Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
File: R37BXKT5JNlmlnVFEk9lUxDSyXM.mft (raw, json)
Hash identifier: nRu8gJjimKpk6KAE26AU4s7f8XQHNI1OFFiqGDsEmq8=
Subject key identifier: A6:2D:BD:25:E3:F3:C6:C4:4F:A7:53:AF:07:EC:B5:5B:F8:57:B5:D7
Authority key identifier: 47:7E:C1:5C:A4:F9:24:D9:66:96:75:45:12:4F:65:53:10:D2:C9:73
Certificate issuer: /CN=477ec15ca4f924d966967545124f655310d2c973
Certificate serial: 019A730133EC177A4EDDC90BFF71685E8606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
Manifest number: 067F
Signing time: Tue 11 Nov 2025 13:00:49 +0000
Manifest this update: Tue 11 Nov 2025 13:00:49 +0000
Manifest next update: Wed 12 Nov 2025 13:00:49 +0000
Files and hashes: 1: R37BXKT5JNlmlnVFEk9lUxDSyXM.crl (hash: 8liU0/dOoOvyu9lD+PGjg36e02sgYRI0/vyma/Pduac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:33:ec:17:7a:4e:dd:c9:0b:ff:71:68:5e:86:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477ec15ca4f924d966967545124f655310d2c973
Validity
Not Before: Nov 11 13:00:49 2025 GMT
Not After : Nov 12 13:00:49 2025 GMT
Subject: CN=a62dbd25e3f3c6c44fa753af07ecb55bf857b5d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8b:16:f9:15:7e:27:e3:92:b4:40:f0:e8:09:
05:5a:40:31:06:f3:fc:79:b1:3d:91:b4:68:59:59:
1b:39:00:ea:4b:ff:db:f6:ef:56:6e:17:05:33:63:
36:da:33:35:c0:d2:3b:80:cf:1a:a1:9c:fc:ad:cd:
94:14:c6:05:cf:2e:0a:09:85:f9:93:87:e0:a5:37:
a1:c6:10:d4:de:01:de:bd:73:9e:76:86:70:bc:5a:
95:c0:2f:75:40:51:e0:2e:6b:7c:0b:95:5d:08:11:
17:9f:4f:c2:c0:80:5a:4c:bf:9a:0c:0f:13:d2:19:
40:1f:49:da:f2:d0:20:7a:1d:a5:0f:e2:5b:53:b1:
d5:aa:a7:19:4a:75:27:c7:17:0a:f8:d8:5d:70:46:
53:f3:04:14:ac:ce:9e:d7:0f:40:0e:29:34:34:8e:
d0:4d:6d:92:10:f0:77:25:d1:3e:21:7b:97:59:03:
07:cf:9c:1b:f0:c1:0a:3e:f9:0b:23:ca:53:2d:a9:
e7:de:da:48:96:97:d1:15:0b:88:b1:c6:c2:76:90:
5c:ed:27:04:d7:0f:72:d2:6d:0e:f9:be:e4:a1:62:
98:ee:90:0e:2a:b7:f1:02:4f:33:e9:9f:d2:6c:46:
b5:42:bf:be:18:e5:eb:f5:ac:f7:f0:34:dc:bc:55:
24:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2D:BD:25:E3:F3:C6:C4:4F:A7:53:AF:07:EC:B5:5B:F8:57:B5:D7
X509v3 Authority Key Identifier:
keyid:47:7E:C1:5C:A4:F9:24:D9:66:96:75:45:12:4F:65:53:10:D2:C9:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:78:ba:a5:36:c0:34:84:ca:00:a7:0b:13:11:6e:23:75:17:
b0:a7:ce:7b:88:da:40:fe:de:f2:39:eb:bb:9a:54:50:20:f2:
