Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
File: 32GikiI62a68itgsKlZHX72XqDQ.mft (raw, json)
Hash identifier: JeG/SS74bV7dm1b01p3mjcTKzc1Qcq7raW9npZkVufg=
Subject key identifier: 83:8C:34:23:E4:94:30:0C:0C:20:E5:1F:07:C1:9D:A1:C3:42:46:AB
Authority key identifier: DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34
Certificate issuer: /CN=df61a292223ad9aebc8ad82c2a56475fbd97a834
Certificate serial: 0197726432CABB932932569DC97A4756C087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
Manifest number: 0C40
Signing time: Sun 15 Jun 2025 07:00:58 +0000
Manifest this update: Sun 15 Jun 2025 07:00:58 +0000
Manifest next update: Mon 16 Jun 2025 07:00:58 +0000
Files and hashes: 1: 32GikiI62a68itgsKlZHX72XqDQ.crl (hash: 6sko3UKxsiRV77O9W8gNKe0HAlgMI6GMbrTcblNlv0A=)
2: DmQguxgVyJ_d0tpi3KUPtRcdGUQ.roa (hash: OiuAWrEvvfbOYm4huTJvJrvDJABO3FsTpYDNXs6sb+s=)
3: aI06tjVZeZrIS1TA5LHHtgH2TfE.roa (hash: LKF1KEnQy5/5rD4HRU7tZBGEwLV0sJ0zLyAcVF0BY1c=)
4: gCOrJJaf7HO535LCuEoI7vxf65A.roa (hash: 7Nbxw9zLeIaRzeX3DJv4MIaTHvVYcSTc1CbOKxR59lQ=)
5: k6eyynVladw6I8I9j1dsAe95OA8.roa (hash: A0AAtMX//zpiq0We38ivcj7YmnJWOeaOBnQnV51DCG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:64:32:ca:bb:93:29:32:56:9d:c9:7a:47:56:c0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df61a292223ad9aebc8ad82c2a56475fbd97a834
Validity
Not Before: Jun 15 07:00:58 2025 GMT
Not After : Jun 16 07:00:58 2025 GMT
Subject: CN=838c3423e494300c0c20e51f07c19da1c34246ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fd:fc:71:71:ba:59:c9:9d:0d:e8:03:c3:81:
3c:6d:0e:34:66:a0:58:35:2c:ee:d7:48:e0:68:7c:
e1:fd:75:9b:5d:fe:d9:cc:2f:0e:05:ac:2c:ac:bf:
b2:b5:19:42:3d:f8:5c:f1:1d:39:aa:9c:9f:23:b8:
c9:1a:26:23:2a:b4:4d:ba:93:0f:29:1b:ec:a8:af:
29:32:7d:48:49:41:ab:c8:33:0b:4a:ed:ef:a6:4a:
86:f9:e9:fd:8e:f2:79:d2:93:b1:45:13:f2:56:34:
9b:f4:bd:60:a0:31:54:43:a2:5a:55:51:b7:a0:57:
2a:03:ef:8d:c2:ff:d2:9e:b7:a4:93:36:f5:db:5d:
d1:db:38:bf:96:95:f9:b5:8d:26:fe:96:7d:6c:69:
2e:33:ca:59:91:dd:af:9a:4b:d2:be:80:eb:88:9c:
93:b2:fd:35:22:0a:4d:10:c7:2e:41:fd:b6:03:08:
80:69:86:66:c2:75:99:0d:30:9c:46:c9:c7:35:fb:
23:fd:ea:95:26:51:a3:04:38:e6:51:da:de:15:01:
fc:a0:41:c6:68:c5:a2:70:40:bc:fe:4e:79:f9:e7:
c1:c5:07:35:b9:01:0d:ef:32:1f:0b:eb:e6:7a:a3:
ab:b0:5f:0b:b1:f4:98:01:01:d1:21:b4:ab:08:75:
20:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8C:34:23:E4:94:30:0C:0C:20:E5:1F:07:C1:9D:A1:C3:42:46:AB
X509v3 Authority Key Identifier:
keyid:DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:fe:06:73:a7:fb:3f:57:b6:3e:cd:99:c2:d4:91:69:9d:06:
43:10:8b:59:74:35:6e:f6:ff:98:e2:27:36:68:db:0f:ae:2c:
b8:68:a7:aa:ae:87:73:66:71:e3:6c:83:d6:e1:09:d6:c0:45:
ea:64:74:42:cd:0e:5f:4b:d0:6e:e8:ca:71:c2:f0:ce:9e:2f:
da:f9:ea:20:ac:bb:32:eb:f0:2f:2b:03:eb:97:5e:f2:5b:cd:
9b:65:32:02:5b:ab:03:f3:08:16:6c:d8:54:2e:09:99:3b:dc:
50:82:c5:35:1b:d9:0a:45:7e:54:ee:19:2f:61:36:5e:48:cc:
7f:ac:16:b3:3e:e3:4e:1e:a1:99:71:44:60:94:cf:21:4c:65:
a4:86:bb:44:92:b2:33:c4:04:ae:15:0a:de:cc:8d:41:c6:d7:
68:cd:ef:6c:f2:5b:41:8a:a7:8b:3d:dd:d6:4d:67:49:8d:b3:
c2:84:77:21:74:51:89:e5:af:1c:7f:ec:d4:dd:85:23:74:45:
7d:33:33:06:ab:87:2b:bc:7a:7f:71:0c:9f:58:04:d4:fa:0b:
3e:89:fc:80:3b:67:43:a0:93:4e:77:1f:1d:8c:f8:09:fb:8a:
94:30:f6:1f:b2:5e:82:c8:42:87:9c:ab:49:f1:84:2a:41:d9:
3e:a6:77:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:41:39 2025 by rpki-client