Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
File: 32K78V3jRKzbX3gARQ8sgteX15g.mft (raw, json)
Hash identifier: vKSCt759q0JMD2v5LEhC2dyADsrF6hKfZHV03gRz9mk=
Subject key identifier: 1B:70:32:A9:0C:3C:C0:1D:6F:E2:66:A5:ED:7A:B5:49:8E:A2:C3:BA
Authority key identifier: DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
Certificate issuer: /CN=df62bbf15de344acdb5f7800450f2c82d797d798
Certificate serial: 0199228C5BF3AC938349FEE3B46EC87591F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
Manifest number: 0D04
Signing time: Sun 07 Sep 2025 05:00:47 +0000
Manifest this update: Sun 07 Sep 2025 05:00:47 +0000
Manifest next update: Mon 08 Sep 2025 05:00:47 +0000
Files and hashes: 1: 32K78V3jRKzbX3gARQ8sgteX15g.crl (hash: GZmlzCVcCozHZEO0cc4Z3oWZIgpdpguRFwT5mM9imzs=)
2: oOmlEIPuZj-euGQgaSJSIdcSgws.roa (hash: 4HVEBIShSrKuBB15YN2IPkpfbl2tZhoTqa30YNiE+ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:5b:f3:ac:93:83:49:fe:e3:b4:6e:c8:75:91:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df62bbf15de344acdb5f7800450f2c82d797d798
Validity
Not Before: Sep 7 05:00:47 2025 GMT
Not After : Sep 8 05:00:47 2025 GMT
Subject: CN=1b7032a90c3cc01d6fe266a5ed7ab5498ea2c3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0a:86:b6:c4:4a:73:dc:28:fb:0a:5d:d9:e1:
5d:d6:9c:09:f8:0c:81:6a:c5:3c:30:d3:90:c1:81:
3d:00:a2:fb:89:9f:2c:e8:26:89:de:0e:1e:f3:aa:
13:d0:38:37:02:5c:ac:20:af:6b:72:25:34:2c:50:
05:98:3f:e5:47:d8:a2:1c:4a:c8:25:22:7c:0f:0d:
8f:a0:4f:a1:ce:76:be:84:e3:8b:32:af:a9:b6:c0:
b7:1c:53:e1:63:c6:ac:e8:a4:69:84:c8:fe:92:2b:
c7:9a:d2:d4:22:0f:18:59:31:c9:4a:d0:88:79:2e:
39:a3:b7:1b:4b:f5:c6:05:46:57:96:8e:ef:7e:24:
15:45:73:a8:06:a6:05:1d:57:54:3c:01:35:0c:bf:
6e:c7:1b:e5:35:ed:18:b4:e6:18:03:49:8e:66:f4:
66:a7:0c:c6:ce:bf:a0:d9:15:9c:b6:bf:a9:f4:f2:
1a:75:2d:ac:5e:7a:a9:45:06:ee:aa:8a:d0:e4:5b:
a4:06:95:be:af:99:bc:f9:20:be:85:5a:fe:fa:63:
71:bc:11:0e:8d:58:5c:38:76:5e:72:28:90:53:41:
d4:fb:12:db:1d:8b:ce:cc:33:76:eb:85:b5:d0:fd:
cb:86:ba:32:90:f0:6c:ff:08:34:b7:93:41:3e:dd:
f7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:70:32:A9:0C:3C:C0:1D:6F:E2:66:A5:ED:7A:B5:49:8E:A2:C3:BA
X509v3 Authority Key Identifier:
keyid:DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ad:a0:36:e2:e6:18:9b:f6:5d:3d:97:61:36:86:fa:f5:79:
62:03:48:ea:c7:b1:c4:e4:e5:76:a0:bb:57:a0:c7:2b:cf:2c:
ed:d5:b7:45:c7:99:1e:8c:01:92:54:fc:25:b2:80:7b:09:9d:
ca:34:e6:a1:48:d2:4f:99:f5:ad:da:b7:45:88:bc:65:7e:f2:
73:3f:aa:4c:cc:e7:88:88:e8:0d:0e:fe:cd:9b:4e:64:3a:52:
2f:d5:da:c6:06:43:a4:c7:8a:7b:3c:9c:ee:d1:b7:a9:26:a5:
db:00:42:1a:de:a8:79:76:d5:b9:8b:b9:cf:4e:e8:2f:fc:67:
d8:97:17:2e:c6:f7:1b:e4:de:81:0c:18:6c:40:b4:c0:2d:42:
e7:c8:32:ef:87:d6:d2:3b:6d:29:fc:fc:3d:8f:7b:3a:8c:32:
da:ec:9a:c8:27:2f:0d:34:99:dc:72:1c:98:17:e0:a6:80:72:
b5:7f:78:8b:ae:4a:b8:96:5a:a0:d4:91:95:40:b0:1d:5e:4e:
2e:0d:60:6d:d0:85:58:ba:82:90:c7:4a:ab:ff:d1:b7:33:ff:
23:e2:2c:d8:a8:82:4f:ee:00:cc:1b:eb:c7:73:cb:58:29:84:
fd:c9:15:a3:1b:0a:35:3c:88:78:69:b9:fc:7c:3b:86:2c:c2:
aa:05:78:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:48:42 2025 by rpki-client