Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
File: 37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft (raw, json)
Hash identifier: AktoCLebOmJLcnztbQOQWYoJ+WP8500GDYl5mKThggo=
Subject key identifier: 91:D6:03:9E:78:EA:11:6B:B4:83:33:CB:5E:4F:AE:3B:D1:14:04:73
Authority key identifier: DF:B8:D9:14:05:02:C9:E0:35:30:51:89:BF:65:82:34:DB:14:F5:4C
Certificate issuer: /CN=dfb8d9140502c9e035305189bf658234db14f54c
Certificate serial: 0198548DE871956E6395CF3D918681FC4F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
Manifest number: 09A6
Signing time: Tue 29 Jul 2025 05:00:42 +0000
Manifest this update: Tue 29 Jul 2025 05:00:42 +0000
Manifest next update: Wed 30 Jul 2025 05:00:42 +0000
Files and hashes: 1: 37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl (hash: eV6XTZp0/pgvH7lpfdEa2zU59TAuWPZDSK+Hqh1jodI=)
2: X-fszyfwpMCiMInecgQBQ1yjuwg.roa (hash: kTUUUnBX9dTK9UsKYR9sAWBBjiT4qXYXAYjJbDJFJyQ=)
3: kI_UKMcmunYMY9TjK1VDTbIdCXE.roa (hash: /3d7l1sDA4ix/P9CQv22eTNSFswBDUH2vFeOZFQU5WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:8d:e8:71:95:6e:63:95:cf:3d:91:86:81:fc:4f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb8d9140502c9e035305189bf658234db14f54c
Validity
Not Before: Jul 29 05:00:42 2025 GMT
Not After : Jul 30 05:00:42 2025 GMT
Subject: CN=91d6039e78ea116bb48333cb5e4fae3bd1140473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:94:33:eb:08:c4:1e:3d:8d:ac:ae:a6:3f:d1:
31:cb:39:5e:65:75:e5:b6:46:c7:a6:7a:8d:a6:a4:
3b:69:0a:35:00:8e:d4:bc:6a:a2:ae:7e:83:63:9e:
ad:62:52:66:20:64:23:21:20:aa:36:45:34:55:9e:
ee:2f:e0:f8:26:03:0a:dc:dc:bb:8d:ec:a5:f7:bb:
68:87:df:d4:0e:6d:b5:e2:66:27:fb:62:0f:68:32:
a6:87:e5:cf:a1:83:14:c5:f4:cd:ac:b9:05:f1:be:
69:00:1d:9f:a8:a8:53:1a:bc:1f:f0:4d:7c:51:c5:
d6:19:a7:29:e2:3d:2e:71:0d:eb:28:89:2b:9e:15:
c5:3e:eb:6f:11:0e:e2:a5:74:33:8a:be:58:65:12:
7e:d9:52:25:f2:24:47:51:43:43:cd:04:77:ea:19:
b3:c0:6b:39:75:50:ee:01:4b:84:43:ba:8a:d2:43:
91:03:7b:69:e4:f1:09:6b:e8:15:ea:96:97:ea:15:
d0:37:01:b0:b0:ba:7c:9a:08:e8:ec:3a:33:a6:ae:
09:48:a0:a2:24:82:93:9c:cb:a2:fc:56:de:97:00:
e1:4b:1a:d7:1e:f1:98:c5:6a:d1:c3:3b:1f:e2:b3:
69:71:c9:e7:3e:ea:ff:8c:e2:f2:ba:42:ca:19:93:
bf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D6:03:9E:78:EA:11:6B:B4:83:33:CB:5E:4F:AE:3B:D1:14:04:73
X509v3 Authority Key Identifier:
keyid:DF:B8:D9:14:05:02:C9:E0:35:30:51:89:BF:65:82:34:DB:14:F5:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:84:d3:34:c7:39:50:d1:e4:b5:6e:be:40:92:40:e8:12:70:
b7:2d:d0:ea:b6:a8:03:f3:e8:27:90:8b:0b:61:e3:d3:86:10:
ae:dc:76:d1:c6:43:bb:e5:3b:87:2b:82:2a:00:b2:81:e4:30:
69:01:0a:d9:05:83:2a:4c:4f:1d:d6:c4:13:9e:58:e4:14:ef:
4c:64:a8:2b:2c:f9:7d:3f:83:f9:c8:a2:c9:f6:45:7a:75:b0:
67:e5:f0:8e:6a:a9:5e:de:9f:09:4b:96:32:2a:77:e7:dd:b2:
7a:80:ac:4a:b2:55:9c:82:6a:9b:31:cf:9f:75:26:29:7d:2c:
41:49:39:29:d7:43:06:29:5e:1b:87:f9:32:3b:88:0d:84:cc:
5c:5b:6c:65:40:bc:6a:a6:32:8b:65:02:2e:81:43:33:91:7f:
88:5d:6a:19:84:5d:6c:1c:af:d2:92:cf:68:12:9b:2d:12:6c:
b1:23:d9:4d:b0:38:b3:99:b2:57:c0:eb:e3:b3:90:b6:e7:5b:
45:96:f0:5e:25:67:85:af:58:13:c4:cc:7b:ab:0f:cd:0e:46:
a6:73:7f:b6:7e:0e:5d:b3:90:b6:dc:17:4a:b9:c0:ea:31:0b:
50:05:a9:1e:4c:b5:d8:47:ff:cd:67:71:82:b4:85:58:e7:cc:
80:1c:38:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:13:33 2025 by rpki-client