Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
File: 36JPgpi-GMimnxgSjwZOcAPh090.mft (raw, json)
Hash identifier: PTJLZgmL2riaBuAihVWqPALReC7D478d4KXqwTzvYno=
Subject key identifier: 32:C3:22:90:41:17:16:14:9C:F1:A4:10:17:AF:49:86:54:01:27:B7
Authority key identifier: DF:A2:4F:82:98:BE:18:C8:A6:9F:18:12:8F:06:4E:70:03:E1:D3:DD
Certificate issuer: /CN=dfa24f8298be18c8a69f18128f064e7003e1d3dd
Certificate serial: 01987AF6EDE7E3075552E68FC3FE19EBCA0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
Manifest number: 0D10
Signing time: Tue 05 Aug 2025 16:00:59 +0000
Manifest this update: Tue 05 Aug 2025 16:00:59 +0000
Manifest next update: Wed 06 Aug 2025 16:00:59 +0000
Files and hashes: 1: 36JPgpi-GMimnxgSjwZOcAPh090.crl (hash: ycJy+baKPf64gct6HRL2oRLXZiFoX09y8BhqzSO0Je0=)
2: Ng0Z_Y8YOqJU-aJwUaovvEl0tDk.roa (hash: hZn0EBlBpjbO2T+dcLbeLS+VLWtfhrO+ME9lcig54Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:f6:ed:e7:e3:07:55:52:e6:8f:c3:fe:19:eb:ca:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfa24f8298be18c8a69f18128f064e7003e1d3dd
Validity
Not Before: Aug 5 16:00:59 2025 GMT
Not After : Aug 6 16:00:59 2025 GMT
Subject: CN=32c32290411716149cf1a41017af4986540127b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1d:32:68:37:4a:18:6c:a5:78:1b:6d:e0:14:
c3:4b:87:7d:a4:64:44:62:65:bc:60:11:3a:63:7d:
7a:46:a8:ee:6c:88:20:8c:77:1c:61:9d:92:89:b9:
ab:03:48:82:b3:8f:ad:7c:00:d2:44:68:ab:95:57:
6c:c4:5d:6d:df:79:de:59:76:06:53:e9:c1:d1:f8:
c8:3a:67:b0:51:ed:1f:3c:a4:5a:13:d9:cf:16:2a:
89:9d:71:7c:d9:70:50:0f:6d:91:c0:43:fc:a6:db:
b4:86:77:1d:db:5f:ac:38:e5:39:b7:8c:19:06:b5:
83:01:3c:2f:40:00:00:0a:eb:da:cd:9c:3c:4d:c3:
b6:2e:55:7d:58:5a:e6:a2:0c:1c:d4:e1:55:c4:b9:
7d:8d:8d:95:64:0f:67:3f:b9:90:b7:78:3d:9a:93:
82:99:35:74:3c:fc:ce:02:8a:52:c5:d2:3a:14:8b:
d9:18:10:b5:d5:87:76:58:7b:73:4a:d3:a1:47:95:
a8:93:53:20:53:4d:9c:68:d1:c3:61:4a:08:36:a6:
c8:db:82:72:8a:d5:61:4c:50:7b:02:93:9e:e0:24:
2c:10:82:80:63:48:c6:d4:75:c8:6c:13:a5:79:77:
72:e7:df:3a:bd:9b:2c:ca:92:9b:a0:4a:08:b8:6a:
62:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C3:22:90:41:17:16:14:9C:F1:A4:10:17:AF:49:86:54:01:27:B7
X509v3 Authority Key Identifier:
keyid:DF:A2:4F:82:98:BE:18:C8:A6:9F:18:12:8F:06:4E:70:03:E1:D3:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:3d:91:e2:56:10:94:51:98:94:a4:53:8e:c5:1e:6f:eb:51:
61:7a:e6:1d:f6:63:b3:07:46:9c:2e:32:61:e1:bd:b5:bf:c6:
73:76:cf:0f:75:28:00:7e:f3:09:95:c1:f4:5a:c2:05:ab:79:
8f:8d:53:cf:c6:65:ff:e7:d4:cb:0a:c1:44:ac:1d:ab:2f:44:
cb:b7:89:4c:99:01:fb:72:40:8f:05:d9:89:62:39:13:76:07:
29:ca:98:2d:9d:da:34:7a:90:d2:2e:b2:36:14:cf:92:d0:59:
49:00:45:bf:2e:50:ff:97:4d:e0:b4:d9:f6:d1:62:03:b8:01:
2f:c8:c8:12:84:d1:c2:03:d1:1f:9b:dd:cd:d4:18:a5:df:16:
e1:82:6b:90:ba:0d:db:77:78:64:d8:ec:52:af:5c:02:58:ce:
43:0e:74:36:49:bc:7c:a7:90:b4:48:7b:f5:9c:13:e5:a1:02:
2b:6e:1a:2b:1d:1f:ef:7f:12:8a:39:89:84:9d:51:e3:04:70:
50:72:47:d5:7d:63:2f:e9:2c:5c:85:e5:b3:60:dc:04:53:9a:
b7:92:78:27:22:09:5c:39:1a:4a:9a:a0:57:67:3a:9f:bb:55:
32:80:97:a4:81:15:09:3a:bd:09:1a:81:ab:38:41:d7:eb:fc:
42:71:15:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:16:43 2025 by rpki-client