Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
File: 32GikiI62a68itgsKlZHX72XqDQ.mft (raw, json)
Hash identifier: rIQDABHK3eYnIMwmzrOofpa41JqPm2/flrEO1ztjh5w=
Subject key identifier: 1F:C4:AF:47:BF:D2:E8:DB:9E:99:DE:25:34:BD:91:61:10:AD:D8:9D
Authority key identifier: DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34
Certificate issuer: /CN=df61a292223ad9aebc8ad82c2a56475fbd97a834
Certificate serial: 01987ED3CF9989434C22613F1479E88A0677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
Manifest number: 0CCB
Signing time: Wed 06 Aug 2025 10:01:07 +0000
Manifest this update: Wed 06 Aug 2025 10:01:07 +0000
Manifest next update: Thu 07 Aug 2025 10:01:07 +0000
Files and hashes: 1: 32GikiI62a68itgsKlZHX72XqDQ.crl (hash: +Eq704fTy+F4WmtUPNy4Q8cFkE4hosHJlM3ekTPkh28=)
2: DmQguxgVyJ_d0tpi3KUPtRcdGUQ.roa (hash: OiuAWrEvvfbOYm4huTJvJrvDJABO3FsTpYDNXs6sb+s=)
3: aI06tjVZeZrIS1TA5LHHtgH2TfE.roa (hash: LKF1KEnQy5/5rD4HRU7tZBGEwLV0sJ0zLyAcVF0BY1c=)
4: gCOrJJaf7HO535LCuEoI7vxf65A.roa (hash: 7Nbxw9zLeIaRzeX3DJv4MIaTHvVYcSTc1CbOKxR59lQ=)
5: k6eyynVladw6I8I9j1dsAe95OA8.roa (hash: A0AAtMX//zpiq0We38ivcj7YmnJWOeaOBnQnV51DCG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:cf:99:89:43:4c:22:61:3f:14:79:e8:8a:06:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df61a292223ad9aebc8ad82c2a56475fbd97a834
Validity
Not Before: Aug 6 10:01:07 2025 GMT
Not After : Aug 7 10:01:07 2025 GMT
Subject: CN=1fc4af47bfd2e8db9e99de2534bd916110add89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:37:a3:42:95:87:40:08:ab:aa:99:ff:62:7d:
2f:41:4c:72:f9:6b:e7:56:c0:db:07:20:a3:3e:93:
63:fe:e7:b3:6b:a3:a7:d0:69:30:6e:fc:f8:2b:00:
38:da:d7:95:a2:08:08:ac:e4:7a:34:ac:ed:c6:f8:
16:58:c5:d3:ab:7f:ad:86:e5:43:cc:df:e5:05:ba:
95:81:3f:66:4d:67:93:04:87:6b:62:01:16:49:7c:
94:40:c1:4e:47:85:d5:e0:3d:85:5f:01:f6:dc:40:
61:1a:df:c9:8d:31:63:c2:41:8b:2f:d6:ff:9b:e3:
4e:d5:9e:69:47:3c:48:13:97:fa:8c:1f:f4:e0:d1:
4c:a0:fe:ef:6f:3c:17:35:88:59:7d:e1:4c:89:78:
ee:14:96:34:99:8d:67:41:f7:c7:fe:03:5b:e2:31:
20:86:d7:d8:47:13:04:95:24:12:bf:b4:69:77:88:
da:67:b7:a1:19:54:8e:48:b4:36:95:99:46:fb:8b:
97:da:01:28:93:8f:bd:f2:c3:47:ac:e4:13:d3:ec:
a6:8f:5a:81:41:db:39:c9:a2:35:c1:f7:c5:8c:82:
27:fe:d2:25:c7:57:9a:c3:a9:65:f0:f6:cf:85:5e:
69:3f:38:22:18:48:73:07:7e:15:24:b7:11:db:b6:
bc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C4:AF:47:BF:D2:E8:DB:9E:99:DE:25:34:BD:91:61:10:AD:D8:9D
X509v3 Authority Key Identifier:
