Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
File: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft (raw, json)
Hash identifier: KqoctogUekOeCn7rp3J4xX9Tb+y+a+Vpf9WNNi0D5sw=
Subject key identifier: 16:C7:37:7A:04:37:B5:9B:B0:EC:B5:09:B8:EF:36:5A:C9:9E:EB:3A
Authority key identifier: DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
Certificate issuer: /CN=df6a9267b18b36d828890a86387f310b84c04b63
Certificate serial: 019A71B8081918919EEEDA3221064B0FCEE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
Manifest number: 0EB8
Signing time: Tue 11 Nov 2025 07:01:17 +0000
Manifest this update: Tue 11 Nov 2025 07:01:17 +0000
Manifest next update: Wed 12 Nov 2025 07:01:17 +0000
Files and hashes: 1: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl (hash: 4S7EyAZ/2fMPgGrk7GcALLimrAVUbkqBxKtGdEVatrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:08:19:18:91:9e:ee:da:32:21:06:4b:0f:ce:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6a9267b18b36d828890a86387f310b84c04b63
Validity
Not Before: Nov 11 07:01:17 2025 GMT
Not After : Nov 12 07:01:17 2025 GMT
Subject: CN=16c7377a0437b59bb0ecb509b8ef365ac99eeb3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9a:c0:70:5b:fa:f2:c2:2a:0c:dc:05:21:41:
3d:aa:71:59:59:51:df:12:47:d1:f3:99:11:fd:78:
21:9f:4b:4c:86:27:ab:5d:4f:c4:fd:d1:bd:09:cf:
95:93:44:0e:a1:9d:55:4f:ff:de:51:25:e7:23:80:
5d:86:08:2f:12:ed:db:f4:7d:4f:7c:fe:36:fa:b5:
6e:1d:1a:69:d2:41:66:eb:98:1f:a0:9a:99:3b:5f:
06:b8:50:e7:6b:f8:32:84:a7:87:de:c7:a2:a6:8c:
b6:f6:e3:35:db:f4:1b:a1:39:50:a9:7e:35:62:7d:
32:97:7a:1a:f4:f0:07:2a:a2:a8:9b:e3:b2:ad:93:
b2:98:fe:06:82:83:4d:5d:f2:9e:12:3c:8d:19:6a:
3e:ec:3e:8c:6d:38:db:77:ef:55:66:7b:de:d0:d4:
da:b7:31:17:5f:9e:04:d1:dd:0c:17:a7:25:d4:e1:
7a:a7:cb:be:4c:7e:0e:92:1a:71:16:61:9b:fc:e4:
33:b4:8c:15:2e:b2:a0:3f:80:60:ae:68:a0:23:77:
1c:cf:36:5a:d1:5c:0c:45:63:25:51:b7:1d:1a:85:
1d:43:9a:11:27:b8:22:fc:22:a9:4f:c9:ca:03:4e:
22:07:73:40:0e:2a:04:dd:f2:54:50:cc:ed:e4:4c:
3b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C7:37:7A:04:37:B5:9B:B0:EC:B5:09:B8:EF:36:5A:C9:9E:EB:3A
X509v3 Authority Key Identifier:
keyid:DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:16:4b:b6:d3:dd:ca:9b:2f:2f:ea:fa:d0:83:27:1b:c2:6a:
e2:d8:ec:d5:95:a1:db:19:f8:80:15:44:57:22:e7:63:50:d9:
84:56:11:8b:a4:c1:e7:bc:a3:83:41:fb:34:f6:79:75:ea:6b:
9b:04:be:bf:68:65:d1:7e:32:26:9e:f3:2e:36:cb:9d:b1:8a:
54:e9:92:20:55:47:82:13:ba:16:a2:bd:83:12:f0:9a:46:21:
7c:0f:bd:db:36:78:f7:41:ed:83:94:77:99:ba:55:26:e9:a3:
d6:3d:0c:0c:41:80:97:89:70:77:dd:77:12:58:86:b2:a4:6f:
52:8b:9c:a7:39:f2:6c:f9:3a:d0:b6:db:e1:70:74:70:de:74:
13:6b:9f:3e:14:d6:98:67:43:12:a1:69:cd:fc:fe:a6:ff:fd:
e6:f4:0d:aa:9f:74:51:2b:21:7d:6e:15:4d:de:9d:83:03:96:
c4:77:fa:a5:1f:e7:e2:e1:09:94:0f:be:f7:a3:13:e2:d6:95:
66:92:a8:5b:73:e1:5f:f7:d4:ad:3f:f0:c7:7c:0d:68:71:04:
01:28:25:19:0b:ea:e4:72:66:7c:7b:c8:67:e5:4a:89:1b:8c:
51:2d:fc:c9:30:55:3d:19:f1:9d:94:38:ae:5f:e6:80:c7:fb:
ae:aa:fc:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuAgZGJGe7toyIQZLD87kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNmE5MjY3YjE4YjM2ZDgyODg5MGE4NjM4N2YzMTBiODRj
MDRiNjMwHhcNMjUxMTExMDcwMTE3WhcNMjUxMTEyMDcwMTE3WjAzMTEwLwYDVQQD
EygxNmM3Mzc3YTA0MzdiNTliYjBlY2I1MDliOGVmMzY1YWM5OWVlYjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZrAcFv68sIqDNwFIUE9qnFZWVHf
EkfR85kR/Xghn0tMhierXU/E/dG9Cc+Vk0QOoZ1VT//eUSXnI4BdhggvEu3b9H1P
fP42+rVuHRpp0kFm65gfoJqZO18GuFDna/gyhKeH3seipoy29uM12/QboTlQqX41
Yn0yl3oa9PAHKqKom+OyrZOymP4GgoNNXfKeEjyNGWo+7D6MbTjbd+9VZnve0NTa
tzEXX54E0d0MF6cl1OF6p8u+TH4OkhpxFmGb/OQztIwVLrKgP4BgrmigI3cczzZa
0VwMRWMlUbcdGoUdQ5oRJ7gi/CKpT8nKA04iB3NADioE3fJUUMzt5Ew7twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbHN3oEN7WbsOy1CbjvNlrJnus6MB8GA1UdIwQY
MBaAFN9qkmexizbYKIkKhjh/MQuEwEtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzJxU1o3R0xOdGdvaVFxR09IOHhDNFRBUzJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jNjBjMjAtYmI0Mi00NmJhLWIyMTUt
OTlmN2JlY2E4NzViLzEvMzJxU1o3R0xOdGdvaVFxR09IOHhDNFRBUzJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9jNjBjMjAtYmI0Mi00NmJhLWIyMTUtOTlmN2JlY2E4NzVi
LzEvMzJxU1o3R0xOdGdvaVFxR09IOHhDNFRBUzJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJRZLttPd
ypsvL+r60IMnG8Jq4tjs1ZWh2xn4gBVEVyLnY1DZhFYRi6TB57yjg0H7NPZ5depr
mwS+v2hl0X4yJp7zLjbLnbGKVOmSIFVHghO6FqK9gxLwmkYhfA+92zZ490Htg5R3
mbpVJumj1j0MDEGAl4lwd913EliGsqRvUoucpznybPk60Lbb4XB0cN50E2ufPhTW
mGdDEqFpzfz+pv/95vQNqp90USshfW4VTd6dgwOWxHf6pR/n4uEJlA++96MT4taV
ZpKoW3PhX/fUrT/wx3wNaHEEASglGQvq5HJmfHvIZ+VKiRuMUS38yTBVPRnxnZQ4
rl/mgMf7rqr8hw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:28 2025 by rpki-client