Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
File: 32K78V3jRKzbX3gARQ8sgteX15g.mft (raw, json)
Hash identifier: FeTkXDuKvlCABZ+RILPej9CYpnK9y0sBaRBOAEuXR9k=
Subject key identifier: 02:9E:FF:65:98:A7:70:94:29:D0:67:B8:72:C8:98:C4:24:91:75:36
Authority key identifier: DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
Certificate issuer: /CN=df62bbf15de344acdb5f7800450f2c82d797d798
Certificate serial: 01977F7AC6FAFD831B0714D9227F30261C42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
Manifest number: 0C2B
Signing time: Tue 17 Jun 2025 20:00:42 +0000
Manifest this update: Tue 17 Jun 2025 20:00:42 +0000
Manifest next update: Wed 18 Jun 2025 20:00:42 +0000
Files and hashes: 1: 32K78V3jRKzbX3gARQ8sgteX15g.crl (hash: dhnpZuOVPbh2wRpT606nWM9XTMb34sGayea6Qhuqf/4=)
2: oOmlEIPuZj-euGQgaSJSIdcSgws.roa (hash: 4HVEBIShSrKuBB15YN2IPkpfbl2tZhoTqa30YNiE+ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:7a:c6:fa:fd:83:1b:07:14:d9:22:7f:30:26:1c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df62bbf15de344acdb5f7800450f2c82d797d798
Validity
Not Before: Jun 17 20:00:42 2025 GMT
Not After : Jun 18 20:00:42 2025 GMT
Subject: CN=029eff6598a7709429d067b872c898c424917536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1e:d4:ee:6a:00:30:22:9a:5e:dd:56:11:ab:
48:06:9f:ac:32:e4:bd:44:d4:98:66:1c:8f:89:18:
2c:99:bb:93:50:10:c6:ea:fb:b8:51:db:3e:bb:20:
42:20:05:77:82:85:36:31:1b:b8:19:65:c4:dc:5e:
7a:80:67:cb:b4:a4:92:ac:c2:e4:2a:f7:5a:01:82:
d1:e0:f4:23:ea:e8:d5:08:53:26:64:42:54:49:70:
0f:b4:6d:80:e0:16:af:76:d3:7b:0f:2a:19:f3:5a:
5c:0b:c3:22:a1:15:a7:f9:c5:a2:2b:6a:37:39:4e:
11:ca:75:b0:d7:94:49:14:36:e3:15:d3:ed:9e:39:
c9:3d:56:bb:ca:17:da:03:29:83:87:ee:49:ad:a9:
bd:8b:71:ef:10:15:1f:4a:39:c0:06:ed:5e:f4:66:
09:e7:00:a2:b6:ea:be:e4:f5:86:b3:5b:d9:e3:c2:
84:e0:ec:41:bc:8c:24:6e:4f:f4:80:59:5a:61:e8:
bb:19:93:52:9f:f7:93:8e:27:69:1a:d9:66:af:5a:
3f:65:33:d3:c6:7a:c6:8c:a2:c6:02:81:de:37:f0:
05:f5:ba:44:67:6c:99:73:e2:9b:64:59:6f:58:9f:
d0:f3:d9:56:37:ea:a8:fd:74:58:64:f3:6d:d7:f1:
dd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:9E:FF:65:98:A7:70:94:29:D0:67:B8:72:C8:98:C4:24:91:75:36
X509v3 Authority Key Identifier:
keyid:DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:cf:f1:c3:d8:7e:e3:8b:dd:fa:37:88:d8:96:80:62:dd:6b:
4d:38:58:8f:bd:28:b2:d2:45:01:4b:4c:43:a7:98:52:fc:68:
3e:19:97:47:8f:a7:64:c8:8f:69:de:fd:a7:39:10:54:24:12:
43:dd:98:63:d8:5a:59:bb:2d:d6:08:17:f0:43:97:83:8c:9f:
a6:50:b4:06:84:f1:24:a2:e8:5e:32:f9:cc:a7:25:8b:30:67:
0d:0f:5c:23:dd:b3:02:fe:61:a9:52:8f:f7:10:04:fd:6d:90:
3f:97:6c:47:66:b8:7e:48:1c:9c:cf:6d:62:00:76:4e:47:f4:
c3:ae:4b:dd:ed:65:c9:07:77:1c:39:1f:28:e8:85:da:b6:a7:
72:95:18:3e:22:5f:14:a2:e6:73:0f:c1:f2:c5:e8:0b:97:ae:
cd:c4:36:16:75:e0:ce:c5:eb:b3:2a:59:0f:5d:c8:eb:63:06:
78:e7:01:22:ac:2c:b8:fa:1a:4f:ac:34:9c:e2:f4:45:46:b0:
a3:a8:26:18:55:cb:19:9e:8c:55:e7:d5:fd:63:48:45:b1:ca:
af:15:2d:37:cd:53:40:6b:3e:21:2f:3b:77:57:69:8c:2b:90:
a0:4e:f0:17:71:e6:67:5c:f6:2d:3b:53:cb:5c:75:60:1f:0d:
01:0c:69:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:44:45 2025 by rpki-client