keyid:DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0c:74:f6:fa:82:25:ab:bc:0e:95:6e:72:9b:23:d5:c7:f6:
a4:03:b8:b9:67:e8:72:95:9b:74:0a:2e:77:b8:29:66:ad:11:
ae:e0:9d:94:e3:39:96:e3:29:61:aa:49:41:2c:b7:53:f6:aa:
6e:8d:9d:7f:57:b6:36:32:f8:14:4a:df:27:fb:1a:44:ba:14:
fe:76:36:65:23:86:bd:98:39:5d:3e:d4:4c:ea:14:1d:fc:f8:
38:ce:ad:1f:40:0c:a4:c5:f0:45:ab:52:69:2e:60:32:8a:bb:
8b:aa:55:56:5a:7d:6b:75:68:e0:32:6a:39:7f:fe:f6:53:e9:
00:a0:1b:75:9f:f6:e4:8f:55:61:63:63:fd:78:56:43:b3:d7:
95:cc:ed:58:c8:82:52:52:97:d9:9f:09:9c:d6:4e:f3:6c:fd:
17:8e:fd:8e:d0:15:e1:a3:02:0f:b8:36:66:14:4a:b4:cb:38:
fe:97:ec:46:bd:82:24:38:17:53:d9:12:44:b2:16:91:25:b2:
88:b9:92:ec:b4:ac:bc:dc:e1:06:2c:9c:84:c8:d1:a0:c5:82:
e2:cb:cd:a8:c9:bc:26:08:46:2f:3a:bb:13:fe:04:27:22:3b:
3c:90:37:ef:08:b3:5d:38:d5:28:69:86:36:01:f1:aa:16:c3:
45:f8:84:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+08+ZiUNMImE/FHnoigZ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNjFhMjkyMjIzYWQ5YWViYzhhZDgyYzJhNTY0NzVmYmQ5
N2E4MzQwHhcNMjUwODA2MTAwMTA3WhcNMjUwODA3MTAwMTA3WjAzMTEwLwYDVQQD
EygxZmM0YWY0N2JmZDJlOGRiOWU5OWRlMjUzNGJkOTE2MTEwYWRkODlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTejQpWHQAirqpn/Yn0vQUxy+Wvn
VsDbByCjPpNj/ueza6On0Gkwbvz4KwA42teVoggIrOR6NKztxvgWWMXTq3+thuVD
zN/lBbqVgT9mTWeTBIdrYgEWSXyUQMFOR4XV4D2FXwH23EBhGt/JjTFjwkGLL9b/
m+NO1Z5pRzxIE5f6jB/04NFMoP7vbzwXNYhZfeFMiXjuFJY0mY1nQffH/gNb4jEg
htfYRxMElSQSv7Rpd4jaZ7ehGVSOSLQ2lZlG+4uX2gEok4+98sNHrOQT0+ymj1qB
Qds5yaI1wffFjIIn/tIlx1eaw6ll8PbPhV5pPzgiGEhzB34VJLcR27a80QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/Er0e/0ujbnpneJTS9kWEQrdidMB8GA1UdIwQY
MBaAFN9hopIiOtmuvIrYLCpWR1+9l6g0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzJHaWtpSTYyYTY4aXRnc0tsWkhYNzJYcURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iN2Q4NzUtYjEyYy00ZWQ4LWI4MGYt
NDE0ODdmNGQ0MTcxLzEvMzJHaWtpSTYyYTY4aXRnc0tsWkhYNzJYcURRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9iN2Q4NzUtYjEyYy00ZWQ4LWI4MGYtNDE0ODdmNGQ0MTcx
LzEvMzJHaWtpSTYyYTY4aXRnc0tsWkhYNzJYcURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiwx09vqC
Jau8DpVucpsj1cf2pAO4uWfocpWbdAoud7gpZq0RruCdlOM5luMpYapJQSy3U/aq
bo2df1e2NjL4FErfJ/saRLoU/nY2ZSOGvZg5XT7UTOoUHfz4OM6tH0AMpMXwRatS
aS5gMoq7i6pVVlp9a3Vo4DJqOX/+9lPpAKAbdZ/25I9VYWNj/XhWQ7PXlcztWMiC
UlKX2Z8JnNZO82z9F479jtAV4aMCD7g2ZhRKtMs4/pfsRr2CJDgXU9kSRLIWkSWy
iLmS7LSsvNzhBiychMjRoMWC4svNqMm8JghGLzq7E/4EJyI7PJA37wizXTjVKGmG
NgHxqhbDRfiEBQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 12:32:44 2025 by rpki-client