Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
File: 37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft (raw, json)
Hash identifier: 9YdSYxHJD65A48F7AIr9W5n8oBA06U3t3eplmLPZBSI=
Subject key identifier: 37:4B:4B:45:9B:2A:4A:A1:2D:04:DD:94:03:B5:6C:64:65:41:F1:06
Authority key identifier: DF:B8:D9:14:05:02:C9:E0:35:30:51:89:BF:65:82:34:DB:14:F5:4C
Certificate issuer: /CN=dfb8d9140502c9e035305189bf658234db14f54c
Certificate serial: 019A71B8A215151400B1FE666EA66FC08344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
Manifest number: 0ABF
Signing time: Tue 11 Nov 2025 07:01:56 +0000
Manifest this update: Tue 11 Nov 2025 07:01:56 +0000
Manifest next update: Wed 12 Nov 2025 07:01:56 +0000
Files and hashes: 1: 37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl (hash: rw9ZJ4ax2ynOhT/vtXh+qMVl2owEHU3UI2sEEOFa/cw=)
2: kI_UKMcmunYMY9TjK1VDTbIdCXE.roa (hash: /3d7l1sDA4ix/P9CQv22eTNSFswBDUH2vFeOZFQU5WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:a2:15:15:14:00:b1:fe:66:6e:a6:6f:c0:83:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb8d9140502c9e035305189bf658234db14f54c
Validity
Not Before: Nov 11 07:01:56 2025 GMT
Not After : Nov 12 07:01:56 2025 GMT
Subject: CN=374b4b459b2a4aa12d04dd9403b56c646541f106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:30:a0:89:c9:b6:86:75:7c:41:8c:71:9e:b4:
7e:40:9f:0b:f1:6e:22:02:06:bc:77:e4:dd:60:bb:
56:01:95:b0:43:1f:12:e2:fc:5d:db:77:38:ec:b0:
34:ec:02:03:8d:1b:7a:71:48:df:d8:ec:55:91:54:
3c:3c:6c:b7:65:0c:28:29:ff:a7:06:f1:d2:4e:cc:
0c:67:d0:d2:8f:a9:97:bd:eb:33:2a:5b:e4:e3:77:
31:25:69:01:4c:54:93:95:b4:1a:bf:d4:b6:b3:a6:
6f:02:a5:49:b3:5b:e2:1a:99:dd:cf:85:6f:6a:97:
83:f4:ac:50:39:56:fb:b1:3b:02:28:c1:17:62:7c:
d1:e4:1c:af:d0:58:c6:a2:14:c3:80:17:2f:93:31:
9b:da:00:f6:80:2a:07:1b:23:55:b6:9e:fa:b1:78:
90:6b:6a:2d:1e:c5:66:1e:a9:ec:58:5a:a6:90:0f:
64:72:30:64:f0:10:3e:04:f4:99:1d:bd:1d:43:43:
45:37:8c:dd:f5:51:29:95:d6:60:de:df:88:33:3d:
16:b9:78:10:f9:04:22:3f:8b:90:b5:15:ca:e5:b9:
05:bb:2c:1b:b6:b6:82:b0:66:83:a2:bc:ca:6d:1b:
7f:82:e3:ba:c8:6e:87:a9:fa:5b:76:77:5f:3b:21:
23:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4B:4B:45:9B:2A:4A:A1:2D:04:DD:94:03:B5:6C:64:65:41:F1:06
X509v3 Authority Key Identifier:
keyid:DF:B8:D9:14:05:02:C9:E0:35:30:51:89:BF:65:82:34:DB:14:F5:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:0a:9e:a5:a0:7b:78:a0:6b:87:4a:3e:43:33:2b:5d:1b:1b:
71:66:ef:0a:4d:8e:4e:ee:be:6d:c5:22:a8:c0:26:ee:3c:12:
d9:3a:67:91:85:fa:53:34:02:3b:dc:7d:66:50:0d:de:71:05:
0c:4d:af:c1:da:45:6b:ef:7e:c1:7d:9d:c9:83:ee:72:ba:87:
d7:ed:62:99:f3:3a:53:94:7d:b7:94:fc:cb:1d:8c:9a:f5:fe:
99:19:72:f5:b3:57:cf:55:9d:8c:61:38:f2:09:68:ff:93:60:
b5:9a:ea:1e:38:42:5a:da:bc:3d:a3:ab:da:cc:59:c0:bf:67:
38:9c:49:cb:61:6b:d5:67:43:20:f6:c9:f2:23:5e:48:8e:ac:
c9:0d:02:46:66:d0:0a:7a:4a:66:63:e9:6b:89:14:65:12:1c:
36:49:58:7b:6f:e7:81:44:2b:5b:8e:95:78:2e:da:96:7a:c1:
03:d4:0a:b4:37:89:87:5b:cd:a7:81:ea:f8:b5:09:74:6a:cb:
d3:a6:0b:27:46:b1:01:fa:c6:65:d4:e2:a0:91:3f:99:7d:66:
13:a1:76:37:cf:7f:c9:b4:5e:60:7c:64:4f:d2:18:07:3b:12:
71:98:da:c9:42:e6:27:87:be:a5:e8:c6:3d:28:1d:78:97:68:
eb:5a:14:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:41 2025 by rpki-client