Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
File: 32QSxd3xKOxxSvrqSD6Hsbx01B8.mft (raw, json)
Hash identifier: Kh4mo3ozpBzIY9ocse9LZo4Z89tcA/JVMvIRRC32Ag4=
Subject key identifier: 4D:32:5F:97:EE:27:1F:9C:F1:C9:D2:77:18:42:A1:F6:E1:6A:A0:1C
Authority key identifier: DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
Certificate issuer: /CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Certificate serial: 019896A4BF8F2222FE02E40CB4CECE61C4EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
Manifest number: 04E2
Signing time: Mon 11 Aug 2025 01:00:35 +0000
Manifest this update: Mon 11 Aug 2025 01:00:35 +0000
Manifest next update: Tue 12 Aug 2025 01:00:35 +0000
Files and hashes: 1: 32QSxd3xKOxxSvrqSD6Hsbx01B8.crl (hash: S+oTTZg3rLyiCxbVxvvKnr90sTiJMbrZQav4WGlNyE4=)
2: NldJhq1MAVdUgbD6n6XKOd_rYuI.roa (hash: nicnFQBAIXmcU10eabjaRC66nw/nEzjS6x4xuq2azqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a4:bf:8f:22:22:fe:02:e4:0c:b4:ce:ce:61:c4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Validity
Not Before: Aug 11 01:00:35 2025 GMT
Not After : Aug 12 01:00:35 2025 GMT
Subject: CN=4d325f97ee271f9cf1c9d2771842a1f6e16aa01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ae:b1:81:59:c2:bd:34:a7:fa:97:5b:5a:f4:
64:ac:e0:a0:2c:31:11:3f:7b:e7:5a:91:4e:93:b3:
81:da:7a:bd:9e:61:0e:61:f1:2d:98:16:d7:be:1c:
a7:8e:2f:8f:46:fd:a6:0f:e1:cd:36:ab:5a:0a:d3:
1b:a0:c3:23:ed:f0:fa:e3:fa:5b:a0:f5:7f:a4:50:
d5:79:3b:57:ab:97:f0:3c:db:50:4a:4b:2a:7c:ef:
d6:60:b1:f5:6e:fc:e1:0f:0d:25:0a:6e:15:40:8d:
9d:e9:df:68:52:89:0a:52:3a:dd:76:b2:dd:24:21:
ba:ba:39:4c:0d:b4:7c:7e:9d:37:4a:1c:3a:91:22:
21:31:12:2a:ae:59:7e:94:99:ff:da:39:74:8e:85:
cc:cf:78:b9:fa:7e:de:75:c1:30:ce:b0:24:ba:6b:
d3:45:66:7b:a7:76:84:c4:9c:ed:4f:c8:91:41:07:
ae:70:7d:93:d8:bd:2c:8e:ab:fb:65:70:2d:51:78:
72:83:b0:9a:4a:1d:38:08:b0:29:9f:e6:99:4f:a3:
e3:34:21:c4:05:3f:79:d0:4f:63:c4:fe:d3:3e:43:
82:1e:76:d2:b3:50:2e:a7:75:02:f9:9a:0f:1a:15:
58:78:69:38:0c:f8:d1:90:f5:8d:e8:61:d5:f8:00:
b4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:32:5F:97:EE:27:1F:9C:F1:C9:D2:77:18:42:A1:F6:E1:6A:A0:1C
X509v3 Authority Key Identifier:
keyid:DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:27:14:92:54:d2:90:7f:a7:4e:59:9e:89:f8:79:3f:8b:09:
c6:e5:5e:12:71:87:35:81:44:ce:e1:2f:4d:e6:b2:60:43:b8:
