Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
File: 37H24AFTpJGGEbFLawP2gS7YikM.mft (raw, json)
Hash identifier: e9wWA/g/s4IsoIlSZQdfpvNWaAZiryXE1dG46B5Xtns=
Subject key identifier: 43:1E:EA:44:BE:5C:26:27:6B:C8:53:21:27:7F:16:ED:D7:1C:11:B0
Authority key identifier: DF:B1:F6:E0:01:53:A4:91:86:11:B1:4B:6B:03:F6:81:2E:D8:8A:43
Certificate issuer: /CN=dfb1f6e00153a4918611b14b6b03f6812ed88a43
Certificate serial: 01974CD6F0BE4B707BE4BCA05F888066CEA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
Manifest number: 0E8A
Signing time: Sun 08 Jun 2025 00:00:44 +0000
Manifest this update: Sun 08 Jun 2025 00:00:44 +0000
Manifest next update: Mon 09 Jun 2025 00:00:44 +0000
Files and hashes: 1: 37H24AFTpJGGEbFLawP2gS7YikM.crl (hash: AOmoAUBoKGGInMT04PibA2X218KNKVn4xRoXwtacMRU=)
2: NZtS_yd4-bo9e2cvGKzyKvYI3pE.roa (hash: +rJHNNOfAgRLW2AYZ2GQZ4sJIXJPzKob0SOJ3Knzwec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:f0:be:4b:70:7b:e4:bc:a0:5f:88:80:66:ce:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb1f6e00153a4918611b14b6b03f6812ed88a43
Validity
Not Before: Jun 8 00:00:44 2025 GMT
Not After : Jun 9 00:00:44 2025 GMT
Subject: CN=431eea44be5c26276bc85321277f16edd71c11b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:65:99:62:79:04:4b:db:5c:d6:18:72:a5:8a:
5b:96:ef:f8:89:4e:80:cb:ab:cc:b0:c4:7b:86:c5:
6e:95:56:5d:3c:a9:11:44:e3:ab:88:80:4f:8b:8b:
15:17:64:03:5e:02:c7:89:29:54:e3:53:88:86:af:
86:b6:20:bc:f4:f1:bc:6a:a4:a1:1f:2d:94:ac:a4:
13:dd:1d:d7:a9:b4:49:bf:34:8a:5e:05:bb:1e:8e:
d7:c1:37:18:ac:cf:94:c1:3d:9e:44:81:de:35:31:
de:d0:1d:56:b1:18:e8:bf:2e:43:e2:a0:ad:2e:f8:
dc:23:63:c3:85:5c:bd:e2:62:9c:6a:dd:40:e1:fb:
35:65:de:da:18:7b:bc:4e:c6:88:55:4b:62:7f:e3:
47:70:a7:f5:81:0f:da:18:b6:b1:1d:52:68:74:e4:
f4:d2:f5:5c:06:e7:eb:f8:6f:08:77:7d:ec:a4:d9:
ae:dc:76:54:e3:e2:1f:ec:e5:cb:81:9a:8b:ed:87:
80:35:94:3e:43:74:08:b8:55:58:ec:55:3c:fb:9b:
24:b3:25:81:35:ca:e9:4e:e4:4d:25:bd:57:bf:77:
5f:ce:bc:df:6d:f8:ba:bd:8b:62:86:e5:4b:4b:dd:
fd:ba:a9:5b:0e:f1:ce:8a:ed:15:2c:30:39:9e:c6:
c7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1E:EA:44:BE:5C:26:27:6B:C8:53:21:27:7F:16:ED:D7:1C:11:B0
X509v3 Authority Key Identifier:
keyid:DF:B1:F6:E0:01:53:A4:91:86:11:B1:4B:6B:03:F6:81:2E:D8:8A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:6b:ee:5d:76:d4:6d:d6:0a:03:76:84:04:7d:f1:33:f1:b5:
03:18:6e:d4:86:17:bb:31:4a:5a:e5:0f:15:fd:d4:67:9b:14:
56:30:21:04:30:d6:56:ed:3b:52:cd:df:f4:82:e1:73:1c:b4:
d0:46:55:f0:34:66:08:62:48:c2:75:04:47:42:07:e2:3c:55:
49:23:9a:a1:59:38:6d:0a:44:a9:27:59:40:70:ee:5a:35:b7:
e8:82:a8:e6:2f:e3:52:c2:7c:ec:b1:37:5b:da:3a:69:0c:89:
33:dd:2a:38:31:df:32:29:d1:b1:7f:16:e0:ba:24:2c:a3:94:
1b:0c:45:eb:e2:31:a9:ca:fe:cd:a6:0a:bd:39:df:f6:c5:9d:
7d:82:e3:e2:bc:b3:13:e7:57:fb:0e:ee:a0:75:38:c9:53:93:
4a:03:2c:6a:d4:23:4e:10:1f:26:34:a0:7d:da:09:0c:28:7b:
0f:ee:51:5a:d7:79:ff:c5:ed:7b:26:a7:2d:08:e2:6b:39:33:
cf:27:42:c4:2a:b4:94:14:9a:17:d9:e8:45:64:d5:c0:2b:36:
fd:20:9a:ad:3e:af:45:da:9a:ec:c6:f5:39:9c:2b:eb:37:4a:
92:c9:6e:00:e6:88:c1:71:e6:75:ee:b1:5d:e2:07:d7:a5:3d:
58:71:69:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:43:55 2025 by rpki-client