Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
File: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft (raw, json)
Hash identifier: iFWSNB5q5iqidQBL/uxKvDB5armuu596y11ZDeVgEE0=
Subject key identifier: E0:FD:7E:78:5D:42:34:F8:E2:BE:5B:76:6E:A3:01:13:2E:0C:32:1E
Authority key identifier: DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
Certificate issuer: /CN=df6a9267b18b36d828890a86387f310b84c04b63
Certificate serial: 01988EEB6E75BE6397B5BA3DCB802894A8D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
Manifest number: 0DBE
Signing time: Sat 09 Aug 2025 13:00:50 +0000
Manifest this update: Sat 09 Aug 2025 13:00:50 +0000
Manifest next update: Sun 10 Aug 2025 13:00:50 +0000
Files and hashes: 1: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl (hash: cYr0oO14niSKiwJf4Q5KEYYvOZ0zjotp2pqVGCBmeiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:eb:6e:75:be:63:97:b5:ba:3d:cb:80:28:94:a8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6a9267b18b36d828890a86387f310b84c04b63
Validity
Not Before: Aug 9 13:00:50 2025 GMT
Not After : Aug 10 13:00:50 2025 GMT
Subject: CN=e0fd7e785d4234f8e2be5b766ea301132e0c321e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a0:9d:9c:81:2e:81:1f:8a:9a:48:a7:5f:28:
a7:bc:c6:2a:f0:62:50:04:88:8e:9a:6a:25:55:6a:
ba:1a:00:e2:0e:cc:03:36:dc:7b:ed:6c:1a:09:b4:
e9:51:8f:7b:9c:61:a3:14:73:c8:c6:a8:e3:45:0d:
3a:7e:d3:bf:84:f6:d4:5b:1f:2c:d0:1c:ec:01:7d:
be:f8:48:2e:19:61:5f:6f:d0:1f:21:44:7c:78:ae:
84:e4:8c:65:53:0c:ca:0f:d2:9a:42:ad:60:53:a4:
53:72:c7:f0:30:81:0f:a9:46:b9:8c:d6:20:e6:d5:
7c:05:a7:5e:36:f9:27:76:42:ff:b6:eb:7d:d6:d3:
e0:94:33:17:37:93:c3:64:14:49:5b:a4:5c:f1:de:
b4:33:09:30:f8:36:de:2a:93:c3:80:31:54:66:f5:
fb:3f:62:8d:64:09:c2:ac:9e:a3:af:d7:90:f4:98:
ec:38:51:eb:ac:d7:80:0c:61:88:38:d3:c9:49:3f:
ab:6d:91:2b:08:b3:52:f1:d8:94:c9:4a:64:bb:db:
08:f4:2b:bd:a5:14:23:f1:52:a1:38:63:9d:f3:56:
6d:49:21:f1:12:47:f9:e9:dd:91:51:94:a2:f4:ab:
f1:02:bc:ec:d1:ad:1d:32:b3:36:44:d4:fa:2e:3a:
1e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:FD:7E:78:5D:42:34:F8:E2:BE:5B:76:6E:A3:01:13:2E:0C:32:1E
X509v3 Authority Key Identifier:
keyid:DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c5:b3:e9:9d:58:e7:cb:c2:2b:98:90:39:29:38:6b:10:4f:
2d:7b:0d:de:4b:c0:49:b4:2e:8d:b0:8c:48:28:a3:29:83:fb:
dd:68:c2:75:ac:c4:68:a8:53:ae:3d:0b:76:1f:2f:f9:e1:c0:
a8:c8:f5:0c:32:65:02:43:3e:b1:b6:5e:47:79:e9:d3:10:33:
cb:88:1a:f0:aa:1b:3a:3d:4f:4b:bb:bd:27:3f:b0:2b:39:65:
83:56:47:cf:02:4c:9e:62:1c:3b:22:ac:10:69:e8:e8:1f:89:
5a:ef:43:62:9f:08:c8:59:6a:fd:3d:ad:d7:1f:d3:03:14:d9:
26:c7:fb:95:bd:6e:7e:99:21:e7:bf:02:de:48:5a:44:89:30:
1a:1e:12:29:a2:27:cc:c6:4a:10:0e:2a:10:84:d0:69:f4:d9:
66:cc:1b:df:b0:12:37:99:79:7d:bf:89:04:7a:da:e1:1b:3b:
2e:71:d2:43:7b:61:65:1b:c6:ad:b2:a4:82:68:9d:e6:e3:ac:
2f:76:3a:5b:cf:12:1f:ed:74:21:b8:5f:f2:53:c6:aa:e8:e4:
c1:65:fd:84:f3:57:69:dc:8c:e0:2e:9c:79:93:23:48:2d:01:
bf:ce:d4:e9:a8:a2:a6:4c:90:8c:07:88:d5:99:fb:d3:a8:54:
fa:cc:76:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:35:58 2025 by rpki-client