Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.mft
File: l37KDVyVbeF79pcQRvLrlc5hXik.mft (raw, json)
Hash identifier: TGIobu3ymSmOBZe91Hdh7CbIcUzpkddIvr9aEpHhI88=
Subject key identifier: 77:FA:A4:6F:2E:6A:CC:44:79:EE:47:70:3D:F9:2D:6D:91:4B:D2:81
Authority key identifier: 97:7E:CA:0D:5C:95:6D:E1:7B:F6:97:10:46:F2:EB:95:CE:61:5E:29
Certificate issuer: /CN=977eca0d5c956de17bf6971046f2eb95ce615e29
Certificate serial: 01984776B3426E8E369DC18D46C68549F4C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l37KDVyVbeF79pcQRvLrlc5hXik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.mft
Manifest number: 15FD
Signing time: Sat 26 Jul 2025 16:00:18 +0000
Manifest this update: Sat 26 Jul 2025 16:00:18 +0000
Manifest next update: Sun 27 Jul 2025 16:00:18 +0000
Files and hashes: 1: l37KDVyVbeF79pcQRvLrlc5hXik.crl (hash: QzQ7G+Uoz+RUNB46K/3rePu90K7/WGhPeVEoa7RfChU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.mft
rsync://rpki.ripe.net/repository/DEFAULT/l37KDVyVbeF79pcQRvLrlc5hXik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:b3:42:6e:8e:36:9d:c1:8d:46:c6:85:49:f4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977eca0d5c956de17bf6971046f2eb95ce615e29
Validity
Not Before: Jul 26 16:00:18 2025 GMT
Not After : Jul 27 16:00:18 2025 GMT
Subject: CN=77faa46f2e6acc4479ee47703df92d6d914bd281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b0:2b:72:4e:66:d1:ce:51:36:7e:7e:a0:3e:
e6:ea:e7:e5:06:6e:2c:52:d6:8e:20:38:42:5b:2b:
9f:b9:b8:ad:e9:e1:76:2e:7d:a0:14:d8:19:98:63:
39:21:38:37:79:06:41:1a:ed:9d:0f:e1:e7:bd:9d:
a4:40:94:0e:63:2c:c5:f3:6f:92:14:55:01:a5:71:
41:ba:d6:b4:ce:de:12:09:73:98:ea:a0:9b:99:e4:
89:9e:1f:f9:67:d8:bf:57:d7:29:ad:6f:27:73:86:
27:f8:bd:f7:2a:3a:74:7b:f4:80:53:69:8d:f7:b2:
8f:bf:2a:fd:6f:ad:47:fa:bf:b8:24:18:2a:78:f9:
5b:1e:ad:59:f1:e5:51:b2:99:be:74:fe:2e:c3:cc:
91:8e:a3:d6:da:0b:4a:18:0c:b2:fd:e5:00:61:79:
19:0c:fa:4e:bb:51:e5:19:60:e5:15:fd:aa:94:5d:
3c:c1:d5:fd:5b:58:04:d1:01:05:2a:3c:5c:2b:80:
4d:eb:32:bb:44:35:52:76:39:95:d8:35:02:ef:ca:
8e:f3:98:c2:5f:3f:b1:83:99:09:bf:b4:6a:cc:73:
d9:a0:89:0d:6e:f5:89:f9:36:e7:26:29:86:fb:45:
d1:bb:d3:46:65:d6:fd:f9:63:f8:4a:03:53:15:a7:
59:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FA:A4:6F:2E:6A:CC:44:79:EE:47:70:3D:F9:2D:6D:91:4B:D2:81
X509v3 Authority Key Identifier:
keyid:97:7E:CA:0D:5C:95:6D:E1:7B:F6:97:10:46:F2:EB:95:CE:61:5E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l37KDVyVbeF79pcQRvLrlc5hXik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:3d:8f:8e:74:4a:fa:3f:5a:47:c8:0c:fb:26:44:25:cb:d4:
a4:59:2d:18:d5:a3:35:14:83:e3:82:c9:47:e1:b3:50:2b:36:
c1:d1:2d:c5:ab:b7:a6:26:bf:55:2f:ff:af:66:ec:41:cb:cc:
fe:55:23:c9:a2:da:f2:97:aa:59:78:10:a5:87:f7:23:36:7c:
54:57:91:12:49:9f:f1:f6:e4:ff:80:2f:64:d2:3c:66:d1:18:
dd:05:a3:d6:5f:0e:62:47:29:68:ff:de:f8:de:b5:3b:82:89:
8b:ae:81:e6:96:74:9c:14:dd:d4:80:26:3c:a9:d6:28:9e:ac:
11:0f:99:21:c0:0a:5b:b2:5d:9f:67:be:fc:b6:58:e0:e4:06:
60:66:d5:0b:68:b8:c4:dd:82:bb:e2:6b:4e:7e:c1:95:3d:f6:
5f:be:b2:84:6e:fa:29:d4:cf:80:f2:43:b8:6c:23:53:a8:f8:
49:4e:79:c1:e6:ee:09:2c:bb:f4:d3:6d:22:c3:31:5e:58:44:
df:7d:26:b7:b4:fa:9d:7c:05:c3:26:5e:4a:b0:9b:41:2e:d6:
13:22:1b:dd:e5:aa:6c:9b:83:07:e4:a9:27:37:1d:d5:89:db:
a1:7c:d9:ce:4b:d7:17:97:9d:1c:d6:ae:60:9d:56:2f:67:1d:
01:32:f8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:17:40 2025 by rpki-client