c0:00:2d:6c:bc:97:87:08:59:3a:1d:6e:45:e2:27:90:36:e2:
82:84:70:9b:be:26:a6:24:23:dc:26:82:8b:70:6c:64:f4:53:
f5:c5:ff:bb:36:5d:51:f3:51:4f:2f:b8:1a:ca:4a:ce:a9:b7:
0b:db:65:26:a4:db:2a:cf:53:e2:fc:78:d2:b6:97:48:1a:63:
e9:50:07:69:f7:ce:fd:e9:66:c8:37:c7:ba:dc:79:a6:a4:49:
01:c7:89:4b:86:da:9c:4f:25:0f:45:f1:e6:34:17:b8:eb:31:
fe:78:25:f0:ed:2d:41:0a:7d:75:77:dd:2a:f4:ce:32:56:4f:
15:d3:f8:86:28:2a:6f:94:a1:6f:9a:5c:a1:13:59:d8:9c:a1:
ba:b7:b2:1e:1d:20:c8:3b:03:33:21:35:a8:56:32:83:6c:3b:
1c:41:89:65:0d:a5:ce:1e:d5:9f:9b:3e:1b:21:43:01:6e:28:
cb:02:9f:5c:08:ec:b2:4d:09:71:6f:cf:01:2d:ab:03:89:00:
30:32:29:77:d2:c2:bd:b2:f4:8c:08:a1:c6:6b:d3:b7:15:23:
d4:79:32:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzATPsF3pO3ckL/3FoXoYGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3N2VjMTVjYTRmOTI0ZDk2Njk2NzU0NTEyNGY2NTUzMTBk
MmM5NzMwHhcNMjUxMTExMTMwMDQ5WhcNMjUxMTEyMTMwMDQ5WjAzMTEwLwYDVQQD
EyhhNjJkYmQyNWUzZjNjNmM0NGZhNzUzYWYwN2VjYjU1YmY4NTdiNWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYsW+RV+J+OStEDw6AkFWkAxBvP8
ebE9kbRoWVkbOQDqS//b9u9WbhcFM2M22jM1wNI7gM8aoZz8rc2UFMYFzy4KCYX5
k4fgpTehxhDU3gHevXOedoZwvFqVwC91QFHgLmt8C5VdCBEXn0/CwIBaTL+aDA8T
0hlAH0na8tAgeh2lD+JbU7HVqqcZSnUnxxcK+NhdcEZT8wQUrM6e1w9ADik0NI7Q
TW2SEPB3JdE+IXuXWQMHz5wb8MEKPvkLI8pTLann3tpIlpfRFQuIscbCdpBc7ScE
1w9y0m0O+b7koWKY7pAOKrfxAk8z6Z/SbEa1Qr++GOXr9az38DTcvFUkDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYtvSXj88bET6dTrwfstVv4V7XXMB8GA1UdIwQY
MBaAFEd+wVyk+STZZpZ1RRJPZVMQ0slzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjM3QlhLVDVKTmxtbG5WRkVrOWxVeERTeVhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xYTNlNDktYzVkNC00NjliLThlODUt
M2M5YTY2YmFjMzk1LzEvUjM3QlhLVDVKTmxtbG5WRkVrOWxVeERTeVhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8xYTNlNDktYzVkNC00NjliLThlODUtM2M5YTY2YmFjMzk1
LzEvUjM3QlhLVDVKTmxtbG5WRkVrOWxVeERTeVhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArHi6pTbA
NITKAKcLExFuI3UXsKfOe4jaQP7e8jnru5pUUCDywAAtbLyXhwhZOh1uReInkDbi
goRwm74mpiQj3CaCi3BsZPRT9cX/uzZdUfNRTy+4GspKzqm3C9tlJqTbKs9T4vx4
0raXSBpj6VAHaffO/elmyDfHutx5pqRJAceJS4banE8lD0Xx5jQXuOsx/ngl8O0t
QQp9dXfdKvTOMlZPFdP4higqb5Shb5pcoRNZ2JyhureyHh0gyDsDMyE1qFYyg2w7
HEGJZQ2lzh7Vn5s+GyFDAW4oywKfXAjssk0JcW/PAS2rA4kAMDIpd9LCvbL0jAih
xmvTtxUj1HkyRg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:54 2025 by rpki-client