Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
File: 32QSxd3xKOxxSvrqSD6Hsbx01B8.mft (raw, json)
Hash identifier: w51wJRYFp6vzKIEPNlNRV/wLOhTbZ6Lxkq1J8EqDXG0=
Subject key identifier: 24:C6:44:5D:CC:FB:EB:FE:FC:E3:FE:D4:45:EF:1D:B5:83:97:F0:72
Authority key identifier: DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
Certificate issuer: /CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Certificate serial: 019A52D16460AD5CBB3D653D2FE6B584FB7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
Manifest number: 05C8
Signing time: Wed 05 Nov 2025 07:00:45 +0000
Manifest this update: Wed 05 Nov 2025 07:00:45 +0000
Manifest next update: Thu 06 Nov 2025 07:00:45 +0000
Files and hashes: 1: 32QSxd3xKOxxSvrqSD6Hsbx01B8.crl (hash: cwtUyGHBcknSLEAPeNiIo/6KYITTg0p3JIF+QqG8m+c=)
2: NldJhq1MAVdUgbD6n6XKOd_rYuI.roa (hash: nicnFQBAIXmcU10eabjaRC66nw/nEzjS6x4xuq2azqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:64:60:ad:5c:bb:3d:65:3d:2f:e6:b5:84:fb:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Validity
Not Before: Nov 5 07:00:45 2025 GMT
Not After : Nov 6 07:00:45 2025 GMT
Subject: CN=24c6445dccfbebfefce3fed445ef1db58397f072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:13:b5:6d:4d:0e:dd:5d:5e:ee:47:59:42:20:
1f:05:5a:a2:12:46:83:6a:42:9e:21:f6:dd:bf:9e:
43:ef:4e:7f:a6:5f:61:f4:67:a4:e4:60:4b:95:0c:
72:80:78:af:2c:66:e2:93:a9:87:6b:9a:85:59:7d:
8a:c0:98:ba:c7:43:65:11:19:a5:f2:10:4e:c1:a6:
cb:4e:b3:d4:48:8f:fc:a1:b1:26:c9:c1:f3:96:7f:
5c:49:c9:f6:77:35:c1:ca:58:1a:82:fe:d4:28:66:
cd:5e:3f:3a:98:b1:69:4f:f6:00:2c:87:6b:48:6a:
ae:46:6c:bb:c7:38:21:f0:0f:9d:95:2a:47:88:3a:
11:48:02:d1:91:f0:58:40:df:5f:ff:07:d8:ae:4c:
e0:5b:6e:3d:7d:83:5f:be:0f:92:ce:56:1f:fc:d0:
0c:31:25:e7:3b:d6:d6:39:3c:0a:84:24:ac:7a:82:
d6:c3:8b:b5:76:59:a3:8a:ed:79:af:75:74:23:c1:
33:6b:8b:72:d1:14:52:fb:a0:56:68:d6:ea:4c:10:
87:0f:b9:ae:0c:e7:0c:dc:9d:9b:7f:e5:5f:59:79:
a3:0a:f6:c9:e3:dd:ee:22:7e:cb:1d:2a:7e:9f:52:
f7:c7:33:1e:f7:5f:4f:f4:67:e4:e4:1b:74:55:72:
b5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C6:44:5D:CC:FB:EB:FE:FC:E3:FE:D4:45:EF:1D:B5:83:97:F0:72
X509v3 Authority Key Identifier:
keyid:DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:b7:ba:98:00:1f:44:dc:8c:6a:f3:e2:55:b9:19:b1:08:71:
36:74:3f:1f:d8:16:68:1c:7a:f8:e8:b3:d6:e1:b9:25:27:e9:
