Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
File: _32KebrU-YPQxJiVr1DqigPrxw0.mft (raw, json)
Hash identifier: C7BVsGALugZHnrBKRf1Rl0TYCBCJqOkLFsy37gx7etE=
Subject key identifier: 66:4F:B6:33:BE:A1:70:C5:74:F7:FE:C2:92:57:63:57:EF:FB:4E:23
Authority key identifier: FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
Certificate issuer: /CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Certificate serial: 01987EE1E1547ACE6CE075EA1485BFA7AE37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
Manifest number: 0CCB
Signing time: Wed 06 Aug 2025 10:16:29 +0000
Manifest this update: Wed 06 Aug 2025 10:16:29 +0000
Manifest next update: Thu 07 Aug 2025 10:16:29 +0000
Files and hashes: 1: 8LrCpJVZw00cB6v7Jxmu5danMVM.roa (hash: LkYRg4fRX+WYVMtQ+HSrUSifp72hGXmKbB4Mx1yLYEo=)
2: _32KebrU-YPQxJiVr1DqigPrxw0.crl (hash: qulr3VPwU0OC7FtGRHgAFrfQuEfkMFHTY/aH8w9QBVU=)
3: a6so-XC3X0bCh685yxJgny87VWc.roa (hash: cWmqt+zpd4/MbblmLi/xUZ5yTtbn8JegG9g8fg7GF2w=)
4: efPu30dPCju-4pIJ71jJgsdRacM.roa (hash: Gv4sp48MmAuu7ucXxDGtE47NMYnt8tPa86vOcXvxFhQ=)
5: is_2p9c72i9SqdHOdQECHoEj2KI.roa (hash: 68Pbkuya3pT0PDgvbPhuXTcECYTodGaR9wl/fj5QS8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:e1:e1:54:7a:ce:6c:e0:75:ea:14:85:bf:a7:ae:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Validity
Not Before: Aug 6 10:16:29 2025 GMT
Not After : Aug 7 10:16:29 2025 GMT
Subject: CN=664fb633bea170c574f7fec292576357effb4e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7a:c9:f7:21:96:6f:4c:dd:6a:45:85:91:49:
37:bf:a1:b9:4c:c7:6c:b0:d9:35:44:20:9c:35:6e:
6d:93:3a:5d:7b:7c:2a:d9:61:bd:66:ba:96:db:5a:
83:02:48:00:ed:5e:f4:96:fc:e3:a3:6a:ae:81:e0:
44:bd:1b:2c:65:1a:b7:a4:ac:ad:12:df:3c:93:46:
3d:a6:d3:6b:c0:dc:f4:44:e3:69:ef:25:d2:51:5a:
08:56:30:6c:db:61:c4:e2:e5:a3:3a:cc:54:21:8d:
9e:1a:48:64:16:83:b6:81:dc:c7:42:5c:96:bb:90:
24:3c:3c:76:26:dc:c3:45:95:2e:d9:d8:62:37:49:
37:6e:05:d0:73:eb:12:e1:5f:0c:15:55:21:a8:15:
e8:be:72:66:60:ea:a8:02:4d:e4:fa:58:42:a9:35:
2a:1c:18:48:f3:45:72:a4:92:03:09:da:27:e4:d5:
17:2d:f5:5f:da:e8:26:ce:5a:69:92:c1:d0:5c:b5:
5e:68:a8:01:93:b1:74:58:0b:61:86:86:1c:9e:e4:
66:fd:f9:d7:24:de:e0:ba:c2:25:a5:7d:72:68:b7:
a3:3e:a0:2d:a4:05:35:d7:8d:74:32:05:45:ee:71:
00:6d:ad:42:8e:9e:db:f1:0f:ac:1c:78:2b:90:2a:
b6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4F:B6:33:BE:A1:70:C5:74:F7:FE:C2:92:57:63:57:EF:FB:4E:23
X509v3 Authority Key Identifier:
keyid:FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:73:41:42:60:ff:2b:c6:89:2f:83:c7:bb:94:05:41:29:0e:
87:ba:5e:4b:40:02:69:4e:c3:8e:a9:5a:18:da:d8:88:b8:3d:
d4:01:83:22:3a:1d:22:7f:23:68:07:3c:fb:5b:e9:e3:cf:f4:
ed:ac:a2:fe:7d:03:d1:8b:25:8e:5f:63:c1:a1:69:81:a3:eb:
8a:59:f4:33:44:39:d3:c5:ba:b2:28:cf:7a:39:59:98:77:ab:
cd:18:0f:3d:1f:c8:88:23:dc:f7:27:f7:91:96:84:85:35:1a:
4f:91:d9:b0:c2:49:32:15:bf:7f:d2:a4:9b:33:09:b4:eb:e2:
cc:90:5e:08:cf:60:89:cc:18:57:09:11:2d:26:b4:3b:ea:8d:
35:b8:48:b4:04:65:58:13:86:0e:39:b6:d6:d7:d0:c3:e6:55:
aa:1f:75:59:e1:60:fa:3a:39:18:a1:2f:ec:ec:2c:87:c4:3a:
42:40:02:d3:17:c0:fb:e5:a1:c9:f0:f3:1e:9c:65:f8:2d:d7:
bc:0f:f3:96:74:29:27:8c:8d:d1:53:bb:6c:6e:46:6e:e2:c3:
74:07:94:3d:6a:f7:f6:a2:f8:5c:91:5d:7d:d7:65:84:cd:23:
d7:8b:9d:c2:eb:b3:da:ed:2e:fc:d5:20:67:98:e5:e8:bd:37:
87:23:cd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:18:25 2025 by rpki-client