41:94:2a:b9:d7:fd:2e:98:bb:ec:0c:f5:27:a7:13:6c:a7:f2:
4b:9c:d0:5c:f9:52:0c:fc:76:a0:d8:6a:4a:16:d8:91:aa:55:
55:e4:8d:0f:03:92:51:18:90:48:a6:5d:96:b5:1f:5f:59:20:
7a:d3:65:f6:e1:b2:07:db:c5:f0:b8:a1:b0:c1:5e:1f:49:30:
15:9e:d9:dd:65:ed:2e:b2:f4:a4:96:d2:10:8c:96:d1:d6:70:
3f:f9:98:de:f0:53:c0:59:66:11:59:39:0f:af:74:c5:3f:94:
6c:2d:78:57:2e:cb:2f:4d:e4:a4:3b:b1:66:49:35:0d:38:66:
f9:ce:3e:6e:90:bd:6a:d4:0b:b5:1e:59:7e:6a:5f:5e:ca:4c:
2f:93:aa:ca:3b:5a:44:25:1d:4f:a2:2b:01:7e:fe:02:fa:77:
34:66:b7:6f:37:49:af:80:21:b1:c3:3d:f8:f4:f5:ab:19:e0:
f6:cb:19:ce:6b:ed:b7:5a:cd:4b:68:b6:ba:4c:7e:b8:88:f7:
de:37:a9:95:59:25:ee:93:36:1c:8a:0f:bd:0f:60:37:a0:19:
ec:b7:01:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWpL+PIiL+AuQMtM7OYcTsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNjQxMmM1ZGRmMTI4ZWM3MTRhZmFlYTQ4M2U4N2IxYmM3
NGQ0MWYwHhcNMjUwODExMDEwMDM1WhcNMjUwODEyMDEwMDM1WjAzMTEwLwYDVQQD
Eyg0ZDMyNWY5N2VlMjcxZjljZjFjOWQyNzcxODQyYTFmNmUxNmFhMDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta6xgVnCvTSn+pdbWvRkrOCgLDER
P3vnWpFOk7OB2nq9nmEOYfEtmBbXvhynji+PRv2mD+HNNqtaCtMboMMj7fD64/pb
oPV/pFDVeTtXq5fwPNtQSksqfO/WYLH1bvzhDw0lCm4VQI2d6d9oUokKUjrddrLd
JCG6ujlMDbR8fp03Shw6kSIhMRIqrll+lJn/2jl0joXMz3i5+n7edcEwzrAkumvT
RWZ7p3aExJztT8iRQQeucH2T2L0sjqv7ZXAtUXhyg7CaSh04CLApn+aZT6PjNCHE
BT950E9jxP7TPkOCHnbSs1Aup3UC+ZoPGhVYeGk4DPjRkPWN6GHV+AC0/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0yX5fuJx+c8cnSdxhCofbhaqAcMB8GA1UdIwQY
MBaAFN9kEsXd8SjscUr66kg+h7G8dNQfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzJRU3hkM3hLT3h4U3ZycVNENkhzYngwMUI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8xMDFjMDUtYTkxYy00ZmJkLWJkMDct
Zjk1MDQyMGI5ZTA2LzEvMzJRU3hkM3hLT3h4U3ZycVNENkhzYngwMUI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8xMDFjMDUtYTkxYy00ZmJkLWJkMDctZjk1MDQyMGI5ZTA2
LzEvMzJRU3hkM3hLT3h4U3ZycVNENkhzYngwMUI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnycUklTS
kH+nTlmeifh5P4sJxuVeEnGHNYFEzuEvTeayYEO4QZQqudf9Lpi77Az1J6cTbKfy
S5zQXPlSDPx2oNhqShbYkapVVeSNDwOSURiQSKZdlrUfX1kgetNl9uGyB9vF8Lih
sMFeH0kwFZ7Z3WXtLrL0pJbSEIyW0dZwP/mY3vBTwFlmEVk5D690xT+UbC14Vy7L
L03kpDuxZkk1DThm+c4+bpC9atQLtR5ZfmpfXspML5OqyjtaRCUdT6IrAX7+Avp3
NGa3bzdJr4AhscM9+PT1qxng9ssZzmvtt1rNS2i2ukx+uIj33jeplVkl7pM2HIoP
vQ9gN6AZ7LcBZA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:24:34 2025 by rpki-client