Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
File: 32GikiI62a68itgsKlZHX72XqDQ.mft (raw, json)
Hash identifier: Tbm57qpHTPtvLxWR7R3bEx0+ftYNDZlieoBNegRs48U=
Subject key identifier: 38:71:F6:54:70:39:22:C5:F5:FA:CF:40:2A:91:B9:1E:E3:94:AD:1A
Authority key identifier: DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34
Certificate issuer: /CN=df61a292223ad9aebc8ad82c2a56475fbd97a834
Certificate serial: 019A4E189DBDE2727211153339CD7852E918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
Manifest number: 0DBB
Signing time: Tue 04 Nov 2025 09:00:27 +0000
Manifest this update: Tue 04 Nov 2025 09:00:27 +0000
Manifest next update: Wed 05 Nov 2025 09:00:27 +0000
Files and hashes: 1: 32GikiI62a68itgsKlZHX72XqDQ.crl (hash: 5844hFehAGP9jiQvEK/NCH30ER8QWACeqxx6ZlQdWWA=)
2: DmQguxgVyJ_d0tpi3KUPtRcdGUQ.roa (hash: OiuAWrEvvfbOYm4huTJvJrvDJABO3FsTpYDNXs6sb+s=)
3: aI06tjVZeZrIS1TA5LHHtgH2TfE.roa (hash: LKF1KEnQy5/5rD4HRU7tZBGEwLV0sJ0zLyAcVF0BY1c=)
4: gCOrJJaf7HO535LCuEoI7vxf65A.roa (hash: 7Nbxw9zLeIaRzeX3DJv4MIaTHvVYcSTc1CbOKxR59lQ=)
5: k6eyynVladw6I8I9j1dsAe95OA8.roa (hash: A0AAtMX//zpiq0We38ivcj7YmnJWOeaOBnQnV51DCG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:9d:bd:e2:72:72:11:15:33:39:cd:78:52:e9:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df61a292223ad9aebc8ad82c2a56475fbd97a834
Validity
Not Before: Nov 4 09:00:27 2025 GMT
Not After : Nov 5 09:00:27 2025 GMT
Subject: CN=3871f654703922c5f5facf402a91b91ee394ad1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2b:cb:3b:a1:ad:cd:90:dc:a6:44:de:48:4d:
c1:37:f8:07:3f:15:1b:eb:59:b5:d5:e9:c3:da:14:
6b:b5:9f:ee:fb:48:86:e0:0d:29:fb:21:f1:ef:fc:
81:15:44:b4:12:cc:24:75:66:c7:e4:ab:2e:25:c4:
9f:ea:7b:1a:68:83:4e:4b:ab:49:71:bd:66:07:07:
36:27:6d:a1:a9:9d:4a:1c:ea:84:84:d1:86:71:a8:
84:00:ec:49:74:aa:fb:c2:e2:ea:06:cd:ed:0a:4c:
a4:92:13:8d:32:5c:c1:f9:a8:d9:8d:60:6f:03:8c:
ef:85:6b:de:20:e0:62:db:c1:09:65:19:46:af:da:
7a:d6:9f:08:5e:eb:01:06:23:e1:9b:15:17:4a:2c:
64:cd:37:3c:dc:85:00:70:f5:fc:cf:c8:09:04:ed:
66:39:5d:d1:cb:19:ac:8b:b0:ae:ea:ad:26:15:64:
80:ce:11:df:54:a9:13:d1:75:1d:a4:d4:7c:df:56:
2f:c1:79:bc:3f:fa:ad:3f:5e:06:23:18:24:5e:69:
5e:b4:ee:4d:b7:1d:ab:dd:57:82:49:0c:ed:40:4e:
d6:51:f2:53:20:a2:5e:9c:b6:f2:14:92:6f:cd:f5:
47:3f:b8:30:bf:b7:94:cc:3d:c5:1b:97:2e:5d:c0:
05:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:71:F6:54:70:39:22:C5:F5:FA:CF:40:2A:91:B9:1E:E3:94:AD:1A
X509v3 Authority Key Identifier:
keyid:DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:57:a3:50:6c:3b:9c:80:47:a0:93:f2:0a:cc:f1:f2:97:e0:
26:d4:3e:6f:ac:0f:53:5d:1b:a4:dc:c1:9f:9d:63:da:0a:bc:
38:fd:03:a2:42:80:26:71:f4:d5:da:0e:41:f1:c8:05:74:c2:
15:71:17:66:d9:57:ce:49:8f:dd:92:06:4e:40:48:27:6c:2d:
d5:88:a8:15:0e:5f:1e:b3:72:6a:2c:25:72:3c:54:8a:67:56:
46:bf:9a:53:48:90:82:52:17:31:28:ab:7d:51:2d:9a:7e:7a:
4a:ee:c4:fe:c9:01:b6:bf:e6:1a:8b:7e:df:a7:af:1a:32:a3:
1a:95:0e:ea:83:53:b5:7f:a7:42:0f:0e:a3:f9:36:12:9d:17:
32:4b:24:34:02:54:3c:bf:41:a3:ad:86:46:5f:88:82:38:79:
8e:9f:22:be:1d:3d:71:5e:60:99:06:a8:8b:5d:6a:05:89:ac:
fa:ed:e5:ef:c9:8f:6e:f7:11:f9:19:87:42:e6:b7:10:88:23:
f7:39:6f:3b:ba:13:f5:5c:8b:6e:b7:ab:75:52:05:69:49:c1:
e3:98:da:fc:c3:9a:f9:fd:84:1b:15:dd:98:56:d3:83:9e:df:
47:93:1f:29:7c:bf:94:26:5d:c2:d2:99:e6:49:8f:7c:fb:9c:
7f:c6:f5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:23 2025 by rpki-client