Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
File: 37H24AFTpJGGEbFLawP2gS7YikM.mft (raw, json)
Hash identifier: uzXUYh9tdOMKzbOQ+EdAEugzkJpfHHS2JC2fvx2t0is=
Subject key identifier: F4:09:8A:0B:CA:A1:D3:7A:42:61:EE:26:AA:45:3C:5F:DA:97:18:E8
Authority key identifier: DF:B1:F6:E0:01:53:A4:91:86:11:B1:4B:6B:03:F6:81:2E:D8:8A:43
Certificate issuer: /CN=dfb1f6e00153a4918611b14b6b03f6812ed88a43
Certificate serial: 019A7226021101ACAEB9419FC589343F013C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
Manifest number: 102B
Signing time: Tue 11 Nov 2025 09:01:24 +0000
Manifest this update: Tue 11 Nov 2025 09:01:24 +0000
Manifest next update: Wed 12 Nov 2025 09:01:24 +0000
Files and hashes: 1: 37H24AFTpJGGEbFLawP2gS7YikM.crl (hash: MztV+eIfHneruWjv+X0vnHXmHVgtXz0wha+iKhCDRQE=)
2: NZtS_yd4-bo9e2cvGKzyKvYI3pE.roa (hash: +rJHNNOfAgRLW2AYZ2GQZ4sJIXJPzKob0SOJ3Knzwec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:02:11:01:ac:ae:b9:41:9f:c5:89:34:3f:01:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb1f6e00153a4918611b14b6b03f6812ed88a43
Validity
Not Before: Nov 11 09:01:24 2025 GMT
Not After : Nov 12 09:01:24 2025 GMT
Subject: CN=f4098a0bcaa1d37a4261ee26aa453c5fda9718e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1c:a9:46:0c:67:7a:18:a9:c5:38:54:36:47:
ee:9f:ab:92:6d:a8:b4:5c:c6:01:5a:25:82:ab:45:
e8:d9:f5:18:df:38:f4:37:ac:08:a6:a4:ad:ab:54:
94:e3:5b:34:1c:bc:e3:8c:3e:c3:a3:f9:2f:24:cf:
8e:82:23:12:51:ed:80:65:92:80:44:d5:ae:70:8c:
a7:f1:33:f2:29:f5:1a:21:2f:0c:4d:87:01:4a:b4:
f2:5e:c3:b4:e5:1f:b0:af:d2:19:14:1b:a9:79:ca:
71:b9:cf:8f:ec:4e:f9:25:bd:62:d9:ae:e6:0d:49:
6b:6d:29:fe:c3:8f:fc:a8:1b:34:ce:fb:db:67:e6:
e4:6d:d0:83:ee:f0:c7:6b:34:24:ec:54:2e:14:aa:
0b:16:2a:7d:d1:3d:b6:b1:37:0d:84:17:af:9b:83:
44:31:1d:40:57:83:43:90:b8:ae:10:f6:0e:35:6f:
34:ff:56:81:b0:a2:77:ea:9f:4b:46:bc:17:a7:81:
c2:43:a1:00:cc:ba:a0:f8:f3:a3:1b:f9:40:e5:94:
ed:08:b8:c5:5b:b8:4c:fc:c0:d7:2a:89:dd:9d:b4:
3f:44:33:a9:e0:72:e9:5d:48:f1:01:e0:6f:ab:4c:
1f:d4:cf:28:b9:53:1f:a3:39:0a:51:77:e5:b1:21:
af:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:09:8A:0B:CA:A1:D3:7A:42:61:EE:26:AA:45:3C:5F:DA:97:18:E8
X509v3 Authority Key Identifier:
keyid:DF:B1:F6:E0:01:53:A4:91:86:11:B1:4B:6B:03:F6:81:2E:D8:8A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:07:13:eb:f4:c6:f8:65:bd:fe:c7:40:06:94:90:be:70:55:
0f:e1:1e:bf:5f:96:e7:86:19:f8:3f:4b:9d:ef:0d:7f:2b:87:
08:44:85:11:66:0d:f3:99:9e:39:23:5a:f7:3f:62:39:14:a4:
9c:ce:65:14:b4:ed:b9:23:05:4f:59:63:a7:36:81:cd:68:93:
11:30:4e:37:14:28:b2:27:49:f3:b3:e3:46:b4:65:de:64:a5:
57:41:59:7e:d8:3d:41:84:fc:91:d8:e6:21:76:26:63:eb:2d:
ca:2a:7e:dd:6a:4f:00:9a:6f:51:01:d0:e6:01:53:c2:46:3a:
10:3a:9a:ba:72:22:26:25:77:ab:16:83:2f:a1:98:5b:99:bc:
7f:f8:72:1d:7c:82:0e:5c:63:b9:de:e8:95:93:ae:37:60:19:
8c:3f:e4:62:cd:13:1c:fd:57:a0:d2:43:98:8a:31:b2:f8:29:
b3:33:7c:a2:e8:d1:81:45:b6:79:ad:8e:71:d3:bf:fc:53:0b:
83:55:18:d2:1f:e6:d0:b5:0c:fa:b4:35:e2:2c:ce:18:6e:19:
c7:93:90:2a:21:f8:1f:46:bd:af:a1:ec:aa:a5:2d:9e:e8:16:
f0:a5:b5:f7:3e:44:3b:14:1a:85:15:98:93:fb:1c:fe:39:f8:
69:b7:eb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:33 2025 by rpki-client