0e:90:81:68:dd:21:67:db:24:94:c0:fd:c4:83:e6:41:6b:b4:
77:e1:30:e9:db:6e:be:73:9b:62:13:48:db:f4:c0:81:5d:b0:
f4:ba:62:dc:87:9c:a9:a2:a7:f9:56:32:b8:5e:c3:4a:bb:e0:
7d:15:24:e8:29:12:92:ca:e4:99:bc:dd:4a:d5:33:1c:85:66:
00:09:7e:43:d7:d5:73:5f:98:e6:21:46:7f:f9:8e:16:dc:6b:
1f:ff:dd:7f:f1:5a:ae:d1:96:26:80:22:cb:16:a0:c2:d0:f3:
4b:0e:e0:5b:25:6c:c3:ab:85:7a:6e:a3:98:fc:0c:0c:9b:0b:
17:52:1d:3f:09:e9:db:ae:98:50:3d:29:74:00:bb:76:85:e7:
12:c8:69:0e:75:35:41:43:aa:52:19:1d:37:ab:b6:28:f6:08:
6a:76:c2:d2:1b:01:97:ec:67:d3:9f:1e:f8:99:31:a7:3c:92:
7e:85:46:8e:32:ef:0d:79:e8:28:6a:89:cc:da:a3:0b:4c:de:
6d:ef:f8:29:01:75:13:b9:cb:58:66:c8:d7:03:46:a2:17:57:
53:fb:4c:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0WRgrVy7PWU9L+a1hPt6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNjQxMmM1ZGRmMTI4ZWM3MTRhZmFlYTQ4M2U4N2IxYmM3
NGQ0MWYwHhcNMjUxMTA1MDcwMDQ1WhcNMjUxMTA2MDcwMDQ1WjAzMTEwLwYDVQQD
EygyNGM2NDQ1ZGNjZmJlYmZlZmNlM2ZlZDQ0NWVmMWRiNTgzOTdmMDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBO1bU0O3V1e7kdZQiAfBVqiEkaD
akKeIfbdv55D705/pl9h9Gek5GBLlQxygHivLGbik6mHa5qFWX2KwJi6x0NlERml
8hBOwabLTrPUSI/8obEmycHzln9cScn2dzXBylgagv7UKGbNXj86mLFpT/YALIdr
SGquRmy7xzgh8A+dlSpHiDoRSALRkfBYQN9f/wfYrkzgW249fYNfvg+SzlYf/NAM
MSXnO9bWOTwKhCSseoLWw4u1dlmjiu15r3V0I8Eza4ty0RRS+6BWaNbqTBCHD7mu
DOcM3J2bf+VfWXmjCvbJ493uIn7LHSp+n1L3xzMe919P9Gfk5Bt0VXK1iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTGRF3M++v+/OP+1EXvHbWDl/ByMB8GA1UdIwQY
MBaAFN9kEsXd8SjscUr66kg+h7G8dNQfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzJRU3hkM3hLT3h4U3ZycVNENkhzYngwMUI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8xMDFjMDUtYTkxYy00ZmJkLWJkMDct
Zjk1MDQyMGI5ZTA2LzEvMzJRU3hkM3hLT3h4U3ZycVNENkhzYngwMUI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8xMDFjMDUtYTkxYy00ZmJkLWJkMDctZjk1MDQyMGI5ZTA2
LzEvMzJRU3hkM3hLT3h4U3ZycVNENkhzYngwMUI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs7e6mAAf
RNyMavPiVbkZsQhxNnQ/H9gWaBx6+Oiz1uG5JSfpDpCBaN0hZ9sklMD9xIPmQWu0
d+Ew6dtuvnObYhNI2/TAgV2w9Lpi3IecqaKn+VYyuF7DSrvgfRUk6CkSksrkmbzd
StUzHIVmAAl+Q9fVc1+Y5iFGf/mOFtxrH//df/FartGWJoAiyxagwtDzSw7gWyVs
w6uFem6jmPwMDJsLF1IdPwnp266YUD0pdAC7doXnEshpDnU1QUOqUhkdN6u2KPYI
anbC0hsBl+xn058e+JkxpzySfoVGjjLvDXnoKGqJzNqjC0zebe/4KQF1E7nLWGbI
1wNGohdXU/tMrA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:03:53 2025 by rpki-client