cd:e4:f5:7d:66:6a:1c:57:13:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df62bbf15de344acdb5f7800450f2c82d797d798
Validity
Not Before: Nov 11 11:01:22 2025 GMT
Not After : Nov 12 11:01:22 2025 GMT
Subject: CN=cad25dd9ad62f007a015906f4916d904a382fd82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3a:17:5c:56:1c:65:cb:00:10:79:e9:9a:15:
fe:4a:a2:84:7d:2c:af:6f:8e:3f:91:fb:54:4d:d4:
2e:de:1b:a1:55:52:5b:c9:ad:a9:22:be:ad:e4:e2:
4f:bc:eb:56:8b:ba:2d:63:09:b9:43:40:47:51:92:
45:1b:7b:0d:e1:b8:bb:c2:61:ab:10:c4:c4:0e:ae:
7e:90:7c:a2:f7:76:cb:55:26:64:bc:fb:db:71:8c:
ee:99:84:ae:7c:15:bb:b1:4c:d2:01:5a:8c:77:6f:
fa:cc:05:05:d9:61:d2:2e:94:bf:6f:0f:ca:29:12:
ed:59:03:c4:bf:b6:51:d1:d3:87:8d:2b:ae:81:f2:
27:5d:0b:83:ac:69:91:8e:c8:4b:29:e8:b3:4d:49:
30:05:d9:16:ff:f2:8b:59:a7:fd:55:2d:1c:a7:d2:
fe:39:87:76:02:de:f6:22:13:83:bf:17:90:e9:db:
b1:e7:d1:9b:9b:1a:4a:84:7a:0e:50:dc:f6:2a:d6:
23:45:1d:0e:9b:9f:01:d9:e7:ff:6e:ce:ed:cd:44:
ea:2e:0a:73:3a:68:ad:a9:68:72:9d:bb:c4:6c:44:
8a:6b:9d:e6:ed:c1:aa:2d:78:99:14:5b:d5:21:c4:
92:a2:15:1a:4d:75:39:d9:43:38:a3:21:b7:46:2a:
c4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D2:5D:D9:AD:62:F0:07:A0:15:90:6F:49:16:D9:04:A3:82:FD:82
X509v3 Authority Key Identifier:
keyid:DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:75:d9:2e:d0:6b:0e:99:db:0f:04:a8:e2:88:8f:e8:1d:7f:
42:cc:43:63:21:57:6c:11:2c:7f:ee:b7:75:d6:a0:bb:75:21:
c5:8e:b9:16:ac:b1:4b:0a:89:12:c2:fd:81:36:11:61:38:5b:
d2:18:f1:15:5b:80:43:46:ad:6a:b9:e8:a7:74:6b:9e:3d:c5:
5c:16:64:5b:81:a2:90:ec:4a:1d:84:3a:41:bd:70:d5:69:38:
01:70:62:60:35:45:26:0a:a0:99:35:cc:e7:db:47:23:cc:af:
38:13:39:aa:8f:76:13:8a:01:57:38:e7:c2:26:08:24:dd:9c:
07:4c:84:51:64:63:af:af:a3:3a:dc:0b:e3:56:ef:e5:cd:39:
4b:39:cf:a6:8f:c4:73:76:e6:e5:4a:da:38:b0:2f:a0:b0:d0:
37:1e:02:64:23:c5:35:62:93:49:c7:7d:17:6c:ea:81:00:ed:
b4:0b:67:3c:70:3f:3f:14:22:72:ce:fd:12:fe:8c:83:04:e8:
83:fd:2f:b7:60:cb:01:1d:d6:c5:03:fc:35:b4:ee:1d:6a:2e:
7b:a7:40:58:b8:74:a3:dd:ce:73:e4:f9:49:4a:85:55:b3:86:
09:e3:a3:64:fd:19:1a:d8:71:72:82:52:76:3d:30:f8:50:af:
18:8a:cc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:55 2025 by rpki-client