Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
File: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft (raw, json)
Hash identifier: agl3KzzB2W/4kTw/d6ylMKM9bT13CEX/aa8a9o/I25I=
Subject key identifier: A0:70:F8:9E:9C:C9:BB:0F:05:E7:7E:A0:50:17:5A:EF:B8:D0:D6:24
Authority key identifier: DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
Certificate issuer: /CN=df6a9267b18b36d828890a86387f310b84c04b63
Certificate serial: 01974C69CF19A46B2A042463C3B102E3F459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
Manifest number: 0D17
Signing time: Sat 07 Jun 2025 22:01:32 +0000
Manifest this update: Sat 07 Jun 2025 22:01:32 +0000
Manifest next update: Sun 08 Jun 2025 22:01:32 +0000
Files and hashes: 1: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl (hash: y9Vrr0Yt/iKTrbNKPHfNuEIt1CjGI0WrRIkTAJ2XHAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 22:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:cf:19:a4:6b:2a:04:24:63:c3:b1:02:e3:f4:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6a9267b18b36d828890a86387f310b84c04b63
Validity
Not Before: Jun 7 22:01:32 2025 GMT
Not After : Jun 8 22:01:32 2025 GMT
Subject: CN=a070f89e9cc9bb0f05e77ea050175aefb8d0d624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e5:01:0f:f1:09:43:69:f6:34:e8:c5:3c:23:
a2:1a:b3:3b:cd:fa:3e:94:56:1f:88:52:0b:e5:6b:
75:52:15:df:f8:75:9c:74:8d:e2:75:89:79:32:c1:
9a:fe:3d:f2:16:dc:b4:46:e7:0b:99:fd:82:c5:d0:
90:a8:90:c1:00:97:04:5a:e7:9c:df:00:1e:21:a5:
44:2b:0c:c7:41:ca:81:2e:68:0d:07:db:5a:47:44:
40:65:b5:fe:3b:30:95:4e:bb:d3:70:65:a2:56:0b:
81:97:62:18:ca:44:7f:82:bc:a5:f6:09:bd:ef:cf:
d8:9e:cc:84:e9:f7:af:17:c0:8d:19:fc:2b:8d:1e:
0e:09:29:c6:8e:1a:6f:f5:c7:03:c4:ce:98:94:c7:
6f:92:3e:bd:ed:8f:bf:b5:de:36:72:22:c0:ed:32:
43:77:5a:c9:92:b7:f9:03:f8:cf:0e:9c:0b:ee:ad:
5d:54:82:5a:91:09:ae:9c:2e:55:79:75:82:4b:e7:
55:e6:c2:ef:09:e7:7c:de:38:0f:00:2f:cf:a8:0a:
1e:5e:4c:3f:76:79:c7:58:a6:ba:0b:aa:13:0c:c7:
f3:cc:79:8c:7c:aa:cf:9f:26:8b:c9:e4:93:1a:33:
ba:e1:24:b1:8a:b1:02:bc:57:bd:81:5e:7a:80:eb:
e2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:70:F8:9E:9C:C9:BB:0F:05:E7:7E:A0:50:17:5A:EF:B8:D0:D6:24
X509v3 Authority Key Identifier:
keyid:DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c1:52:c9:68:85:d8:92:65:d5:46:67:9b:74:c4:8e:8c:5d:
73:4f:c1:cb:1d:c2:57:19:43:b1:e8:4b:7f:c9:c8:97:8f:d7:
32:bf:57:05:67:97:e5:eb:e1:2b:0c:18:ed:72:a6:20:82:31:
26:65:70:ac:28:43:75:17:c9:a1:cf:bb:9b:e6:97:a3:3f:be:
9f:c8:0a:f9:b2:b2:a5:a7:6f:2c:8f:d6:a7:b5:4d:e9:35:1f:
11:77:a7:61:f3:c8:94:b4:16:83:92:02:8f:26:33:38:8f:8f:
57:0e:35:20:ec:90:0c:b1:1a:b3:c7:ac:2d:03:e6:53:1b:c2:
24:76:45:01:4f:84:ef:70:8a:20:6e:02:48:43:99:c7:e1:e4:
ad:1d:a9:0b:0e:ed:cd:69:97:f5:5e:98:5d:59:bf:c5:3c:f0:
ef:63:a3:e3:d0:0c:7b:1d:3d:55:90:13:73:f0:25:3d:8e:49:
5b:0d:df:a6:70:61:2a:15:2b:a3:ab:ef:4a:b6:76:f8:68:9b:
6a:83:79:88:8c:9f:85:63:64:29:ff:1b:15:9f:8e:c8:83:34:
42:aa:18:c7:86:84:55:1c:a9:5d:8c:9f:93:7b:31:dc:84:1e:
32:d9:16:a6:82:47:d0:f9:c3:c5:6e:06:fc:73:7c:f4:4f:54:
be:f6:e3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:08:31 2025 by rpki-client