Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
File: R37BXKT5JNlmlnVFEk9lUxDSyXM.mft (raw, json)
Hash identifier: TpI5gkNp3mnfhy+YiGdKrh8WzZv5UEhSGK7o9CiSzv0=
Subject key identifier: 06:FD:5C:38:E1:C6:97:04:86:AD:6B:81:D4:14:7D:05:E3:51:85:2E
Authority key identifier: 47:7E:C1:5C:A4:F9:24:D9:66:96:75:45:12:4F:65:53:10:D2:C9:73
Certificate issuer: /CN=477ec15ca4f924d966967545124f655310d2c973
Certificate serial: 0198507A9DD84587544CC42BFFBF9E9A2E44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
Manifest number: 0564
Signing time: Mon 28 Jul 2025 10:01:09 +0000
Manifest this update: Mon 28 Jul 2025 10:01:09 +0000
Manifest next update: Tue 29 Jul 2025 10:01:09 +0000
Files and hashes: 1: R37BXKT5JNlmlnVFEk9lUxDSyXM.crl (hash: Lh6ZZVaNCsGpX3YwC4OLAWXgj1+j75PBpgWc1OtMbx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:50:7a:9d:d8:45:87:54:4c:c4:2b:ff:bf:9e:9a:2e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477ec15ca4f924d966967545124f655310d2c973
Validity
Not Before: Jul 28 10:01:09 2025 GMT
Not After : Jul 29 10:01:09 2025 GMT
Subject: CN=06fd5c38e1c6970486ad6b81d4147d05e351852e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c7:bd:6d:d0:f9:c0:26:06:96:b3:c7:d6:b8:
34:17:48:12:1b:69:1d:f5:3e:50:ae:a9:9d:88:84:
f2:67:97:78:da:b0:e9:e2:38:a8:6f:43:94:65:54:
7a:96:7f:f7:53:de:62:5d:e4:e7:2c:fb:57:f7:4e:
8f:92:56:93:09:32:f2:31:27:86:96:80:81:cc:03:
46:29:80:dd:b0:f6:2c:6a:0a:9d:4c:dc:6f:33:91:
b9:23:e4:0a:eb:1d:a2:7c:32:bf:65:16:e4:f3:e9:
8e:50:ee:6a:23:8f:35:f5:fe:b2:ba:f9:69:55:88:
ca:48:d5:12:22:82:8d:e9:56:5c:dd:92:e0:6d:4e:
14:00:ac:37:d8:60:7f:6d:ee:14:5b:21:02:13:b3:
7b:42:2a:cb:af:4c:d3:80:3f:1c:dd:67:9a:d3:96:
a3:12:2b:ce:f4:45:4c:ec:aa:2d:73:67:fb:d3:a9:
39:a1:56:d2:fd:cc:57:98:b4:85:f3:ef:ad:f5:9f:
bf:50:75:1a:e4:ab:14:0c:09:40:e7:28:ac:d0:f1:
c2:37:f3:a5:3d:4f:4c:f4:32:31:5d:72:ae:7f:94:
53:ab:fe:f0:a7:c6:1d:eb:3d:c6:3b:3f:fa:79:ac:
4a:53:31:31:c9:17:29:fe:5f:97:15:8d:f6:3a:85:
6c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FD:5C:38:E1:C6:97:04:86:AD:6B:81:D4:14:7D:05:E3:51:85:2E
X509v3 Authority Key Identifier:
keyid:47:7E:C1:5C:A4:F9:24:D9:66:96:75:45:12:4F:65:53:10:D2:C9:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a6:81:de:56:f0:49:98:2c:66:c7:23:25:0d:d2:eb:9c:a2:
fe:d2:43:9e:7c:3f:73:a4:67:ba:e9:25:fb:f7:0d:e7:db:a2:
1c:81:ce:a5:b1:5f:ec:c2:ed:fd:84:6e:18:bc:38:4d:48:dd:
87:bf:67:80:25:89:94:79:1d:9a:db:20:f9:1c:93:55:f8:5a:
a6:b9:91:84:12:e4:c4:ee:9f:f0:02:5d:7c:a1:cd:94:e6:fc:
73:16:69:a7:9c:dd:ca:87:79:79:12:39:01:2f:86:4b:24:3f:
5c:b6:e5:ac:a0:56:86:64:eb:00:25:5d:e0:a6:27:fc:92:20:
b9:9f:66:be:48:88:cd:f5:e5:2a:bc:c0:31:69:f5:24:a5:d7:
c1:a3:db:e9:7f:fb:ac:5b:ed:c9:41:a8:a5:e4:31:5e:0e:6b:
4c:c8:3a:c5:7f:9b:99:cb:42:8c:e0:ce:25:be:58:d3:bf:2a:
6a:59:02:ca:04:f1:73:ba:0a:a9:0b:e5:d1:d9:2d:79:bf:47:
d1:6b:75:b0:21:eb:26:46:22:33:47:a3:9a:10:5d:64:db:7a:
7b:3a:39:10:8f:44:30:35:98:fe:6c:74:fb:f3:71:0f:ad:bd:
44:00:08:80:e4:7f:0b:97:c7:37:b2:4a:19:0b:63:1d:32:66:
e7:1a:0b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 20:09:29 2025 by rpki-client