Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
File: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft (raw, json)
Hash identifier: HY0W4N8Wlg1pSUy3DPugJPo6EPSGjXlv4arwaOqw5OU=
Subject key identifier: 90:C8:E2:E7:0E:C7:91:4A:BD:E7:BE:76:4F:7C:8E:66:76:E4:66:12
Authority key identifier: DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
Certificate issuer: /CN=df6a9267b18b36d828890a86387f310b84c04b63
Certificate serial: 019A4EF5A297C82B23DDF984EAB71DA3FD3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
Manifest number: 0EA6
Signing time: Tue 04 Nov 2025 13:01:52 +0000
Manifest this update: Tue 04 Nov 2025 13:01:52 +0000
Manifest next update: Wed 05 Nov 2025 13:01:52 +0000
Files and hashes: 1: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl (hash: lbYPyVgxZ0CAoRTssjnG3nXKM8/FXeqM6af7/1lnEfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:a2:97:c8:2b:23:dd:f9:84:ea:b7:1d:a3:fd:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6a9267b18b36d828890a86387f310b84c04b63
Validity
Not Before: Nov 4 13:01:52 2025 GMT
Not After : Nov 5 13:01:52 2025 GMT
Subject: CN=90c8e2e70ec7914abde7be764f7c8e6676e46612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5e:ec:dc:97:e4:b7:11:d0:e9:96:95:01:4f:
a9:a7:0b:63:71:49:e0:4f:e2:e7:6b:de:e7:83:33:
9d:bf:b9:59:20:5f:a0:37:bd:96:a3:a1:b4:04:03:
52:50:f8:97:dc:64:a6:9f:28:1e:b9:8c:bf:34:9a:
4f:0b:45:d5:11:0d:ba:e1:13:db:d5:f4:5e:51:11:
ba:d7:60:2b:11:32:8e:04:3e:95:ae:02:b6:56:55:
ef:1b:7d:7c:e4:97:79:3d:e6:3a:7c:40:a3:31:be:
b3:62:8e:c3:a8:03:71:27:69:68:f7:3c:0a:00:03:
b1:5d:53:f1:33:ba:9d:30:ae:93:d0:ea:35:05:12:
0f:bd:cd:67:3c:d1:2f:d2:59:1b:4a:fc:35:65:a2:
2b:36:b2:bf:50:2a:59:4a:b2:a3:43:b5:40:87:16:
e7:8a:f0:54:6e:d9:a1:d4:1c:44:48:89:e8:2f:74:
81:df:6c:0c:62:65:c1:97:46:9d:f0:e5:73:bc:9c:
82:c0:4b:f9:aa:76:a9:06:22:e2:1b:fd:16:bc:e6:
e3:b4:30:9a:40:38:f1:1f:75:62:c6:2f:78:3c:d1:
c6:e8:ce:9e:37:72:c1:cd:f8:7e:2c:c1:7f:4f:11:
9e:60:6b:7f:3b:94:b0:2a:57:26:3c:65:06:ba:89:
e0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C8:E2:E7:0E:C7:91:4A:BD:E7:BE:76:4F:7C:8E:66:76:E4:66:12
X509v3 Authority Key Identifier:
keyid:DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:8f:f3:04:6c:8d:21:ac:55:e4:18:52:8e:a2:0b:8c:9f:87:
c8:cb:80:f8:32:03:ec:0f:dc:1b:1d:2c:5d:ba:82:9c:f8:56:
1c:e8:6a:d9:be:52:15:8d:19:bf:3e:1d:93:27:1d:d0:fa:2d:
5b:27:36:b0:d1:e2:84:7b:b4:f4:09:e2:35:49:a7:bd:fa:b2:
a7:9a:f6:39:1f:00:67:da:76:75:d2:3b:6c:ac:89:77:8f:4e:
05:e4:14:4d:74:fe:36:5b:6c:1f:b5:2b:bf:bf:b7:a3:e8:24:
42:78:50:7b:15:cb:a5:07:d6:7d:a0:6a:4e:cc:1a:67:f9:b4:
84:63:46:1d:e3:74:fe:21:2b:06:0a:a2:8d:bb:dc:36:a0:f9:
ca:9a:ce:63:15:f3:62:55:1f:bf:0a:1f:4b:1a:6d:d3:4e:5b:
99:67:2a:ba:2a:6b:13:a1:02:ae:79:c0:ac:8f:11:4a:15:9b:
05:bf:0c:89:6d:88:35:c8:bb:3a:99:36:b2:ba:3d:fb:ce:77:
e0:95:5e:ef:e7:30:8d:1c:7a:35:27:d2:bc:8f:a9:b1:4a:ba:
5a:bd:7a:f8:ad:e1:c8:53:40:49:16:d4:3e:e1:e1:de:cc:19:
9f:f2:33:63:d8:a0:52:94:5a:b2:4b:20:24:ae:fa:18:76:f0:
f6:ba:44:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:07:40 2025 by rpki-client