Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
File: 32K78V3jRKzbX3gARQ8sgteX15g.mft (raw, json)
Hash identifier: 8D3GbxiefK8607m7P7Vcqnv8lIQxFLlN+WQh8rklQFw=
Subject key identifier: 3D:70:06:1E:4F:D3:0A:56:AB:DD:51:24:31:3A:54:23:1E:A3:06:6A
Authority key identifier: DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
Certificate issuer: /CN=df62bbf15de344acdb5f7800450f2c82d797d798
Certificate serial: 01975121C6BB7BDE150ACC703907AD70BE12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
Manifest number: 0C13
Signing time: Sun 08 Jun 2025 20:00:57 +0000
Manifest this update: Sun 08 Jun 2025 20:00:57 +0000
Manifest next update: Mon 09 Jun 2025 20:00:57 +0000
Files and hashes: 1: 32K78V3jRKzbX3gARQ8sgteX15g.crl (hash: oQ6Y/c8ghVRxLL4WCEmicHtLm4c6wl4k+JBpRMK/Zls=)
2: oOmlEIPuZj-euGQgaSJSIdcSgws.roa (hash: 4HVEBIShSrKuBB15YN2IPkpfbl2tZhoTqa30YNiE+ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:c6:bb:7b:de:15:0a:cc:70:39:07:ad:70:be:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df62bbf15de344acdb5f7800450f2c82d797d798
Validity
Not Before: Jun 8 20:00:57 2025 GMT
Not After : Jun 9 20:00:57 2025 GMT
Subject: CN=3d70061e4fd30a56abdd5124313a54231ea3066a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:87:b6:89:ed:de:cb:e9:fa:7b:92:0d:25:6f:
34:c1:53:72:b5:7a:31:60:48:ae:55:ad:c0:c4:3f:
8e:8e:80:e0:49:a8:aa:ed:17:0e:1b:4c:5c:6e:db:
3c:58:8e:2e:3b:48:ef:ef:03:85:bb:fd:e3:de:77:
bf:91:ac:12:01:cf:e6:42:87:1a:9e:5d:fa:b1:ad:
79:ac:36:f2:e5:ca:a8:d1:16:09:f1:79:8b:e8:d0:
4b:09:e1:92:03:a7:75:37:94:35:f2:de:f0:5b:9d:
19:3f:b1:32:d2:bd:f7:82:d9:a0:66:57:17:0c:b5:
66:18:d6:94:34:99:bd:49:a5:e0:a5:d7:18:44:76:
4f:b0:d6:5c:53:31:83:f4:51:51:6d:80:b8:f7:7c:
27:e0:f1:95:2a:cb:88:e3:92:f7:3c:41:8b:93:f1:
6b:f5:9c:c8:d7:1b:b2:46:f0:55:1e:18:bf:98:a4:
88:11:e7:3b:d4:98:c5:c5:06:82:c6:a1:17:3e:6f:
cb:53:44:68:99:93:d8:06:a9:2f:2e:c0:10:dc:2f:
6e:84:94:1b:c0:bd:57:dc:0c:ff:d7:9f:94:ec:7f:
96:20:6d:9d:96:76:8c:58:f5:4d:f2:da:cd:0c:49:
0f:40:5f:e6:b2:d6:8e:04:ab:22:de:e4:63:74:52:
f4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:70:06:1E:4F:D3:0A:56:AB:DD:51:24:31:3A:54:23:1E:A3:06:6A
X509v3 Authority Key Identifier:
keyid:DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:da:3c:e2:2c:47:6f:2d:22:94:a7:05:95:92:dd:90:bb:e1:
4a:13:2a:f6:bb:7e:e1:ce:bb:be:ae:09:35:8c:e1:b4:3d:a6:
48:f1:b5:76:a4:f4:db:96:f8:7d:2f:bd:2b:ae:6f:41:d2:9c:
58:a8:b8:80:bc:52:f9:12:a0:bc:1c:7a:d7:00:ba:64:42:8e:
7f:33:cb:a9:da:f2:d8:2a:8c:10:67:49:6d:08:8f:40:a2:03:
1f:24:a7:dd:6e:ff:19:ae:a4:27:48:04:e9:13:f5:9b:f0:37:
6b:5e:df:74:f0:63:13:31:7e:12:23:69:84:02:49:3e:31:e6:
95:23:a0:08:88:40:fa:52:80:f5:28:00:0a:8c:d6:57:61:c9:
c5:50:1f:43:3e:06:57:b4:62:81:db:2b:3a:e5:06:d0:ea:4f:
df:a7:1a:27:83:af:9e:59:93:31:35:29:8c:6d:34:d2:dc:81:
79:7f:32:25:93:ff:1c:ab:1f:8e:78:fa:ab:d5:f3:2c:74:ba:
4e:59:37:96:e2:b0:da:de:7b:52:56:2f:f0:99:4c:f1:23:77:
6b:7b:3e:98:94:2c:a7:dd:da:da:47:14:a9:7f:8f:39:fd:f8:
67:31:e2:38:25:12:ad:a0:a0:5a:0d:b9:3d:dd:1e:48:35:b8:
52:4d:50:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:31:12 2025 by rpki-client